6 CFLAGS = -MMD -O2 -Wall -g
9 # define HOSTAPD_DUMP_STATE to include SIGUSR1 handler for dumping state to
10 # a file (undefine it, if you want to save in binary size)
11 CFLAGS += -DHOSTAPD_DUMP_STATE
14 CFLAGS += -I../src/crypto
15 CFLAGS += -I../src/utils
16 CFLAGS += -I../src/common
18 # Uncomment following line and set the path to your kernel tree include
19 # directory if your C library does not include all header files.
20 # CFLAGS += -DUSE_KERNEL_HEADERS -I/usr/src/linux/include
25 ifdef CONFIG_NATIVE_WINDOWS
32 ifeq ($(CONFIG_OS), internal)
33 CFLAGS += -DOS_NO_C_LIB_DEFINES
36 ifdef CONFIG_NATIVE_WINDOWS
37 CFLAGS += -DCONFIG_NATIVE_WINDOWS
41 SHA1OBJS = ../src/crypto/sha1.o ../src/crypto/sha1-pbkdf2.o
43 OBJS = hostapd.o main.o ieee802_1x.o eapol_sm.o \
44 config.o ieee802_11_auth.o \
46 preauth.o pmksa_cache.o \
48 tkip_countermeasures.o \
49 mlme.o wpa_auth_ie.o $(AESOBJS)
51 OBJS += ../src/drivers/drivers.o
52 OBJS += ../src/drivers/scan_helpers.o
55 OBJS += ../src/utils/eloop.o
56 OBJS += ../src/utils/common.o
57 OBJS += ../src/utils/wpa_debug.o
58 OBJS += ../src/utils/wpabuf.o
59 OBJS += ../src/utils/os_$(CONFIG_OS).o
60 OBJS += ../src/utils/ip_addr.o
62 OBJS += ../src/common/ieee802_11_common.o
63 OBJS += ../src/common/wpa_common.o
65 ifdef CONFIG_NO_RADIUS
66 CFLAGS += -DCONFIG_NO_RADIUS
67 CONFIG_NO_ACCOUNTING=y
69 OBJS += ../src/radius/radius.o
70 OBJS += ../src/radius/radius_client.o
73 ifdef CONFIG_NO_ACCOUNTING
74 CFLAGS += -DCONFIG_NO_ACCOUNTING
80 CFLAGS += -DCONFIG_NO_VLAN
85 ifdef CONFIG_NO_CTRL_IFACE
86 CFLAGS += -DCONFIG_NO_CTRL_IFACE
89 OBJS += ctrl_iface_ap.o
92 OBJS += ../src/crypto/md5.o
94 AESOBJS = # none so far
96 CFLAGS += -DCONFIG_CTRL_IFACE -DCONFIG_CTRL_IFACE_UNIX
99 CFLAGS += -DCONFIG_IAPP
103 ifdef CONFIG_RSN_PREAUTH
104 CFLAGS += -DCONFIG_RSN_PREAUTH
109 CFLAGS += -DCONFIG_PEERKEY
113 ifdef CONFIG_IEEE80211W
114 CFLAGS += -DCONFIG_IEEE80211W
118 ifdef CONFIG_IEEE80211R
119 CFLAGS += -DCONFIG_IEEE80211R
124 ifdef CONFIG_IEEE80211N
125 CFLAGS += -DCONFIG_IEEE80211N
128 include ../src/drivers/drivers.mak
129 OBJS += $(DRV_AP_OBJS)
130 CFLAGS += $(DRV_AP_CFLAGS)
131 LDFLAGS += $(DRV_AP_LDFLAGS)
132 LIBS += $(DRV_AP_LIBS)
134 ifdef CONFIG_L2_PACKET
135 ifdef CONFIG_DNET_PCAP
136 ifdef CONFIG_L2_FREEBSD
138 OBJS += ../src/l2_packet/l2_packet_freebsd.o
140 LIBS += -ldnet -lpcap
141 OBJS += ../src/l2_packet/l2_packet_pcap.o
144 OBJS += ../src/l2_packet/l2_packet_linux.o
147 OBJS += ../src/l2_packet/l2_packet_none.o
152 CFLAGS += -DEAP_SERVER_MD5
153 OBJS += ../src/eap_server/eap_md5.o
158 CFLAGS += -DEAP_SERVER_TLS
159 OBJS += ../src/eap_server/eap_tls.o
163 ifdef CONFIG_EAP_PEAP
164 CFLAGS += -DEAP_SERVER_PEAP
165 OBJS += ../src/eap_server/eap_peap.o
166 OBJS += ../src/eap_common/eap_peap_common.o
168 CONFIG_EAP_MSCHAPV2=y
171 ifdef CONFIG_EAP_TTLS
172 CFLAGS += -DEAP_SERVER_TTLS
173 OBJS += ../src/eap_server/eap_ttls.o
178 ifdef CONFIG_EAP_MSCHAPV2
179 CFLAGS += -DEAP_SERVER_MSCHAPV2
180 OBJS += ../src/eap_server/eap_mschapv2.o
185 CFLAGS += -DEAP_SERVER_GTC
186 OBJS += ../src/eap_server/eap_gtc.o
190 CFLAGS += -DEAP_SERVER_SIM
191 OBJS += ../src/eap_server/eap_sim.o
192 CONFIG_EAP_SIM_COMMON=y
196 CFLAGS += -DEAP_SERVER_AKA
197 OBJS += ../src/eap_server/eap_aka.o
198 CONFIG_EAP_SIM_COMMON=y
202 ifdef CONFIG_EAP_AKA_PRIME
203 CFLAGS += -DEAP_SERVER_AKA_PRIME
206 ifdef CONFIG_EAP_SIM_COMMON
207 OBJS += ../src/eap_common/eap_sim_common.o
208 # Example EAP-SIM/AKA interface for GSM/UMTS authentication. This can be
209 # replaced with another file implementating the interface specified in
211 OBJS += ../src/eap_server/eap_sim_db.o
216 CFLAGS += -DEAP_SERVER_PAX
217 OBJS += ../src/eap_server/eap_pax.o ../src/eap_common/eap_pax_common.o
221 CFLAGS += -DEAP_SERVER_PSK
222 OBJS += ../src/eap_server/eap_psk.o ../src/eap_common/eap_psk_common.o
225 ifdef CONFIG_EAP_SAKE
226 CFLAGS += -DEAP_SERVER_SAKE
227 OBJS += ../src/eap_server/eap_sake.o ../src/eap_common/eap_sake_common.o
230 ifdef CONFIG_EAP_GPSK
231 CFLAGS += -DEAP_SERVER_GPSK
232 OBJS += ../src/eap_server/eap_gpsk.o ../src/eap_common/eap_gpsk_common.o
233 ifdef CONFIG_EAP_GPSK_SHA256
234 CFLAGS += -DEAP_SERVER_GPSK_SHA256
239 ifdef CONFIG_EAP_VENDOR_TEST
240 CFLAGS += -DEAP_SERVER_VENDOR_TEST
241 OBJS += ../src/eap_server/eap_vendor_test.o
244 ifdef CONFIG_EAP_FAST
245 CFLAGS += -DEAP_SERVER_FAST
246 OBJS += ../src/eap_server/eap_fast.o
247 OBJS += ../src/eap_common/eap_fast_common.o
253 CFLAGS += -DCONFIG_WPS -DEAP_SERVER_WSC
254 OBJS += ../src/utils/uuid.o
255 OBJS += wps_hostapd.o
256 OBJS += ../src/eap_server/eap_wsc.o ../src/eap_common/eap_wsc_common.o
257 OBJS += ../src/wps/wps.o
258 OBJS += ../src/wps/wps_common.o
259 OBJS += ../src/wps/wps_attr_parse.o
260 OBJS += ../src/wps/wps_attr_build.o
261 OBJS += ../src/wps/wps_attr_process.o
262 OBJS += ../src/wps/wps_dev_attr.o
263 OBJS += ../src/wps/wps_enrollee.o
264 OBJS += ../src/wps/wps_registrar.o
272 CFLAGS += -DCONFIG_WPS_UFD
273 OBJS += ../src/wps/wps_ufd.o
278 CFLAGS += -DCONFIG_WPS_NFC
279 OBJS += ../src/wps/ndef.o
280 OBJS += ../src/wps/wps_nfc.o
282 ifdef CONFIG_WPS_NFC_PN531
283 PN531_PATH ?= /usr/local/src/nfc
284 CFLAGS += -DCONFIG_WPS_NFC_PN531
285 CFLAGS += -I${PN531_PATH}/inc
286 OBJS += ../src/wps/wps_nfc_pn531.o
287 LIBS += ${PN531_PATH}/lib/wpsnfc.dll
288 LIBS += ${PN531_PATH}/lib/libnfc_mapping_pn53x.dll
293 CFLAGS += -DCONFIG_WPS_OOB
296 ifdef CONFIG_WPS_UPNP
297 CFLAGS += -DCONFIG_WPS_UPNP
298 OBJS += ../src/wps/wps_upnp.o
299 OBJS += ../src/wps/wps_upnp_ssdp.o
300 OBJS += ../src/wps/wps_upnp_web.o
301 OBJS += ../src/wps/wps_upnp_event.o
302 OBJS += ../src/wps/httpread.o
307 ifdef CONFIG_EAP_IKEV2
308 CFLAGS += -DEAP_SERVER_IKEV2
309 OBJS += ../src/eap_server/eap_ikev2.o ../src/eap_server/ikev2.o
310 OBJS += ../src/eap_common/eap_ikev2_common.o ../src/eap_common/ikev2_common.o
316 CFLAGS += -DEAP_SERVER_TNC
317 OBJS += ../src/eap_server/eap_tnc.o
318 OBJS += ../src/eap_server/tncs.o
320 ifndef CONFIG_DRIVER_BSD
325 # Basic EAP functionality is needed for EAPOL
326 OBJS += ../src/eap_server/eap.o
327 OBJS += ../src/eap_common/eap_common.o
328 OBJS += ../src/eap_server/eap_methods.o
329 OBJS += ../src/eap_server/eap_identity.o
332 CFLAGS += -DEAP_SERVER
336 CFLAGS += -DPKCS12_FUNCS
340 OBJS += ../src/crypto/ms_funcs.o
345 OBJS += ../src/eap_common/chap.o
352 ifeq ($(CONFIG_TLS), internal)
354 CONFIG_CRYPTO=internal
357 ifeq ($(CONFIG_CRYPTO), libtomcrypt)
358 CFLAGS += -DCONFIG_INTERNAL_X509
360 ifeq ($(CONFIG_CRYPTO), internal)
361 CFLAGS += -DCONFIG_INTERNAL_X509
366 # Shared TLS functions (needed for EAP_TLS, EAP_PEAP, and EAP_TTLS)
367 CFLAGS += -DEAP_TLS_FUNCS
368 OBJS += ../src/eap_server/eap_tls_common.o
373 ifeq ($(CONFIG_TLS), openssl)
374 OBJS += ../src/crypto/tls_openssl.o
375 LIBS += -lssl -lcrypto
378 ifeq ($(CONFIG_TLS), gnutls)
379 OBJS += ../src/crypto/tls_gnutls.o
380 LIBS += -lgnutls -lgcrypt -lgpg-error
382 ifdef CONFIG_GNUTLS_EXTRA
383 CFLAGS += -DCONFIG_GNUTLS_EXTRA
384 LIBS += -lgnutls-extra
387 ifeq ($(CONFIG_TLS), schannel)
388 OBJS += ../src/crypto/tls_schannel.o
390 ifeq ($(CONFIG_TLS), nss)
391 OBJS += ../src/crypto/tls_nss.o
392 LIBS += -lnss3 -lssl3
395 ifeq ($(CONFIG_TLS), internal)
396 OBJS += ../src/crypto/tls_internal.o
397 OBJS += ../src/tls/tlsv1_common.o ../src/tls/tlsv1_record.o
398 OBJS += ../src/tls/tlsv1_cred.o ../src/tls/tlsv1_server.o
399 OBJS += ../src/tls/tlsv1_server_write.o ../src/tls/tlsv1_server_read.o
400 OBJS += ../src/tls/asn1.o ../src/tls/x509v3.o
402 CFLAGS += -DCONFIG_TLS_INTERNAL
403 CFLAGS += -DCONFIG_TLS_INTERNAL_SERVER
404 ifeq ($(CONFIG_CRYPTO), internal)
406 ifeq ($(CONFIG_CRYPTO), libtomcrypt)
407 LIBS += -ltomcrypt -ltfm
408 LIBS_h += -ltomcrypt -ltfm
413 OBJS += ../src/crypto/tls_none.o
418 ifeq ($(CONFIG_TLS), openssl)
422 ifeq ($(CONFIG_TLS), gnutls)
426 ifeq ($(CONFIG_TLS), schannel)
428 ifeq ($(CONFIG_TLS), nss)
432 ifeq ($(CONFIG_TLS), internal)
433 ifeq ($(CONFIG_CRYPTO), libtomcrypt)
434 LIBS += -ltomcrypt -ltfm
435 LIBS_h += -ltomcrypt -ltfm
439 ifeq ($(CONFIG_TLS), openssl)
440 OBJS += ../src/crypto/crypto_openssl.o
441 HOBJS += ../src/crypto/crypto_openssl.o
442 ifdef NEED_FIPS186_2_PRF
443 OBJS += ../src/crypto/fips_prf_openssl.o
446 ifeq ($(CONFIG_TLS), gnutls)
447 OBJS += ../src/crypto/crypto_gnutls.o
448 HOBJS += ../src/crypto/crypto_gnutls.o
449 ifdef NEED_FIPS186_2_PRF
450 OBJS += ../src/crypto/fips_prf_gnutls.o
452 CONFIG_INTERNAL_SHA256=y
453 CONFIG_INTERNAL_RC4=y
454 CONFIG_INTERNAL_DH_GROUP5=y
456 ifeq ($(CONFIG_TLS), internal)
457 ifeq ($(CONFIG_CRYPTO), libtomcrypt)
458 OBJS += ../src/crypto/crypto_libtomcrypt.o
459 CONFIG_INTERNAL_SHA256=y
460 CONFIG_INTERNAL_RC4=y
461 CONFIG_INTERNAL_DH_GROUP5=y
463 ifeq ($(CONFIG_CRYPTO), internal)
464 OBJS += ../src/crypto/crypto_internal.o ../src/tls/rsa.o ../src/tls/bignum.o
465 CFLAGS += -DCONFIG_CRYPTO_INTERNAL
466 ifdef CONFIG_INTERNAL_LIBTOMMATH
467 CFLAGS += -DCONFIG_INTERNAL_LIBTOMMATH
468 ifdef CONFIG_INTERNAL_LIBTOMMATH_FAST
475 CONFIG_INTERNAL_AES=y
476 CONFIG_INTERNAL_DES=y
477 CONFIG_INTERNAL_SHA1=y
478 CONFIG_INTERNAL_MD4=y
479 CONFIG_INTERNAL_MD5=y
480 CONFIG_INTERNAL_SHA256=y
481 CONFIG_INTERNAL_RC4=y
482 CONFIG_INTERNAL_DH_GROUP5=y
486 CONFIG_INTERNAL_AES=y
487 CONFIG_INTERNAL_SHA1=y
488 CONFIG_INTERNAL_MD5=y
489 CONFIG_INTERNAL_RC4=y
492 ifdef CONFIG_INTERNAL_AES
493 AESOBJS += ../src/crypto/aes-internal.o ../src/crypto/aes-internal-enc.o
495 ifdef CONFIG_INTERNAL_SHA1
496 SHA1OBJS += ../src/crypto/sha1-internal.o
497 ifdef NEED_FIPS186_2_PRF
498 SHA1OBJS += ../src/crypto/fips_prf_internal.o
501 ifdef CONFIG_INTERNAL_MD5
502 OBJS += ../src/crypto/md5-internal.o
504 ifdef CONFIG_INTERNAL_MD4
505 OBJS += ../src/crypto/md4-internal.o
507 ifdef CONFIG_INTERNAL_DES
508 OBJS += ../src/crypto/des-internal.o
510 ifdef CONFIG_INTERNAL_RC4
511 OBJS += ../src/crypto/rc4.o
515 OBJS += ../src/crypto/sha256.o
516 ifdef CONFIG_INTERNAL_SHA256
517 OBJS += ../src/crypto/sha256-internal.o
521 ifdef CONFIG_INTERNAL_DH_GROUP5
523 OBJS += ../src/crypto/dh_groups.o
524 OBJS += ../src/crypto/dh_group5.o
525 ifdef NEED_DH_GROUPS_ALL
526 CFLAGS += -DALL_DH_GROUPS
530 ifdef NEED_DH_GROUPS_ALL
531 OBJS += ../src/crypto/dh_groups.o
532 CFLAGS += -DALL_DH_GROUPS
537 SHA1OBJS += ../src/crypto/sha1-tprf.o
541 SHA1OBJS += ../src/crypto/sha1-tlsprf.o
544 ifdef CONFIG_RADIUS_SERVER
545 CFLAGS += -DRADIUS_SERVER
546 OBJS += ../src/radius/radius_server.o
550 CFLAGS += -DCONFIG_IPV6
553 ifdef CONFIG_DRIVER_RADIUS_ACL
554 CFLAGS += -DCONFIG_DRIVER_RADIUS_ACL
557 ifdef CONFIG_FULL_DYNAMIC_VLAN
558 # define CONFIG_FULL_DYNAMIC_VLAN to have hostapd manipulate bridges
559 # and vlan interfaces for the vlan feature.
560 CFLAGS += -DCONFIG_FULL_DYNAMIC_VLAN
564 OBJS += ../src/utils/base64.o
568 OBJS += beacon.o wme.o ap_list.o ieee802_11.o
569 OBJS += hw_features.o
570 CFLAGS += -DNEED_AP_MLME
573 ifdef CONFIG_NO_STDOUT_DEBUG
574 CFLAGS += -DCONFIG_NO_STDOUT_DEBUG
577 AESOBJS += ../src/crypto/aes-wrap.o
578 ifndef CONFIG_NO_AES_EXTRAS
580 AESOBJS += ../src/crypto/aes-cbc.o
581 AESOBJS += ../src/crypto/aes-ctr.o
582 AESOBJS += ../src/crypto/aes-eax.o
583 AESOBJS += ../src/crypto/aes-encblock.o
584 AESOBJS += ../src/crypto/aes-omac1.o
585 AESOBJS += ../src/crypto/aes-unwrap.o
589 ifdef CONFIG_INTERNAL_AES
590 AESOBJS += ../src/crypto/aes-internal-dec.o
592 AESOBJS += ../src/crypto/aes-cbc.o
597 ALL=hostapd hostapd_cli
599 all: verify_config $(ALL)
609 $(Q)$(CC) -c -o $@ $(CFLAGS) $<
613 @if [ ! -r .config ]; then \
614 echo 'Building hostapd requires a configuration file'; \
615 echo '(.config). See README for more instructions. You can'; \
616 echo 'run "cp defconfig .config" to create an example'; \
617 echo 'configuration.'; \
622 for i in $(ALL); do cp $$i /usr/local/bin/$$i; done
624 ../src/drivers/build.hostapd:
625 @if [ -e ../src/drivers/build.wpa_supplicant ]; then \
626 $(MAKE) -C ../src/drivers clean; \
628 @touch ../src/drivers/build.hostapd
630 BCHECK=../src/drivers/build.hostapd
632 hostapd: $(BCHECK) $(OBJS)
633 $(CC) $(LDFLAGS) -o hostapd $(OBJS) $(LIBS)
635 OBJS_c = hostapd_cli.o ../src/common/wpa_ctrl.o ../src/utils/os_$(CONFIG_OS).o
636 hostapd_cli: $(OBJS_c)
637 $(CC) $(LDFLAGS) -o hostapd_cli $(OBJS_c)
639 NOBJS = nt_password_hash.o ../src/crypto/ms_funcs.o $(SHA1OBJS) ../src/crypto/rc4.o ../src/crypto/md5.o
640 ifdef CONFIG_INTERNAL_MD5
641 NOBJS += ../src/crypto/md5-internal.o
643 NOBJS += ../src/crypto/crypto_openssl.o ../src/utils/os_$(CONFIG_OS).o
648 HOBJS += ../src/hlr_auc_gw/hlr_auc_gw.o ../src/utils/common.o ../src/utils/wpa_debug.o ../src/utils/os_$(CONFIG_OS).o ../src/hlr_auc_gw/milenage.o
649 HOBJS += ../src/crypto/aes-encblock.o
650 ifdef CONFIG_INTERNAL_AES
651 HOBJS += ../src/crypto/aes-internal.o
652 HOBJS += ../src/crypto/aes-internal-enc.o
655 nt_password_hash: $(NOBJS)
656 $(CC) $(LDFLAGS) -o nt_password_hash $(NOBJS) $(LIBS_n)
659 $(CC) $(LDFLAGS) -o hlr_auc_gw $(HOBJS) $(LIBS_h)
662 $(MAKE) -C ../src clean
663 rm -f core *~ *.o hostapd hostapd_cli nt_password_hash hlr_auc_gw
667 fig2dev -L eps $*.fig $*.eps
670 fig2dev -L png -m 3 $*.fig | pngtopnm | pnmscale 0.4 | pnmtopng \
673 docs-pics: doc/hostapd.png doc/hostapd.eps
676 (cd ..; doxygen hostapd/doc/doxygen.full; cd hostapd)
678 cp doc/latex/refman.pdf hostapd-devel.pdf
681 (cd ..; doxygen hostapd/doc/doxygen.fast; cd hostapd)
684 rm -rf doc/latex doc/html
685 rm -f doc/hostapd.{eps,png} hostapd-devel.pdf
687 TEST_SRC_MILENAGE = ../src/hlr_auc_gw/milenage.c ../src/crypto/aes-internal.c ../src/crypto/aes-internal-dec.c \
688 ../src/crypto/aes-cbc.c \
689 ../src/crypto/aes-ctr.c \
690 ../src/crypto/aes-eax.c \
691 ../src/crypto/aes-encblock.c \
692 ../src/crypto/aes-internal-enc.c \
693 ../src/crypto/aes-omac1.c \
694 ../src/crypto/aes-unwrap.c \
695 ../src/crypto/aes-wrap.c \
696 ../src/utils/common.c ../src/utils/wpa_debug.o ../src/utils/os_$(CONFIG_OS).c
697 test-milenage: $(TEST_SRC_MILENAGE)
698 $(CC) $(LDFLAGS) -o test-milenage -Wall -Werror $(TEST_SRC_MILENAGE) \
699 -DTEST_MAIN_MILENAGE -I. \
700 -I../src/crypto -I../src/utils
704 -include $(OBJS:%.o=%.d)