6 CFLAGS = -MMD -O2 -Wall -g
10 CFLAGS += -I../src/utils
12 # Uncomment following line and set the path to your kernel tree include
13 # directory if your C library does not include all header files.
14 # CFLAGS += -DUSE_KERNEL_HEADERS -I/usr/src/linux/include
19 ifdef CONFIG_NATIVE_WINDOWS
26 ifeq ($(CONFIG_OS), internal)
27 CFLAGS += -DOS_NO_C_LIB_DEFINES
30 ifdef CONFIG_NATIVE_WINDOWS
31 CFLAGS += -DCONFIG_NATIVE_WINDOWS
35 OBJS = hostapd.o main.o ieee802_1x.o \
36 config.o ieee802_11_auth.o \
38 preauth.o pmksa_cache.o \
40 tkip_countermeasures.o \
47 OBJS += ../src/drivers/drivers.o
48 OBJS += ../src/drivers/scan_helpers.o
51 ifdef CONFIG_WPA_TRACE
53 OBJS += ../src/utils/trace.o
55 CFLAGS += -funwind-tables
56 ifdef CONFIG_WPA_TRACE_BFD
57 CFLAGS += -DWPA_TRACE_BFD
63 OBJS += ../src/utils/eloop.o
64 OBJS += ../src/utils/common.o
65 OBJS += ../src/utils/wpa_debug.o
66 OBJS += ../src/utils/wpabuf.o
67 OBJS += ../src/utils/os_$(CONFIG_OS).o
68 OBJS += ../src/utils/ip_addr.o
70 OBJS += ../src/common/ieee802_11_common.o
71 OBJS += ../src/common/wpa_common.o
73 OBJS += ../src/eapol_auth/eapol_auth_sm.o
76 ifndef CONFIG_NO_DUMP_STATE
77 # define HOSTAPD_DUMP_STATE to include SIGUSR1 handler for dumping state to
78 # a file (undefine it, if you want to save in binary size)
79 CFLAGS += -DHOSTAPD_DUMP_STATE
81 OBJS += ../src/eapol_auth/eapol_auth_dump.o
84 ifdef CONFIG_NO_RADIUS
85 CFLAGS += -DCONFIG_NO_RADIUS
86 CONFIG_NO_ACCOUNTING=y
88 OBJS += ../src/radius/radius.o
89 OBJS += ../src/radius/radius_client.o
92 ifdef CONFIG_NO_ACCOUNTING
93 CFLAGS += -DCONFIG_NO_ACCOUNTING
99 CFLAGS += -DCONFIG_NO_VLAN
104 ifdef CONFIG_NO_CTRL_IFACE
105 CFLAGS += -DCONFIG_NO_CTRL_IFACE
108 OBJS += ctrl_iface_ap.o
111 OBJS += ../src/crypto/md5.o
113 CFLAGS += -DCONFIG_CTRL_IFACE -DCONFIG_CTRL_IFACE_UNIX
116 CFLAGS += -DCONFIG_IAPP
120 ifdef CONFIG_RSN_PREAUTH
121 CFLAGS += -DCONFIG_RSN_PREAUTH
126 CFLAGS += -DCONFIG_PEERKEY
130 ifdef CONFIG_IEEE80211W
131 CFLAGS += -DCONFIG_IEEE80211W
136 ifdef CONFIG_IEEE80211R
137 CFLAGS += -DCONFIG_IEEE80211R
144 ifdef CONFIG_IEEE80211N
145 CFLAGS += -DCONFIG_IEEE80211N
148 include ../src/drivers/drivers.mak
149 OBJS += $(DRV_AP_OBJS)
150 CFLAGS += $(DRV_AP_CFLAGS)
151 LDFLAGS += $(DRV_AP_LDFLAGS)
152 LIBS += $(DRV_AP_LIBS)
154 ifdef CONFIG_L2_PACKET
155 ifdef CONFIG_DNET_PCAP
156 ifdef CONFIG_L2_FREEBSD
158 OBJS += ../src/l2_packet/l2_packet_freebsd.o
160 LIBS += -ldnet -lpcap
161 OBJS += ../src/l2_packet/l2_packet_pcap.o
164 OBJS += ../src/l2_packet/l2_packet_linux.o
167 OBJS += ../src/l2_packet/l2_packet_none.o
172 CFLAGS += -DEAP_SERVER_MD5
173 OBJS += ../src/eap_server/eap_md5.o
178 CFLAGS += -DEAP_SERVER_TLS
179 OBJS += ../src/eap_server/eap_tls.o
183 ifdef CONFIG_EAP_PEAP
184 CFLAGS += -DEAP_SERVER_PEAP
185 OBJS += ../src/eap_server/eap_peap.o
186 OBJS += ../src/eap_common/eap_peap_common.o
188 CONFIG_EAP_MSCHAPV2=y
191 ifdef CONFIG_EAP_TTLS
192 CFLAGS += -DEAP_SERVER_TTLS
193 OBJS += ../src/eap_server/eap_ttls.o
198 ifdef CONFIG_EAP_MSCHAPV2
199 CFLAGS += -DEAP_SERVER_MSCHAPV2
200 OBJS += ../src/eap_server/eap_mschapv2.o
205 CFLAGS += -DEAP_SERVER_GTC
206 OBJS += ../src/eap_server/eap_gtc.o
210 CFLAGS += -DEAP_SERVER_SIM
211 OBJS += ../src/eap_server/eap_sim.o
212 CONFIG_EAP_SIM_COMMON=y
217 CFLAGS += -DEAP_SERVER_AKA
218 OBJS += ../src/eap_server/eap_aka.o
219 CONFIG_EAP_SIM_COMMON=y
224 ifdef CONFIG_EAP_AKA_PRIME
225 CFLAGS += -DEAP_SERVER_AKA_PRIME
228 ifdef CONFIG_EAP_SIM_COMMON
229 OBJS += ../src/eap_common/eap_sim_common.o
230 # Example EAP-SIM/AKA interface for GSM/UMTS authentication. This can be
231 # replaced with another file implementating the interface specified in
233 OBJS += ../src/eap_server/eap_sim_db.o
238 CFLAGS += -DEAP_SERVER_PAX
239 OBJS += ../src/eap_server/eap_pax.o ../src/eap_common/eap_pax_common.o
243 CFLAGS += -DEAP_SERVER_PSK
244 OBJS += ../src/eap_server/eap_psk.o ../src/eap_common/eap_psk_common.o
250 ifdef CONFIG_EAP_SAKE
251 CFLAGS += -DEAP_SERVER_SAKE
252 OBJS += ../src/eap_server/eap_sake.o ../src/eap_common/eap_sake_common.o
255 ifdef CONFIG_EAP_GPSK
256 CFLAGS += -DEAP_SERVER_GPSK
257 OBJS += ../src/eap_server/eap_gpsk.o ../src/eap_common/eap_gpsk_common.o
258 ifdef CONFIG_EAP_GPSK_SHA256
259 CFLAGS += -DEAP_SERVER_GPSK_SHA256
265 ifdef CONFIG_EAP_VENDOR_TEST
266 CFLAGS += -DEAP_SERVER_VENDOR_TEST
267 OBJS += ../src/eap_server/eap_vendor_test.o
270 ifdef CONFIG_EAP_FAST
271 CFLAGS += -DEAP_SERVER_FAST
272 OBJS += ../src/eap_server/eap_fast.o
273 OBJS += ../src/eap_common/eap_fast_common.o
280 CFLAGS += -DCONFIG_WPS -DEAP_SERVER_WSC
281 OBJS += ../src/utils/uuid.o
282 OBJS += wps_hostapd.o
283 OBJS += ../src/eap_server/eap_wsc.o ../src/eap_common/eap_wsc_common.o
284 OBJS += ../src/wps/wps.o
285 OBJS += ../src/wps/wps_common.o
286 OBJS += ../src/wps/wps_attr_parse.o
287 OBJS += ../src/wps/wps_attr_build.o
288 OBJS += ../src/wps/wps_attr_process.o
289 OBJS += ../src/wps/wps_dev_attr.o
290 OBJS += ../src/wps/wps_enrollee.o
291 OBJS += ../src/wps/wps_registrar.o
299 CFLAGS += -DCONFIG_WPS_UFD
300 OBJS += ../src/wps/wps_ufd.o
305 CFLAGS += -DCONFIG_WPS_NFC
306 OBJS += ../src/wps/ndef.o
307 OBJS += ../src/wps/wps_nfc.o
309 ifdef CONFIG_WPS_NFC_PN531
310 PN531_PATH ?= /usr/local/src/nfc
311 CFLAGS += -DCONFIG_WPS_NFC_PN531
312 CFLAGS += -I${PN531_PATH}/inc
313 OBJS += ../src/wps/wps_nfc_pn531.o
314 LIBS += ${PN531_PATH}/lib/wpsnfc.dll
315 LIBS += ${PN531_PATH}/lib/libnfc_mapping_pn53x.dll
320 CFLAGS += -DCONFIG_WPS_OOB
323 ifdef CONFIG_WPS_UPNP
324 CFLAGS += -DCONFIG_WPS_UPNP
325 OBJS += ../src/wps/wps_upnp.o
326 OBJS += ../src/wps/wps_upnp_ssdp.o
327 OBJS += ../src/wps/wps_upnp_web.o
328 OBJS += ../src/wps/wps_upnp_event.o
329 OBJS += ../src/wps/wps_upnp_ap.o
330 OBJS += ../src/wps/upnp_xml.o
331 OBJS += ../src/wps/httpread.o
332 OBJS += ../src/wps/http_client.o
333 OBJS += ../src/wps/http_server.o
338 ifdef CONFIG_EAP_IKEV2
339 CFLAGS += -DEAP_SERVER_IKEV2
340 OBJS += ../src/eap_server/eap_ikev2.o ../src/eap_server/ikev2.o
341 OBJS += ../src/eap_common/eap_ikev2_common.o ../src/eap_common/ikev2_common.o
349 CFLAGS += -DEAP_SERVER_TNC
350 OBJS += ../src/eap_server/eap_tnc.o
351 OBJS += ../src/eap_server/tncs.o
353 ifndef CONFIG_DRIVER_BSD
358 # Basic EAP functionality is needed for EAPOL
359 OBJS += eap_register.o
360 OBJS += ../src/eap_server/eap.o
361 OBJS += ../src/eap_common/eap_common.o
362 OBJS += ../src/eap_server/eap_methods.o
363 OBJS += ../src/eap_server/eap_identity.o
364 CFLAGS += -DEAP_SERVER_IDENTITY
367 CFLAGS += -DEAP_SERVER
371 CFLAGS += -DPKCS12_FUNCS
375 OBJS += ../src/crypto/ms_funcs.o
381 OBJS += ../src/eap_common/chap.o
386 # Shared TLS functions (needed for EAP_TLS, EAP_PEAP, and EAP_TTLS)
387 CFLAGS += -DEAP_TLS_FUNCS
388 OBJS += ../src/eap_server/eap_tls_common.o
396 ifeq ($(CONFIG_TLS), openssl)
398 OBJS += ../src/crypto/tls_openssl.o
401 OBJS += ../src/crypto/crypto_openssl.o
402 HOBJS += ../src/crypto/crypto_openssl.o
403 ifdef NEED_FIPS186_2_PRF
404 OBJS += ../src/crypto/fips_prf_openssl.o
410 ifeq ($(CONFIG_TLS), gnutls)
412 OBJS += ../src/crypto/tls_gnutls.o
413 LIBS += -lgnutls -lgpg-error
414 ifdef CONFIG_GNUTLS_EXTRA
415 CFLAGS += -DCONFIG_GNUTLS_EXTRA
416 LIBS += -lgnutls-extra
419 OBJS += ../src/crypto/crypto_gnutls.o
420 HOBJS += ../src/crypto/crypto_gnutls.o
421 ifdef NEED_FIPS186_2_PRF
422 OBJS += ../src/crypto/fips_prf_gnutls.o
426 CONFIG_INTERNAL_SHA256=y
427 CONFIG_INTERNAL_RC4=y
428 CONFIG_INTERNAL_DH_GROUP5=y
431 ifeq ($(CONFIG_TLS), schannel)
433 OBJS += ../src/crypto/tls_schannel.o
435 OBJS += ../src/crypto/crypto_cryptoapi.o
436 OBJS_p += ../src/crypto/crypto_cryptoapi.o
437 CONFIG_INTERNAL_SHA256=y
438 CONFIG_INTERNAL_RC4=y
439 CONFIG_INTERNAL_DH_GROUP5=y
442 ifeq ($(CONFIG_TLS), nss)
444 OBJS += ../src/crypto/tls_nss.o
447 OBJS += ../src/crypto/crypto_nss.o
448 ifdef NEED_FIPS186_2_PRF
449 OBJS += ../src/crypto/fips_prf_nss.o
453 CONFIG_INTERNAL_MD4=y
454 CONFIG_INTERNAL_DH_GROUP5=y
457 ifeq ($(CONFIG_TLS), internal)
459 CONFIG_CRYPTO=internal
462 OBJS += ../src/crypto/crypto_internal-rsa.o
463 OBJS += ../src/crypto/tls_internal.o
464 OBJS += ../src/tls/tlsv1_common.o
465 OBJS += ../src/tls/tlsv1_record.o
466 OBJS += ../src/tls/tlsv1_cred.o
467 OBJS += ../src/tls/tlsv1_server.o
468 OBJS += ../src/tls/tlsv1_server_write.o
469 OBJS += ../src/tls/tlsv1_server_read.o
470 OBJS += ../src/tls/asn1.o
471 OBJS += ../src/tls/rsa.o
472 OBJS += ../src/tls/x509v3.o
473 OBJS += ../src/tls/pkcs1.o
474 OBJS += ../src/tls/pkcs5.o
475 OBJS += ../src/tls/pkcs8.o
481 CFLAGS += -DCONFIG_TLS_INTERNAL
482 CFLAGS += -DCONFIG_TLS_INTERNAL_SERVER
486 OBJS += ../src/crypto/crypto_internal-cipher.o
489 OBJS += ../src/crypto/crypto_internal-modexp.o
490 OBJS += ../src/tls/bignum.o
492 ifeq ($(CONFIG_CRYPTO), libtomcrypt)
493 OBJS += ../src/crypto/crypto_libtomcrypt.o
494 LIBS += -ltomcrypt -ltfm
495 LIBS_h += -ltomcrypt -ltfm
496 CONFIG_INTERNAL_SHA256=y
497 CONFIG_INTERNAL_RC4=y
498 CONFIG_INTERNAL_DH_GROUP5=y
500 ifeq ($(CONFIG_CRYPTO), internal)
501 OBJS += ../src/crypto/crypto_internal.o
503 CFLAGS += -DCONFIG_CRYPTO_INTERNAL
504 ifdef CONFIG_INTERNAL_LIBTOMMATH
505 CFLAGS += -DCONFIG_INTERNAL_LIBTOMMATH
506 ifdef CONFIG_INTERNAL_LIBTOMMATH_FAST
513 CONFIG_INTERNAL_AES=y
514 CONFIG_INTERNAL_DES=y
515 CONFIG_INTERNAL_SHA1=y
516 CONFIG_INTERNAL_MD4=y
517 CONFIG_INTERNAL_MD5=y
518 CONFIG_INTERNAL_SHA256=y
519 CONFIG_INTERNAL_RC4=y
520 CONFIG_INTERNAL_DH_GROUP5=y
522 ifeq ($(CONFIG_CRYPTO), cryptoapi)
523 OBJS += ../src/crypto/crypto_cryptoapi.o
524 OBJS_p += ../src/crypto/crypto_cryptoapi.o
525 CFLAGS += -DCONFIG_CRYPTO_CRYPTOAPI
526 CONFIG_INTERNAL_SHA256=y
527 CONFIG_INTERNAL_RC4=y
531 ifeq ($(CONFIG_TLS), none)
533 OBJS += ../src/crypto/tls_none.o
534 CFLAGS += -DEAP_TLS_NONE
535 CONFIG_INTERNAL_AES=y
536 CONFIG_INTERNAL_SHA1=y
537 CONFIG_INTERNAL_MD5=y
539 OBJS += ../src/crypto/crypto_none.o
540 OBJS_p += ../src/crypto/crypto_none.o
541 CONFIG_INTERNAL_SHA256=y
542 CONFIG_INTERNAL_RC4=y
546 OBJS += ../src/crypto/tls_none.o
547 ifeq ($(CONFIG_TLS), internal)
548 CONFIG_INTERNAL_AES=y
549 CONFIG_INTERNAL_SHA1=y
550 CONFIG_INTERNAL_MD5=y
551 CONFIG_INTERNAL_RC4=y
555 AESOBJS = # none so far
556 ifdef CONFIG_INTERNAL_AES
557 AESOBJS += ../src/crypto/aes-internal.o ../src/crypto/aes-internal-enc.o
560 AESOBJS += ../src/crypto/aes-wrap.o
562 AESOBJS += ../src/crypto/aes-eax.o
566 AESOBJS += ../src/crypto/aes-ctr.o
568 ifdef NEED_AES_ENCBLOCK
569 AESOBJS += ../src/crypto/aes-encblock.o
572 AESOBJS += ../src/crypto/aes-omac1.o
574 ifdef NEED_AES_UNWRAP
576 AESOBJS += ../src/crypto/aes-unwrap.o
580 AESOBJS += ../src/crypto/aes-cbc.o
583 ifdef CONFIG_INTERNAL_AES
584 AESOBJS += ../src/crypto/aes-internal-dec.o
592 SHA1OBJS += ../src/crypto/sha1.o
593 ifdef CONFIG_INTERNAL_SHA1
594 SHA1OBJS += ../src/crypto/sha1-internal.o
595 ifdef NEED_FIPS186_2_PRF
596 SHA1OBJS += ../src/crypto/fips_prf_internal.o
599 SHA1OBJS += ../src/crypto/sha1-pbkdf2.o
601 SHA1OBJS += ../src/crypto/sha1-tprf.o
604 SHA1OBJS += ../src/crypto/sha1-tlsprf.o
613 ifdef CONFIG_INTERNAL_MD5
614 OBJS += ../src/crypto/md5-internal.o
619 ifdef CONFIG_INTERNAL_MD4
620 OBJS += ../src/crypto/md4-internal.o
625 ifdef CONFIG_INTERNAL_DES
626 OBJS += ../src/crypto/des-internal.o
631 ifdef CONFIG_INTERNAL_RC4
632 OBJS += ../src/crypto/rc4.o
637 OBJS += ../src/crypto/sha256.o
638 ifdef CONFIG_INTERNAL_SHA256
639 OBJS += ../src/crypto/sha256-internal.o
644 OBJS += ../src/crypto/dh_groups.o
646 ifdef NEED_DH_GROUPS_ALL
647 CFLAGS += -DALL_DH_GROUPS
649 ifdef CONFIG_INTERNAL_DH_GROUP5
651 OBJS += ../src/crypto/dh_group5.o
655 ifdef CONFIG_RADIUS_SERVER
656 CFLAGS += -DRADIUS_SERVER
657 OBJS += ../src/radius/radius_server.o
661 CFLAGS += -DCONFIG_IPV6
664 ifdef CONFIG_DRIVER_RADIUS_ACL
665 CFLAGS += -DCONFIG_DRIVER_RADIUS_ACL
668 ifdef CONFIG_FULL_DYNAMIC_VLAN
669 # define CONFIG_FULL_DYNAMIC_VLAN to have hostapd manipulate bridges
670 # and vlan interfaces for the vlan feature.
671 CFLAGS += -DCONFIG_FULL_DYNAMIC_VLAN
675 OBJS += ../src/utils/base64.o
679 OBJS += beacon.o wme.o ap_list.o ieee802_11.o
680 OBJS += hw_features.o
681 ifdef CONFIG_IEEE80211N
682 OBJS += ieee802_11_ht.o
684 CFLAGS += -DNEED_AP_MLME
687 ifdef CONFIG_NO_STDOUT_DEBUG
688 CFLAGS += -DCONFIG_NO_STDOUT_DEBUG
691 ALL=hostapd hostapd_cli
693 all: verify_config $(ALL)
703 $(Q)$(CC) -c -o $@ $(CFLAGS) $<
707 @if [ ! -r .config ]; then \
708 echo 'Building hostapd requires a configuration file'; \
709 echo '(.config). See README for more instructions. You can'; \
710 echo 'run "cp defconfig .config" to create an example'; \
711 echo 'configuration.'; \
716 for i in $(ALL); do cp $$i /usr/local/bin/$$i; done
718 ../src/drivers/build.hostapd:
719 @if [ -e ../src/drivers/build.wpa_supplicant ]; then \
720 $(MAKE) -C ../src/drivers clean; \
722 @touch ../src/drivers/build.hostapd
724 BCHECK=../src/drivers/build.hostapd
726 hostapd: $(BCHECK) $(OBJS)
727 $(CC) $(LDFLAGS) -o hostapd $(OBJS) $(LIBS)
729 OBJS_c = hostapd_cli.o ../src/common/wpa_ctrl.o ../src/utils/os_$(CONFIG_OS).o
730 ifdef CONFIG_WPA_TRACE
731 OBJS_c += ../src/utils/trace.o
732 OBJS_c += ../src/utils/wpa_debug.o
734 hostapd_cli: $(OBJS_c)
735 $(CC) $(LDFLAGS) -o hostapd_cli $(OBJS_c) $(LIBS_c)
737 NOBJS = nt_password_hash.o ../src/crypto/ms_funcs.o $(SHA1OBJS) ../src/crypto/rc4.o ../src/crypto/md5.o
738 ifdef CONFIG_INTERNAL_MD5
739 NOBJS += ../src/crypto/md5-internal.o
741 NOBJS += ../src/crypto/crypto_openssl.o ../src/utils/os_$(CONFIG_OS).o
746 HOBJS += hlr_auc_gw.o ../src/utils/common.o ../src/utils/wpa_debug.o ../src/utils/os_$(CONFIG_OS).o ../src/utils/wpabuf.o ../src/crypto/milenage.o
747 HOBJS += ../src/crypto/aes-encblock.o
748 ifdef CONFIG_INTERNAL_AES
749 HOBJS += ../src/crypto/aes-internal.o
750 HOBJS += ../src/crypto/aes-internal-enc.o
753 nt_password_hash: $(NOBJS)
754 $(CC) $(LDFLAGS) -o nt_password_hash $(NOBJS) $(LIBS_n)
757 $(CC) $(LDFLAGS) -o hlr_auc_gw $(HOBJS) $(LIBS_h)
760 $(MAKE) -C ../src clean
761 rm -f core *~ *.o hostapd hostapd_cli nt_password_hash hlr_auc_gw
764 -include $(OBJS:%.o=%.d)