6 CFLAGS = -MMD -O2 -Wall -g
9 # define HOSTAPD_DUMP_STATE to include SIGUSR1 handler for dumping state to
10 # a file (undefine it, if you want to save in binary size)
11 CFLAGS += -DHOSTAPD_DUMP_STATE
14 CFLAGS += -I../src/crypto
15 CFLAGS += -I../src/utils
17 # Uncomment following line and set the path to your kernel tree include
18 # directory if your C library does not include all header files.
19 # CFLAGS += -DUSE_KERNEL_HEADERS -I/usr/src/linux/include
24 ifdef CONFIG_NATIVE_WINDOWS
31 ifeq ($(CONFIG_OS), internal)
32 CFLAGS += -DOS_NO_C_LIB_DEFINES
35 ifdef CONFIG_NATIVE_WINDOWS
36 CFLAGS += -DCONFIG_NATIVE_WINDOWS
40 OBJS = hostapd.o main.o ieee802_1x.o \
41 config.o ieee802_11_auth.o \
43 preauth.o pmksa_cache.o \
45 tkip_countermeasures.o \
52 OBJS += ../src/drivers/drivers.o
53 OBJS += ../src/drivers/scan_helpers.o
56 OBJS += ../src/utils/eloop.o
57 OBJS += ../src/utils/common.o
58 OBJS += ../src/utils/wpa_debug.o
59 OBJS += ../src/utils/wpabuf.o
60 OBJS += ../src/utils/os_$(CONFIG_OS).o
61 OBJS += ../src/utils/ip_addr.o
63 OBJS += ../src/common/ieee802_11_common.o
64 OBJS += ../src/common/wpa_common.o
66 OBJS += ../src/eapol_auth/eapol_auth_sm.o
68 ifdef CONFIG_NO_RADIUS
69 CFLAGS += -DCONFIG_NO_RADIUS
70 CONFIG_NO_ACCOUNTING=y
72 OBJS += ../src/radius/radius.o
73 OBJS += ../src/radius/radius_client.o
76 ifdef CONFIG_NO_ACCOUNTING
77 CFLAGS += -DCONFIG_NO_ACCOUNTING
83 CFLAGS += -DCONFIG_NO_VLAN
88 ifdef CONFIG_NO_CTRL_IFACE
89 CFLAGS += -DCONFIG_NO_CTRL_IFACE
92 OBJS += ctrl_iface_ap.o
95 OBJS += ../src/crypto/md5.o
97 CFLAGS += -DCONFIG_CTRL_IFACE -DCONFIG_CTRL_IFACE_UNIX
100 CFLAGS += -DCONFIG_IAPP
104 ifdef CONFIG_RSN_PREAUTH
105 CFLAGS += -DCONFIG_RSN_PREAUTH
110 CFLAGS += -DCONFIG_PEERKEY
114 ifdef CONFIG_IEEE80211W
115 CFLAGS += -DCONFIG_IEEE80211W
120 ifdef CONFIG_IEEE80211R
121 CFLAGS += -DCONFIG_IEEE80211R
128 ifdef CONFIG_IEEE80211N
129 CFLAGS += -DCONFIG_IEEE80211N
132 include ../src/drivers/drivers.mak
133 OBJS += $(DRV_AP_OBJS)
134 CFLAGS += $(DRV_AP_CFLAGS)
135 LDFLAGS += $(DRV_AP_LDFLAGS)
136 LIBS += $(DRV_AP_LIBS)
138 ifdef CONFIG_L2_PACKET
139 ifdef CONFIG_DNET_PCAP
140 ifdef CONFIG_L2_FREEBSD
142 OBJS += ../src/l2_packet/l2_packet_freebsd.o
144 LIBS += -ldnet -lpcap
145 OBJS += ../src/l2_packet/l2_packet_pcap.o
148 OBJS += ../src/l2_packet/l2_packet_linux.o
151 OBJS += ../src/l2_packet/l2_packet_none.o
156 CFLAGS += -DEAP_SERVER_MD5
157 OBJS += ../src/eap_server/eap_md5.o
162 CFLAGS += -DEAP_SERVER_TLS
163 OBJS += ../src/eap_server/eap_tls.o
167 ifdef CONFIG_EAP_PEAP
168 CFLAGS += -DEAP_SERVER_PEAP
169 OBJS += ../src/eap_server/eap_peap.o
170 OBJS += ../src/eap_common/eap_peap_common.o
172 CONFIG_EAP_MSCHAPV2=y
175 ifdef CONFIG_EAP_TTLS
176 CFLAGS += -DEAP_SERVER_TTLS
177 OBJS += ../src/eap_server/eap_ttls.o
182 ifdef CONFIG_EAP_MSCHAPV2
183 CFLAGS += -DEAP_SERVER_MSCHAPV2
184 OBJS += ../src/eap_server/eap_mschapv2.o
189 CFLAGS += -DEAP_SERVER_GTC
190 OBJS += ../src/eap_server/eap_gtc.o
194 CFLAGS += -DEAP_SERVER_SIM
195 OBJS += ../src/eap_server/eap_sim.o
196 CONFIG_EAP_SIM_COMMON=y
201 CFLAGS += -DEAP_SERVER_AKA
202 OBJS += ../src/eap_server/eap_aka.o
203 CONFIG_EAP_SIM_COMMON=y
208 ifdef CONFIG_EAP_AKA_PRIME
209 CFLAGS += -DEAP_SERVER_AKA_PRIME
212 ifdef CONFIG_EAP_SIM_COMMON
213 OBJS += ../src/eap_common/eap_sim_common.o
214 # Example EAP-SIM/AKA interface for GSM/UMTS authentication. This can be
215 # replaced with another file implementating the interface specified in
217 OBJS += ../src/eap_server/eap_sim_db.o
222 CFLAGS += -DEAP_SERVER_PAX
223 OBJS += ../src/eap_server/eap_pax.o ../src/eap_common/eap_pax_common.o
227 CFLAGS += -DEAP_SERVER_PSK
228 OBJS += ../src/eap_server/eap_psk.o ../src/eap_common/eap_psk_common.o
234 ifdef CONFIG_EAP_SAKE
235 CFLAGS += -DEAP_SERVER_SAKE
236 OBJS += ../src/eap_server/eap_sake.o ../src/eap_common/eap_sake_common.o
239 ifdef CONFIG_EAP_GPSK
240 CFLAGS += -DEAP_SERVER_GPSK
241 OBJS += ../src/eap_server/eap_gpsk.o ../src/eap_common/eap_gpsk_common.o
242 ifdef CONFIG_EAP_GPSK_SHA256
243 CFLAGS += -DEAP_SERVER_GPSK_SHA256
249 ifdef CONFIG_EAP_VENDOR_TEST
250 CFLAGS += -DEAP_SERVER_VENDOR_TEST
251 OBJS += ../src/eap_server/eap_vendor_test.o
254 ifdef CONFIG_EAP_FAST
255 CFLAGS += -DEAP_SERVER_FAST
256 OBJS += ../src/eap_server/eap_fast.o
257 OBJS += ../src/eap_common/eap_fast_common.o
264 CFLAGS += -DCONFIG_WPS -DEAP_SERVER_WSC
265 OBJS += ../src/utils/uuid.o
266 OBJS += wps_hostapd.o
267 OBJS += ../src/eap_server/eap_wsc.o ../src/eap_common/eap_wsc_common.o
268 OBJS += ../src/wps/wps.o
269 OBJS += ../src/wps/wps_common.o
270 OBJS += ../src/wps/wps_attr_parse.o
271 OBJS += ../src/wps/wps_attr_build.o
272 OBJS += ../src/wps/wps_attr_process.o
273 OBJS += ../src/wps/wps_dev_attr.o
274 OBJS += ../src/wps/wps_enrollee.o
275 OBJS += ../src/wps/wps_registrar.o
283 CFLAGS += -DCONFIG_WPS_UFD
284 OBJS += ../src/wps/wps_ufd.o
289 CFLAGS += -DCONFIG_WPS_NFC
290 OBJS += ../src/wps/ndef.o
291 OBJS += ../src/wps/wps_nfc.o
293 ifdef CONFIG_WPS_NFC_PN531
294 PN531_PATH ?= /usr/local/src/nfc
295 CFLAGS += -DCONFIG_WPS_NFC_PN531
296 CFLAGS += -I${PN531_PATH}/inc
297 OBJS += ../src/wps/wps_nfc_pn531.o
298 LIBS += ${PN531_PATH}/lib/wpsnfc.dll
299 LIBS += ${PN531_PATH}/lib/libnfc_mapping_pn53x.dll
304 CFLAGS += -DCONFIG_WPS_OOB
307 ifdef CONFIG_WPS_UPNP
308 CFLAGS += -DCONFIG_WPS_UPNP
309 OBJS += ../src/wps/wps_upnp.o
310 OBJS += ../src/wps/wps_upnp_ssdp.o
311 OBJS += ../src/wps/wps_upnp_web.o
312 OBJS += ../src/wps/wps_upnp_event.o
313 OBJS += ../src/wps/upnp_xml.o
314 OBJS += ../src/wps/httpread.o
315 OBJS += ../src/wps/http_client.o
316 OBJS += ../src/wps/http_server.o
321 ifdef CONFIG_EAP_IKEV2
322 CFLAGS += -DEAP_SERVER_IKEV2
323 OBJS += ../src/eap_server/eap_ikev2.o ../src/eap_server/ikev2.o
324 OBJS += ../src/eap_common/eap_ikev2_common.o ../src/eap_common/ikev2_common.o
331 CFLAGS += -DEAP_SERVER_TNC
332 OBJS += ../src/eap_server/eap_tnc.o
333 OBJS += ../src/eap_server/tncs.o
335 ifndef CONFIG_DRIVER_BSD
340 # Basic EAP functionality is needed for EAPOL
341 OBJS += ../src/eap_server/eap.o
342 OBJS += ../src/eap_common/eap_common.o
343 OBJS += ../src/eap_server/eap_methods.o
344 OBJS += ../src/eap_server/eap_identity.o
347 CFLAGS += -DEAP_SERVER
351 CFLAGS += -DPKCS12_FUNCS
355 OBJS += ../src/crypto/ms_funcs.o
361 OBJS += ../src/eap_common/chap.o
366 # Shared TLS functions (needed for EAP_TLS, EAP_PEAP, and EAP_TTLS)
367 CFLAGS += -DEAP_TLS_FUNCS
368 OBJS += ../src/eap_server/eap_tls_common.o
376 ifeq ($(CONFIG_TLS), openssl)
378 OBJS += ../src/crypto/tls_openssl.o
381 OBJS += ../src/crypto/crypto_openssl.o
382 HOBJS += ../src/crypto/crypto_openssl.o
383 ifdef NEED_FIPS186_2_PRF
384 OBJS += ../src/crypto/fips_prf_openssl.o
390 ifeq ($(CONFIG_TLS), gnutls)
392 OBJS += ../src/crypto/tls_gnutls.o
393 LIBS += -lgnutls -lgpg-error
394 ifdef CONFIG_GNUTLS_EXTRA
395 CFLAGS += -DCONFIG_GNUTLS_EXTRA
396 LIBS += -lgnutls-extra
399 OBJS += ../src/crypto/crypto_gnutls.o
400 HOBJS += ../src/crypto/crypto_gnutls.o
401 ifdef NEED_FIPS186_2_PRF
402 OBJS += ../src/crypto/fips_prf_gnutls.o
406 CONFIG_INTERNAL_SHA256=y
407 CONFIG_INTERNAL_RC4=y
408 CONFIG_INTERNAL_DH_GROUP5=y
411 ifeq ($(CONFIG_TLS), schannel)
413 OBJS += ../src/crypto/tls_schannel.o
415 OBJS += ../src/crypto/crypto_cryptoapi.o
416 OBJS_p += ../src/crypto/crypto_cryptoapi.o
417 CONFIG_INTERNAL_SHA256=y
418 CONFIG_INTERNAL_RC4=y
419 CONFIG_INTERNAL_DH_GROUP5=y
422 ifeq ($(CONFIG_TLS), nss)
424 OBJS += ../src/crypto/tls_nss.o
427 OBJS += ../src/crypto/crypto_nss.o
428 ifdef NEED_FIPS186_2_PRF
429 OBJS += ../src/crypto/fips_prf_nss.o
433 CONFIG_INTERNAL_MD4=y
434 CONFIG_INTERNAL_DH_GROUP5=y
437 ifeq ($(CONFIG_TLS), internal)
439 CONFIG_CRYPTO=internal
442 OBJS += ../src/crypto/tls_internal.o
443 OBJS += ../src/tls/tlsv1_common.o
444 OBJS += ../src/tls/tlsv1_record.o
445 OBJS += ../src/tls/tlsv1_cred.o
446 OBJS += ../src/tls/tlsv1_server.o
447 OBJS += ../src/tls/tlsv1_server_write.o
448 OBJS += ../src/tls/tlsv1_server_read.o
449 OBJS += ../src/tls/asn1.o
450 OBJS += ../src/tls/rsa.o
451 OBJS += ../src/tls/x509v3.o
452 OBJS += ../src/tls/pkcs1.o
453 OBJS += ../src/tls/pkcs5.o
454 OBJS += ../src/tls/pkcs8.o
458 CFLAGS += -DCONFIG_TLS_INTERNAL
459 CFLAGS += -DCONFIG_TLS_INTERNAL_SERVER
462 OBJS += ../src/tls/bignum.o
464 ifeq ($(CONFIG_CRYPTO), libtomcrypt)
465 CFLAGS += -DCONFIG_INTERNAL_X509
466 OBJS += ../src/crypto/crypto_libtomcrypt.o
467 LIBS += -ltomcrypt -ltfm
468 LIBS_h += -ltomcrypt -ltfm
469 CONFIG_INTERNAL_SHA256=y
470 CONFIG_INTERNAL_RC4=y
471 CONFIG_INTERNAL_DH_GROUP5=y
473 ifeq ($(CONFIG_CRYPTO), internal)
474 CFLAGS += -DCONFIG_INTERNAL_X509
475 OBJS += ../src/crypto/crypto_internal.o
477 CFLAGS += -DCONFIG_CRYPTO_INTERNAL
478 ifdef CONFIG_INTERNAL_LIBTOMMATH
479 CFLAGS += -DCONFIG_INTERNAL_LIBTOMMATH
480 ifdef CONFIG_INTERNAL_LIBTOMMATH_FAST
487 CONFIG_INTERNAL_AES=y
488 CONFIG_INTERNAL_DES=y
489 CONFIG_INTERNAL_SHA1=y
490 CONFIG_INTERNAL_MD4=y
491 CONFIG_INTERNAL_MD5=y
492 CONFIG_INTERNAL_SHA256=y
493 CONFIG_INTERNAL_RC4=y
494 CONFIG_INTERNAL_DH_GROUP5=y
496 ifeq ($(CONFIG_CRYPTO), cryptoapi)
497 OBJS += ../src/crypto/crypto_cryptoapi.o
498 OBJS_p += ../src/crypto/crypto_cryptoapi.o
499 CFLAGS += -DCONFIG_CRYPTO_CRYPTOAPI
500 CONFIG_INTERNAL_SHA256=y
501 CONFIG_INTERNAL_RC4=y
505 ifeq ($(CONFIG_TLS), none)
507 OBJS += ../src/crypto/tls_none.o
508 CFLAGS += -DEAP_TLS_NONE
509 CONFIG_INTERNAL_AES=y
510 CONFIG_INTERNAL_SHA1=y
511 CONFIG_INTERNAL_MD5=y
513 OBJS += ../src/crypto/crypto_none.o
514 OBJS_p += ../src/crypto/crypto_none.o
515 CONFIG_INTERNAL_SHA256=y
516 CONFIG_INTERNAL_RC4=y
520 OBJS += ../src/crypto/tls_none.o
521 ifeq ($(CONFIG_TLS), internal)
522 CONFIG_INTERNAL_AES=y
523 CONFIG_INTERNAL_SHA1=y
524 CONFIG_INTERNAL_MD5=y
525 CONFIG_INTERNAL_RC4=y
530 CFLAGS += -DCONFIG_MODEXP
533 AESOBJS = # none so far
534 ifdef CONFIG_INTERNAL_AES
535 AESOBJS += ../src/crypto/aes-internal.o ../src/crypto/aes-internal-enc.o
538 AESOBJS += ../src/crypto/aes-wrap.o
540 AESOBJS += ../src/crypto/aes-eax.o
544 AESOBJS += ../src/crypto/aes-ctr.o
546 ifdef NEED_AES_ENCBLOCK
547 AESOBJS += ../src/crypto/aes-encblock.o
550 AESOBJS += ../src/crypto/aes-omac1.o
552 ifdef NEED_AES_UNWRAP
554 AESOBJS += ../src/crypto/aes-unwrap.o
558 AESOBJS += ../src/crypto/aes-cbc.o
561 ifdef CONFIG_INTERNAL_AES
562 AESOBJS += ../src/crypto/aes-internal-dec.o
570 SHA1OBJS += ../src/crypto/sha1.o
571 ifdef CONFIG_INTERNAL_SHA1
572 SHA1OBJS += ../src/crypto/sha1-internal.o
573 ifdef NEED_FIPS186_2_PRF
574 SHA1OBJS += ../src/crypto/fips_prf_internal.o
577 SHA1OBJS += ../src/crypto/sha1-pbkdf2.o
579 SHA1OBJS += ../src/crypto/sha1-tprf.o
582 SHA1OBJS += ../src/crypto/sha1-tlsprf.o
591 ifdef CONFIG_INTERNAL_MD5
592 OBJS += ../src/crypto/md5-internal.o
597 ifdef CONFIG_INTERNAL_MD4
598 OBJS += ../src/crypto/md4-internal.o
603 ifdef CONFIG_INTERNAL_DES
604 OBJS += ../src/crypto/des-internal.o
609 ifdef CONFIG_INTERNAL_RC4
610 OBJS += ../src/crypto/rc4.o
615 OBJS += ../src/crypto/sha256.o
616 ifdef CONFIG_INTERNAL_SHA256
617 OBJS += ../src/crypto/sha256-internal.o
621 ifdef CONFIG_INTERNAL_DH_GROUP5
623 OBJS += ../src/crypto/dh_groups.o
624 OBJS += ../src/crypto/dh_group5.o
625 ifdef NEED_DH_GROUPS_ALL
626 CFLAGS += -DALL_DH_GROUPS
630 ifdef NEED_DH_GROUPS_ALL
631 OBJS += ../src/crypto/dh_groups.o
632 CFLAGS += -DALL_DH_GROUPS
636 ifdef CONFIG_RADIUS_SERVER
637 CFLAGS += -DRADIUS_SERVER
638 OBJS += ../src/radius/radius_server.o
642 CFLAGS += -DCONFIG_IPV6
645 ifdef CONFIG_DRIVER_RADIUS_ACL
646 CFLAGS += -DCONFIG_DRIVER_RADIUS_ACL
649 ifdef CONFIG_FULL_DYNAMIC_VLAN
650 # define CONFIG_FULL_DYNAMIC_VLAN to have hostapd manipulate bridges
651 # and vlan interfaces for the vlan feature.
652 CFLAGS += -DCONFIG_FULL_DYNAMIC_VLAN
656 OBJS += ../src/utils/base64.o
660 OBJS += beacon.o wme.o ap_list.o ieee802_11.o
661 OBJS += hw_features.o
662 CFLAGS += -DNEED_AP_MLME
665 ifdef CONFIG_NO_STDOUT_DEBUG
666 CFLAGS += -DCONFIG_NO_STDOUT_DEBUG
669 ALL=hostapd hostapd_cli
671 all: verify_config $(ALL)
681 $(Q)$(CC) -c -o $@ $(CFLAGS) $<
685 @if [ ! -r .config ]; then \
686 echo 'Building hostapd requires a configuration file'; \
687 echo '(.config). See README for more instructions. You can'; \
688 echo 'run "cp defconfig .config" to create an example'; \
689 echo 'configuration.'; \
694 for i in $(ALL); do cp $$i /usr/local/bin/$$i; done
696 ../src/drivers/build.hostapd:
697 @if [ -e ../src/drivers/build.wpa_supplicant ]; then \
698 $(MAKE) -C ../src/drivers clean; \
700 @touch ../src/drivers/build.hostapd
702 BCHECK=../src/drivers/build.hostapd
704 hostapd: $(BCHECK) $(OBJS)
705 $(CC) $(LDFLAGS) -o hostapd $(OBJS) $(LIBS)
707 OBJS_c = hostapd_cli.o ../src/common/wpa_ctrl.o ../src/utils/os_$(CONFIG_OS).o
708 hostapd_cli: $(OBJS_c)
709 $(CC) $(LDFLAGS) -o hostapd_cli $(OBJS_c)
711 NOBJS = nt_password_hash.o ../src/crypto/ms_funcs.o $(SHA1OBJS) ../src/crypto/rc4.o ../src/crypto/md5.o
712 ifdef CONFIG_INTERNAL_MD5
713 NOBJS += ../src/crypto/md5-internal.o
715 NOBJS += ../src/crypto/crypto_openssl.o ../src/utils/os_$(CONFIG_OS).o
720 HOBJS += ../src/hlr_auc_gw/hlr_auc_gw.o ../src/utils/common.o ../src/utils/wpa_debug.o ../src/utils/os_$(CONFIG_OS).o ../src/utils/wpabuf.o ../src/hlr_auc_gw/milenage.o
721 HOBJS += ../src/crypto/aes-encblock.o
722 ifdef CONFIG_INTERNAL_AES
723 HOBJS += ../src/crypto/aes-internal.o
724 HOBJS += ../src/crypto/aes-internal-enc.o
727 nt_password_hash: $(NOBJS)
728 $(CC) $(LDFLAGS) -o nt_password_hash $(NOBJS) $(LIBS_n)
731 $(CC) $(LDFLAGS) -o hlr_auc_gw $(HOBJS) $(LIBS_h)
734 $(MAKE) -C ../src clean
735 rm -f core *~ *.o hostapd hostapd_cli nt_password_hash hlr_auc_gw
738 TEST_SRC_MILENAGE = ../src/hlr_auc_gw/milenage.c ../src/crypto/aes-internal.c ../src/crypto/aes-internal-dec.c \
739 ../src/crypto/aes-cbc.c \
740 ../src/crypto/aes-ctr.c \
741 ../src/crypto/aes-eax.c \
742 ../src/crypto/aes-encblock.c \
743 ../src/crypto/aes-internal-enc.c \
744 ../src/crypto/aes-omac1.c \
745 ../src/crypto/aes-unwrap.c \
746 ../src/crypto/aes-wrap.c \
747 ../src/utils/common.c ../src/utils/wpa_debug.o ../src/utils/os_$(CONFIG_OS).c
748 test-milenage: $(TEST_SRC_MILENAGE)
749 $(CC) $(LDFLAGS) -o test-milenage -Wall -Werror $(TEST_SRC_MILENAGE) \
750 -DTEST_MAIN_MILENAGE -I. \
751 -I../src/crypto -I../src/utils
755 -include $(OBJS:%.o=%.d)