6 CFLAGS = -MMD -O2 -Wall -g
9 # define HOSTAPD_DUMP_STATE to include SIGUSR1 handler for dumping state to
10 # a file (undefine it, if you want to save in binary size)
11 CFLAGS += -DHOSTAPD_DUMP_STATE
14 CFLAGS += -I../src/crypto
15 CFLAGS += -I../src/utils
17 # Uncomment following line and set the path to your kernel tree include
18 # directory if your C library does not include all header files.
19 # CFLAGS += -DUSE_KERNEL_HEADERS -I/usr/src/linux/include
24 ifdef CONFIG_NATIVE_WINDOWS
31 ifeq ($(CONFIG_OS), internal)
32 CFLAGS += -DOS_NO_C_LIB_DEFINES
35 ifdef CONFIG_NATIVE_WINDOWS
36 CFLAGS += -DCONFIG_NATIVE_WINDOWS
40 OBJS = hostapd.o main.o ieee802_1x.o eapol_sm.o \
41 config.o ieee802_11_auth.o \
43 preauth.o pmksa_cache.o \
45 tkip_countermeasures.o \
52 OBJS += ../src/drivers/drivers.o
53 OBJS += ../src/drivers/scan_helpers.o
56 OBJS += ../src/utils/eloop.o
57 OBJS += ../src/utils/common.o
58 OBJS += ../src/utils/wpa_debug.o
59 OBJS += ../src/utils/wpabuf.o
60 OBJS += ../src/utils/os_$(CONFIG_OS).o
61 OBJS += ../src/utils/ip_addr.o
63 OBJS += ../src/common/ieee802_11_common.o
64 OBJS += ../src/common/wpa_common.o
66 ifdef CONFIG_NO_RADIUS
67 CFLAGS += -DCONFIG_NO_RADIUS
68 CONFIG_NO_ACCOUNTING=y
70 OBJS += ../src/radius/radius.o
71 OBJS += ../src/radius/radius_client.o
74 ifdef CONFIG_NO_ACCOUNTING
75 CFLAGS += -DCONFIG_NO_ACCOUNTING
81 CFLAGS += -DCONFIG_NO_VLAN
86 ifdef CONFIG_NO_CTRL_IFACE
87 CFLAGS += -DCONFIG_NO_CTRL_IFACE
90 OBJS += ctrl_iface_ap.o
93 OBJS += ../src/crypto/md5.o
95 CFLAGS += -DCONFIG_CTRL_IFACE -DCONFIG_CTRL_IFACE_UNIX
98 CFLAGS += -DCONFIG_IAPP
102 ifdef CONFIG_RSN_PREAUTH
103 CFLAGS += -DCONFIG_RSN_PREAUTH
108 CFLAGS += -DCONFIG_PEERKEY
112 ifdef CONFIG_IEEE80211W
113 CFLAGS += -DCONFIG_IEEE80211W
118 ifdef CONFIG_IEEE80211R
119 CFLAGS += -DCONFIG_IEEE80211R
126 ifdef CONFIG_IEEE80211N
127 CFLAGS += -DCONFIG_IEEE80211N
130 include ../src/drivers/drivers.mak
131 OBJS += $(DRV_AP_OBJS)
132 CFLAGS += $(DRV_AP_CFLAGS)
133 LDFLAGS += $(DRV_AP_LDFLAGS)
134 LIBS += $(DRV_AP_LIBS)
136 ifdef CONFIG_L2_PACKET
137 ifdef CONFIG_DNET_PCAP
138 ifdef CONFIG_L2_FREEBSD
140 OBJS += ../src/l2_packet/l2_packet_freebsd.o
142 LIBS += -ldnet -lpcap
143 OBJS += ../src/l2_packet/l2_packet_pcap.o
146 OBJS += ../src/l2_packet/l2_packet_linux.o
149 OBJS += ../src/l2_packet/l2_packet_none.o
154 CFLAGS += -DEAP_SERVER_MD5
155 OBJS += ../src/eap_server/eap_md5.o
160 CFLAGS += -DEAP_SERVER_TLS
161 OBJS += ../src/eap_server/eap_tls.o
165 ifdef CONFIG_EAP_PEAP
166 CFLAGS += -DEAP_SERVER_PEAP
167 OBJS += ../src/eap_server/eap_peap.o
168 OBJS += ../src/eap_common/eap_peap_common.o
170 CONFIG_EAP_MSCHAPV2=y
173 ifdef CONFIG_EAP_TTLS
174 CFLAGS += -DEAP_SERVER_TTLS
175 OBJS += ../src/eap_server/eap_ttls.o
180 ifdef CONFIG_EAP_MSCHAPV2
181 CFLAGS += -DEAP_SERVER_MSCHAPV2
182 OBJS += ../src/eap_server/eap_mschapv2.o
187 CFLAGS += -DEAP_SERVER_GTC
188 OBJS += ../src/eap_server/eap_gtc.o
192 CFLAGS += -DEAP_SERVER_SIM
193 OBJS += ../src/eap_server/eap_sim.o
194 CONFIG_EAP_SIM_COMMON=y
199 CFLAGS += -DEAP_SERVER_AKA
200 OBJS += ../src/eap_server/eap_aka.o
201 CONFIG_EAP_SIM_COMMON=y
206 ifdef CONFIG_EAP_AKA_PRIME
207 CFLAGS += -DEAP_SERVER_AKA_PRIME
210 ifdef CONFIG_EAP_SIM_COMMON
211 OBJS += ../src/eap_common/eap_sim_common.o
212 # Example EAP-SIM/AKA interface for GSM/UMTS authentication. This can be
213 # replaced with another file implementating the interface specified in
215 OBJS += ../src/eap_server/eap_sim_db.o
220 CFLAGS += -DEAP_SERVER_PAX
221 OBJS += ../src/eap_server/eap_pax.o ../src/eap_common/eap_pax_common.o
225 CFLAGS += -DEAP_SERVER_PSK
226 OBJS += ../src/eap_server/eap_psk.o ../src/eap_common/eap_psk_common.o
232 ifdef CONFIG_EAP_SAKE
233 CFLAGS += -DEAP_SERVER_SAKE
234 OBJS += ../src/eap_server/eap_sake.o ../src/eap_common/eap_sake_common.o
237 ifdef CONFIG_EAP_GPSK
238 CFLAGS += -DEAP_SERVER_GPSK
239 OBJS += ../src/eap_server/eap_gpsk.o ../src/eap_common/eap_gpsk_common.o
240 ifdef CONFIG_EAP_GPSK_SHA256
241 CFLAGS += -DEAP_SERVER_GPSK_SHA256
247 ifdef CONFIG_EAP_VENDOR_TEST
248 CFLAGS += -DEAP_SERVER_VENDOR_TEST
249 OBJS += ../src/eap_server/eap_vendor_test.o
252 ifdef CONFIG_EAP_FAST
253 CFLAGS += -DEAP_SERVER_FAST
254 OBJS += ../src/eap_server/eap_fast.o
255 OBJS += ../src/eap_common/eap_fast_common.o
262 CFLAGS += -DCONFIG_WPS -DEAP_SERVER_WSC
263 OBJS += ../src/utils/uuid.o
264 OBJS += wps_hostapd.o
265 OBJS += ../src/eap_server/eap_wsc.o ../src/eap_common/eap_wsc_common.o
266 OBJS += ../src/wps/wps.o
267 OBJS += ../src/wps/wps_common.o
268 OBJS += ../src/wps/wps_attr_parse.o
269 OBJS += ../src/wps/wps_attr_build.o
270 OBJS += ../src/wps/wps_attr_process.o
271 OBJS += ../src/wps/wps_dev_attr.o
272 OBJS += ../src/wps/wps_enrollee.o
273 OBJS += ../src/wps/wps_registrar.o
281 CFLAGS += -DCONFIG_WPS_UFD
282 OBJS += ../src/wps/wps_ufd.o
287 CFLAGS += -DCONFIG_WPS_NFC
288 OBJS += ../src/wps/ndef.o
289 OBJS += ../src/wps/wps_nfc.o
291 ifdef CONFIG_WPS_NFC_PN531
292 PN531_PATH ?= /usr/local/src/nfc
293 CFLAGS += -DCONFIG_WPS_NFC_PN531
294 CFLAGS += -I${PN531_PATH}/inc
295 OBJS += ../src/wps/wps_nfc_pn531.o
296 LIBS += ${PN531_PATH}/lib/wpsnfc.dll
297 LIBS += ${PN531_PATH}/lib/libnfc_mapping_pn53x.dll
302 CFLAGS += -DCONFIG_WPS_OOB
305 ifdef CONFIG_WPS_UPNP
306 CFLAGS += -DCONFIG_WPS_UPNP
307 OBJS += ../src/wps/wps_upnp.o
308 OBJS += ../src/wps/wps_upnp_ssdp.o
309 OBJS += ../src/wps/wps_upnp_web.o
310 OBJS += ../src/wps/wps_upnp_event.o
311 OBJS += ../src/wps/upnp_xml.o
312 OBJS += ../src/wps/httpread.o
313 OBJS += ../src/wps/http_client.o
314 OBJS += ../src/wps/http_server.o
319 ifdef CONFIG_EAP_IKEV2
320 CFLAGS += -DEAP_SERVER_IKEV2
321 OBJS += ../src/eap_server/eap_ikev2.o ../src/eap_server/ikev2.o
322 OBJS += ../src/eap_common/eap_ikev2_common.o ../src/eap_common/ikev2_common.o
329 CFLAGS += -DEAP_SERVER_TNC
330 OBJS += ../src/eap_server/eap_tnc.o
331 OBJS += ../src/eap_server/tncs.o
333 ifndef CONFIG_DRIVER_BSD
338 # Basic EAP functionality is needed for EAPOL
339 OBJS += ../src/eap_server/eap.o
340 OBJS += ../src/eap_common/eap_common.o
341 OBJS += ../src/eap_server/eap_methods.o
342 OBJS += ../src/eap_server/eap_identity.o
345 CFLAGS += -DEAP_SERVER
349 CFLAGS += -DPKCS12_FUNCS
353 OBJS += ../src/crypto/ms_funcs.o
359 OBJS += ../src/eap_common/chap.o
364 # Shared TLS functions (needed for EAP_TLS, EAP_PEAP, and EAP_TTLS)
365 CFLAGS += -DEAP_TLS_FUNCS
366 OBJS += ../src/eap_server/eap_tls_common.o
374 ifeq ($(CONFIG_TLS), openssl)
376 OBJS += ../src/crypto/tls_openssl.o
379 OBJS += ../src/crypto/crypto_openssl.o
380 HOBJS += ../src/crypto/crypto_openssl.o
381 ifdef NEED_FIPS186_2_PRF
382 OBJS += ../src/crypto/fips_prf_openssl.o
388 ifeq ($(CONFIG_TLS), gnutls)
390 OBJS += ../src/crypto/tls_gnutls.o
391 LIBS += -lgnutls -lgpg-error
392 ifdef CONFIG_GNUTLS_EXTRA
393 CFLAGS += -DCONFIG_GNUTLS_EXTRA
394 LIBS += -lgnutls-extra
397 OBJS += ../src/crypto/crypto_gnutls.o
398 HOBJS += ../src/crypto/crypto_gnutls.o
399 ifdef NEED_FIPS186_2_PRF
400 OBJS += ../src/crypto/fips_prf_gnutls.o
404 CONFIG_INTERNAL_SHA256=y
405 CONFIG_INTERNAL_RC4=y
406 CONFIG_INTERNAL_DH_GROUP5=y
409 ifeq ($(CONFIG_TLS), schannel)
411 OBJS += ../src/crypto/tls_schannel.o
413 OBJS += ../src/crypto/crypto_cryptoapi.o
414 OBJS_p += ../src/crypto/crypto_cryptoapi.o
415 CONFIG_INTERNAL_SHA256=y
416 CONFIG_INTERNAL_RC4=y
417 CONFIG_INTERNAL_DH_GROUP5=y
420 ifeq ($(CONFIG_TLS), nss)
422 OBJS += ../src/crypto/tls_nss.o
425 OBJS += ../src/crypto/crypto_nss.o
426 ifdef NEED_FIPS186_2_PRF
427 OBJS += ../src/crypto/fips_prf_nss.o
431 CONFIG_INTERNAL_MD4=y
432 CONFIG_INTERNAL_DH_GROUP5=y
435 ifeq ($(CONFIG_TLS), internal)
437 CONFIG_CRYPTO=internal
440 OBJS += ../src/crypto/tls_internal.o
441 OBJS += ../src/tls/tlsv1_common.o
442 OBJS += ../src/tls/tlsv1_record.o
443 OBJS += ../src/tls/tlsv1_cred.o
444 OBJS += ../src/tls/tlsv1_server.o
445 OBJS += ../src/tls/tlsv1_server_write.o
446 OBJS += ../src/tls/tlsv1_server_read.o
447 OBJS += ../src/tls/asn1.o
448 OBJS += ../src/tls/rsa.o
449 OBJS += ../src/tls/x509v3.o
450 OBJS += ../src/tls/pkcs1.o
451 OBJS += ../src/tls/pkcs5.o
452 OBJS += ../src/tls/pkcs8.o
456 CFLAGS += -DCONFIG_TLS_INTERNAL
457 CFLAGS += -DCONFIG_TLS_INTERNAL_SERVER
460 OBJS += ../src/tls/bignum.o
462 ifeq ($(CONFIG_CRYPTO), libtomcrypt)
463 CFLAGS += -DCONFIG_INTERNAL_X509
464 OBJS += ../src/crypto/crypto_libtomcrypt.o
465 LIBS += -ltomcrypt -ltfm
466 LIBS_h += -ltomcrypt -ltfm
467 CONFIG_INTERNAL_SHA256=y
468 CONFIG_INTERNAL_RC4=y
469 CONFIG_INTERNAL_DH_GROUP5=y
471 ifeq ($(CONFIG_CRYPTO), internal)
472 CFLAGS += -DCONFIG_INTERNAL_X509
473 OBJS += ../src/crypto/crypto_internal.o
475 CFLAGS += -DCONFIG_CRYPTO_INTERNAL
476 ifdef CONFIG_INTERNAL_LIBTOMMATH
477 CFLAGS += -DCONFIG_INTERNAL_LIBTOMMATH
478 ifdef CONFIG_INTERNAL_LIBTOMMATH_FAST
485 CONFIG_INTERNAL_AES=y
486 CONFIG_INTERNAL_DES=y
487 CONFIG_INTERNAL_SHA1=y
488 CONFIG_INTERNAL_MD4=y
489 CONFIG_INTERNAL_MD5=y
490 CONFIG_INTERNAL_SHA256=y
491 CONFIG_INTERNAL_RC4=y
492 CONFIG_INTERNAL_DH_GROUP5=y
494 ifeq ($(CONFIG_CRYPTO), cryptoapi)
495 OBJS += ../src/crypto/crypto_cryptoapi.o
496 OBJS_p += ../src/crypto/crypto_cryptoapi.o
497 CFLAGS += -DCONFIG_CRYPTO_CRYPTOAPI
498 CONFIG_INTERNAL_SHA256=y
499 CONFIG_INTERNAL_RC4=y
503 ifeq ($(CONFIG_TLS), none)
505 OBJS += ../src/crypto/tls_none.o
506 CFLAGS += -DEAP_TLS_NONE
507 CONFIG_INTERNAL_AES=y
508 CONFIG_INTERNAL_SHA1=y
509 CONFIG_INTERNAL_MD5=y
511 OBJS += ../src/crypto/crypto_none.o
512 OBJS_p += ../src/crypto/crypto_none.o
513 CONFIG_INTERNAL_SHA256=y
514 CONFIG_INTERNAL_RC4=y
518 OBJS += ../src/crypto/tls_none.o
519 ifeq ($(CONFIG_TLS), internal)
520 CONFIG_INTERNAL_AES=y
521 CONFIG_INTERNAL_SHA1=y
522 CONFIG_INTERNAL_MD5=y
523 CONFIG_INTERNAL_RC4=y
528 CFLAGS += -DCONFIG_MODEXP
531 AESOBJS = # none so far
532 ifdef CONFIG_INTERNAL_AES
533 AESOBJS += ../src/crypto/aes-internal.o ../src/crypto/aes-internal-enc.o
536 AESOBJS += ../src/crypto/aes-wrap.o
538 AESOBJS += ../src/crypto/aes-eax.o
542 AESOBJS += ../src/crypto/aes-ctr.o
544 ifdef NEED_AES_ENCBLOCK
545 AESOBJS += ../src/crypto/aes-encblock.o
548 AESOBJS += ../src/crypto/aes-omac1.o
550 ifdef NEED_AES_UNWRAP
552 AESOBJS += ../src/crypto/aes-unwrap.o
556 AESOBJS += ../src/crypto/aes-cbc.o
559 ifdef CONFIG_INTERNAL_AES
560 AESOBJS += ../src/crypto/aes-internal-dec.o
568 SHA1OBJS += ../src/crypto/sha1.o
569 ifdef CONFIG_INTERNAL_SHA1
570 SHA1OBJS += ../src/crypto/sha1-internal.o
571 ifdef NEED_FIPS186_2_PRF
572 SHA1OBJS += ../src/crypto/fips_prf_internal.o
575 SHA1OBJS += ../src/crypto/sha1-pbkdf2.o
577 SHA1OBJS += ../src/crypto/sha1-tprf.o
580 SHA1OBJS += ../src/crypto/sha1-tlsprf.o
589 ifdef CONFIG_INTERNAL_MD5
590 OBJS += ../src/crypto/md5-internal.o
595 ifdef CONFIG_INTERNAL_MD4
596 OBJS += ../src/crypto/md4-internal.o
601 ifdef CONFIG_INTERNAL_DES
602 OBJS += ../src/crypto/des-internal.o
607 ifdef CONFIG_INTERNAL_RC4
608 OBJS += ../src/crypto/rc4.o
613 OBJS += ../src/crypto/sha256.o
614 ifdef CONFIG_INTERNAL_SHA256
615 OBJS += ../src/crypto/sha256-internal.o
619 ifdef CONFIG_INTERNAL_DH_GROUP5
621 OBJS += ../src/crypto/dh_groups.o
622 OBJS += ../src/crypto/dh_group5.o
623 ifdef NEED_DH_GROUPS_ALL
624 CFLAGS += -DALL_DH_GROUPS
628 ifdef NEED_DH_GROUPS_ALL
629 OBJS += ../src/crypto/dh_groups.o
630 CFLAGS += -DALL_DH_GROUPS
634 ifdef CONFIG_RADIUS_SERVER
635 CFLAGS += -DRADIUS_SERVER
636 OBJS += ../src/radius/radius_server.o
640 CFLAGS += -DCONFIG_IPV6
643 ifdef CONFIG_DRIVER_RADIUS_ACL
644 CFLAGS += -DCONFIG_DRIVER_RADIUS_ACL
647 ifdef CONFIG_FULL_DYNAMIC_VLAN
648 # define CONFIG_FULL_DYNAMIC_VLAN to have hostapd manipulate bridges
649 # and vlan interfaces for the vlan feature.
650 CFLAGS += -DCONFIG_FULL_DYNAMIC_VLAN
654 OBJS += ../src/utils/base64.o
658 OBJS += beacon.o wme.o ap_list.o ieee802_11.o
659 OBJS += hw_features.o
660 CFLAGS += -DNEED_AP_MLME
663 ifdef CONFIG_NO_STDOUT_DEBUG
664 CFLAGS += -DCONFIG_NO_STDOUT_DEBUG
667 ALL=hostapd hostapd_cli
669 all: verify_config $(ALL)
679 $(Q)$(CC) -c -o $@ $(CFLAGS) $<
683 @if [ ! -r .config ]; then \
684 echo 'Building hostapd requires a configuration file'; \
685 echo '(.config). See README for more instructions. You can'; \
686 echo 'run "cp defconfig .config" to create an example'; \
687 echo 'configuration.'; \
692 for i in $(ALL); do cp $$i /usr/local/bin/$$i; done
694 ../src/drivers/build.hostapd:
695 @if [ -e ../src/drivers/build.wpa_supplicant ]; then \
696 $(MAKE) -C ../src/drivers clean; \
698 @touch ../src/drivers/build.hostapd
700 BCHECK=../src/drivers/build.hostapd
702 hostapd: $(BCHECK) $(OBJS)
703 $(CC) $(LDFLAGS) -o hostapd $(OBJS) $(LIBS)
705 OBJS_c = hostapd_cli.o ../src/common/wpa_ctrl.o ../src/utils/os_$(CONFIG_OS).o
706 hostapd_cli: $(OBJS_c)
707 $(CC) $(LDFLAGS) -o hostapd_cli $(OBJS_c)
709 NOBJS = nt_password_hash.o ../src/crypto/ms_funcs.o $(SHA1OBJS) ../src/crypto/rc4.o ../src/crypto/md5.o
710 ifdef CONFIG_INTERNAL_MD5
711 NOBJS += ../src/crypto/md5-internal.o
713 NOBJS += ../src/crypto/crypto_openssl.o ../src/utils/os_$(CONFIG_OS).o
718 HOBJS += ../src/hlr_auc_gw/hlr_auc_gw.o ../src/utils/common.o ../src/utils/wpa_debug.o ../src/utils/os_$(CONFIG_OS).o ../src/utils/wpabuf.o ../src/hlr_auc_gw/milenage.o
719 HOBJS += ../src/crypto/aes-encblock.o
720 ifdef CONFIG_INTERNAL_AES
721 HOBJS += ../src/crypto/aes-internal.o
722 HOBJS += ../src/crypto/aes-internal-enc.o
725 nt_password_hash: $(NOBJS)
726 $(CC) $(LDFLAGS) -o nt_password_hash $(NOBJS) $(LIBS_n)
729 $(CC) $(LDFLAGS) -o hlr_auc_gw $(HOBJS) $(LIBS_h)
732 $(MAKE) -C ../src clean
733 rm -f core *~ *.o hostapd hostapd_cli nt_password_hash hlr_auc_gw
736 TEST_SRC_MILENAGE = ../src/hlr_auc_gw/milenage.c ../src/crypto/aes-internal.c ../src/crypto/aes-internal-dec.c \
737 ../src/crypto/aes-cbc.c \
738 ../src/crypto/aes-ctr.c \
739 ../src/crypto/aes-eax.c \
740 ../src/crypto/aes-encblock.c \
741 ../src/crypto/aes-internal-enc.c \
742 ../src/crypto/aes-omac1.c \
743 ../src/crypto/aes-unwrap.c \
744 ../src/crypto/aes-wrap.c \
745 ../src/utils/common.c ../src/utils/wpa_debug.o ../src/utils/os_$(CONFIG_OS).c
746 test-milenage: $(TEST_SRC_MILENAGE)
747 $(CC) $(LDFLAGS) -o test-milenage -Wall -Werror $(TEST_SRC_MILENAGE) \
748 -DTEST_MAIN_MILENAGE -I. \
749 -I../src/crypto -I../src/utils
753 -include $(OBJS:%.o=%.d)