1ifndef CC 2CC=gcc 3endif 4 5ifndef CFLAGS 6CFLAGS = -MMD -O2 -Wall -g 7endif 8 9ifdef LIBS 10# If LIBS is set with some global build system defaults, clone those for 11# LIBS_c, LIBS_h, and LIBS_n to cover hostapd_cli, hlr_auc_gw, and 12# nt_password_hash as well. 13ifndef LIBS_c 14LIBS_c := $(LIBS) 15endif 16ifndef LIBS_h 17LIBS_h := $(LIBS) 18endif 19ifndef LIBS_n 20LIBS_n := $(LIBS) 21endif 22endif 23 24CFLAGS += $(EXTRA_CFLAGS) 25CFLAGS += -I$(abspath ../src) 26CFLAGS += -I$(abspath ../src/utils) 27 28export BINDIR ?= /usr/local/bin/ 29 30-include .config 31 32ifndef CONFIG_NO_GITVER 33# Add VERSION_STR postfix for builds from a git repository 34ifeq ($(wildcard ../.git),../.git) 35GITVER := $(shell git describe --dirty=+) 36ifneq ($(GITVER),) 37CFLAGS += -DGIT_VERSION_STR_POSTFIX=\"-$(GITVER)\" 38endif 39endif 40endif 41 42ifdef CONFIG_TESTING_OPTIONS 43CFLAGS += -DCONFIG_TESTING_OPTIONS 44CONFIG_WPS_TESTING=y 45endif 46 47ifndef CONFIG_OS 48ifdef CONFIG_NATIVE_WINDOWS 49CONFIG_OS=win32 50else 51CONFIG_OS=unix 52endif 53endif 54 55ifeq ($(CONFIG_OS), internal) 56CFLAGS += -DOS_NO_C_LIB_DEFINES 57endif 58 59ifdef CONFIG_NATIVE_WINDOWS 60CFLAGS += -DCONFIG_NATIVE_WINDOWS 61LIBS += -lws2_32 62endif 63 64OBJS += main.o 65OBJS += config_file.o 66 67OBJS += ../src/ap/hostapd.o 68OBJS += ../src/ap/wpa_auth_glue.o 69OBJS += ../src/ap/drv_callbacks.o 70OBJS += ../src/ap/ap_drv_ops.o 71OBJS += ../src/ap/utils.o 72OBJS += ../src/ap/authsrv.o 73OBJS += ../src/ap/ieee802_1x.o 74OBJS += ../src/ap/ap_config.o 75OBJS += ../src/ap/eap_user_db.o 76OBJS += ../src/ap/ieee802_11_auth.o 77OBJS += ../src/ap/sta_info.o 78OBJS += ../src/ap/wpa_auth.o 79OBJS += ../src/ap/tkip_countermeasures.o 80OBJS += ../src/ap/ap_mlme.o 81OBJS += ../src/ap/wpa_auth_ie.o 82OBJS += ../src/ap/preauth_auth.o 83OBJS += ../src/ap/pmksa_cache_auth.o 84OBJS += ../src/ap/ieee802_11_shared.o 85OBJS += ../src/ap/beacon.o 86OBJS += ../src/ap/bss_load.o 87OBJS += ../src/ap/neighbor_db.o 88OBJS += ../src/ap/rrm.o 89 90OBJS_c = hostapd_cli.o 91OBJS_c += ../src/common/wpa_ctrl.o 92OBJS_c += ../src/utils/os_$(CONFIG_OS).o 93OBJS_c += ../src/common/cli.o 94 95NEED_RC4=y 96NEED_AES=y 97NEED_MD5=y 98NEED_SHA1=y 99 100OBJS += ../src/drivers/drivers.o 101CFLAGS += -DHOSTAPD 102 103ifdef CONFIG_TAXONOMY 104CFLAGS += -DCONFIG_TAXONOMY 105OBJS += ../src/ap/taxonomy.o 106endif 107 108ifdef CONFIG_MODULE_TESTS 109CFLAGS += -DCONFIG_MODULE_TESTS 110OBJS += hapd_module_tests.o 111endif 112 113ifdef CONFIG_WPA_TRACE 114CFLAGS += -DWPA_TRACE 115OBJS += ../src/utils/trace.o 116HOBJS += ../src/utils/trace.o 117LDFLAGS += -rdynamic 118CFLAGS += -funwind-tables 119ifdef CONFIG_WPA_TRACE_BFD 120CFLAGS += -DPACKAGE="hostapd" -DWPA_TRACE_BFD 121LIBS += -lbfd -ldl -liberty -lz 122LIBS_c += -lbfd -ldl -liberty -lz 123LIBS_h += -lbfd -ldl -liberty -lz 124endif 125endif 126 127ifndef CONFIG_ELOOP 128CONFIG_ELOOP=eloop 129endif 130OBJS += ../src/utils/$(CONFIG_ELOOP).o 131OBJS_c += ../src/utils/$(CONFIG_ELOOP).o 132 133ifeq ($(CONFIG_ELOOP), eloop) 134# Using glibc < 2.17 requires -lrt for clock_gettime() 135LIBS += -lrt 136LIBS_c += -lrt 137LIBS_h += -lrt 138LIBS_n += -lrt 139endif 140 141ifdef CONFIG_ELOOP_POLL 142CFLAGS += -DCONFIG_ELOOP_POLL 143endif 144 145ifdef CONFIG_ELOOP_EPOLL 146CFLAGS += -DCONFIG_ELOOP_EPOLL 147endif 148 149ifdef CONFIG_ELOOP_KQUEUE 150CFLAGS += -DCONFIG_ELOOP_KQUEUE 151endif 152 153OBJS += ../src/utils/common.o 154OBJS_c += ../src/utils/common.o 155OBJS += ../src/utils/wpa_debug.o 156OBJS_c += ../src/utils/wpa_debug.o 157OBJS += ../src/utils/wpabuf.o 158OBJS += ../src/utils/os_$(CONFIG_OS).o 159OBJS += ../src/utils/ip_addr.o 160 161OBJS += ../src/common/ieee802_11_common.o 162OBJS += ../src/common/wpa_common.o 163OBJS += ../src/common/hw_features_common.o 164 165OBJS += ../src/eapol_auth/eapol_auth_sm.o 166 167 168ifdef CONFIG_CODE_COVERAGE 169CFLAGS += -O0 -fprofile-arcs -ftest-coverage 170LIBS += -lgcov 171LIBS_c += -lgcov 172LIBS_h += -lgcov 173LIBS_n += -lgcov 174endif 175 176ifndef CONFIG_NO_DUMP_STATE 177# define HOSTAPD_DUMP_STATE to include support for dumping internal state 178# through control interface commands (undefine it, if you want to save in 179# binary size) 180CFLAGS += -DHOSTAPD_DUMP_STATE 181OBJS += ../src/eapol_auth/eapol_auth_dump.o 182endif 183 184ifdef CONFIG_NO_RADIUS 185CFLAGS += -DCONFIG_NO_RADIUS 186CONFIG_NO_ACCOUNTING=y 187else 188OBJS += ../src/radius/radius.o 189OBJS += ../src/radius/radius_client.o 190OBJS += ../src/radius/radius_das.o 191endif 192 193ifdef CONFIG_NO_ACCOUNTING 194CFLAGS += -DCONFIG_NO_ACCOUNTING 195else 196OBJS += ../src/ap/accounting.o 197endif 198 199ifdef CONFIG_NO_VLAN 200CFLAGS += -DCONFIG_NO_VLAN 201else 202OBJS += ../src/ap/vlan_init.o 203OBJS += ../src/ap/vlan_ifconfig.o 204OBJS += ../src/ap/vlan.o 205ifdef CONFIG_FULL_DYNAMIC_VLAN 206# Define CONFIG_FULL_DYNAMIC_VLAN to have hostapd manipulate bridges 207# and VLAN interfaces for the VLAN feature. 208CFLAGS += -DCONFIG_FULL_DYNAMIC_VLAN 209OBJS += ../src/ap/vlan_full.o 210ifdef CONFIG_VLAN_NETLINK 211OBJS += ../src/ap/vlan_util.o 212else 213OBJS += ../src/ap/vlan_ioctl.o 214endif 215endif 216endif 217 218ifdef CONFIG_NO_CTRL_IFACE 219CFLAGS += -DCONFIG_NO_CTRL_IFACE 220else 221ifeq ($(CONFIG_CTRL_IFACE), udp) 222CFLAGS += -DCONFIG_CTRL_IFACE_UDP 223else 224ifeq ($(CONFIG_CTRL_IFACE), udp6) 225CFLAGS += -DCONFIG_CTRL_IFACE_UDP 226CFLAGS += -DCONFIG_CTRL_IFACE_UDP_IPV6 227else 228ifeq ($(CONFIG_CTRL_IFACE), udp-remote) 229CFLAGS += -DCONFIG_CTRL_IFACE_UDP 230CFLAGS += -DCONFIG_CTRL_IFACE_UDP_REMOTE 231else 232ifeq ($(CONFIG_CTRL_IFACE), udp6-remote) 233CFLAGS += -DCONFIG_CTRL_IFACE_UDP 234CFLAGS += -DCONFIG_CTRL_IFACE_UDP_REMOTE 235CFLAGS += -DCONFIG_CTRL_IFACE_UDP_IPV6 236else 237CFLAGS += -DCONFIG_CTRL_IFACE_UNIX 238endif 239endif 240endif 241endif 242OBJS += ../src/common/ctrl_iface_common.o 243OBJS += ctrl_iface.o 244OBJS += ../src/ap/ctrl_iface_ap.o 245endif 246 247ifndef CONFIG_NO_CTRL_IFACE 248CFLAGS += -DCONFIG_CTRL_IFACE 249endif 250 251ifdef CONFIG_IAPP 252CFLAGS += -DCONFIG_IAPP 253OBJS += ../src/ap/iapp.o 254endif 255 256ifdef CONFIG_RSN_PREAUTH 257CFLAGS += -DCONFIG_RSN_PREAUTH 258CONFIG_L2_PACKET=y 259endif 260 261ifdef CONFIG_HS20 262NEED_AES_OMAC1=y 263CONFIG_PROXYARP=y 264endif 265 266ifdef CONFIG_PROXYARP 267CONFIG_L2_PACKET=y 268endif 269 270ifdef CONFIG_SUITEB 271CFLAGS += -DCONFIG_SUITEB 272NEED_SHA256=y 273NEED_AES_OMAC1=y 274endif 275 276ifdef CONFIG_SUITEB192 277CFLAGS += -DCONFIG_SUITEB192 278NEED_SHA384=y 279endif 280 281ifdef CONFIG_IEEE80211W 282CFLAGS += -DCONFIG_IEEE80211W 283NEED_SHA256=y 284NEED_AES_OMAC1=y 285endif 286 287ifdef CONFIG_IEEE80211R 288CFLAGS += -DCONFIG_IEEE80211R -DCONFIG_IEEE80211R_AP 289OBJS += ../src/ap/wpa_auth_ft.o 290NEED_SHA256=y 291NEED_AES_OMAC1=y 292NEED_AES_UNWRAP=y 293NEED_AES_SIV=y 294NEED_ETH_P_OUI=y 295NEED_SHA256=y 296NEED_HMAC_SHA256_KDF=y 297endif 298 299ifdef NEED_ETH_P_OUI 300CFLAGS += -DCONFIG_ETH_P_OUI 301OBJS += ../src/ap/eth_p_oui.o 302endif 303 304ifdef CONFIG_SAE 305CFLAGS += -DCONFIG_SAE 306OBJS += ../src/common/sae.o 307NEED_ECC=y 308NEED_DH_GROUPS=y 309NEED_AP_MLME=y 310endif 311 312ifdef CONFIG_OWE 313CFLAGS += -DCONFIG_OWE 314NEED_ECC=y 315NEED_HMAC_SHA256_KDF=y 316NEED_HMAC_SHA384_KDF=y 317NEED_HMAC_SHA512_KDF=y 318NEED_SHA256=y 319NEED_SHA384=y 320NEED_SHA512=y 321endif 322 323ifdef CONFIG_FILS 324CFLAGS += -DCONFIG_FILS 325OBJS += ../src/ap/fils_hlp.o 326NEED_SHA384=y 327NEED_AES_SIV=y 328ifdef CONFIG_FILS_SK_PFS 329CFLAGS += -DCONFIG_FILS_SK_PFS 330NEED_ECC=y 331endif 332endif 333 334ifdef CONFIG_WNM 335CFLAGS += -DCONFIG_WNM -DCONFIG_WNM_AP 336OBJS += ../src/ap/wnm_ap.o 337endif 338 339ifdef CONFIG_IEEE80211N 340CFLAGS += -DCONFIG_IEEE80211N 341endif 342 343ifdef CONFIG_IEEE80211AC 344CFLAGS += -DCONFIG_IEEE80211AC 345endif 346 347ifdef CONFIG_IEEE80211AX 348CFLAGS += -DCONFIG_IEEE80211AX 349OBJS += ../src/ap/ieee802_11_he.o 350endif 351 352ifdef CONFIG_MBO 353CFLAGS += -DCONFIG_MBO 354OBJS += ../src/ap/mbo_ap.o 355endif 356 357include ../src/drivers/drivers.mak 358OBJS += $(DRV_AP_OBJS) 359CFLAGS += $(DRV_AP_CFLAGS) 360LDFLAGS += $(DRV_AP_LDFLAGS) 361LIBS += $(DRV_AP_LIBS) 362 363ifdef CONFIG_L2_PACKET 364ifdef CONFIG_DNET_PCAP 365ifdef CONFIG_L2_FREEBSD 366LIBS += -lpcap 367OBJS += ../src/l2_packet/l2_packet_freebsd.o 368else 369LIBS += -ldnet -lpcap 370OBJS += ../src/l2_packet/l2_packet_pcap.o 371endif 372else 373OBJS += ../src/l2_packet/l2_packet_linux.o 374endif 375else 376OBJS += ../src/l2_packet/l2_packet_none.o 377endif 378 379 380ifdef CONFIG_ERP 381CFLAGS += -DCONFIG_ERP 382NEED_SHA256=y 383NEED_HMAC_SHA256_KDF=y 384endif 385 386ifdef CONFIG_EAP_MD5 387CFLAGS += -DEAP_SERVER_MD5 388OBJS += ../src/eap_server/eap_server_md5.o 389CHAP=y 390endif 391 392ifdef CONFIG_EAP_TLS 393CFLAGS += -DEAP_SERVER_TLS 394OBJS += ../src/eap_server/eap_server_tls.o 395TLS_FUNCS=y 396endif 397 398ifdef CONFIG_EAP_UNAUTH_TLS 399CFLAGS += -DEAP_SERVER_UNAUTH_TLS 400ifndef CONFIG_EAP_TLS 401OBJS += ../src/eap_server/eap_server_tls.o 402TLS_FUNCS=y 403endif 404endif 405 406ifdef CONFIG_EAP_PEAP 407CFLAGS += -DEAP_SERVER_PEAP 408OBJS += ../src/eap_server/eap_server_peap.o 409OBJS += ../src/eap_common/eap_peap_common.o 410TLS_FUNCS=y 411CONFIG_EAP_MSCHAPV2=y 412endif 413 414ifdef CONFIG_EAP_TTLS 415CFLAGS += -DEAP_SERVER_TTLS 416OBJS += ../src/eap_server/eap_server_ttls.o 417TLS_FUNCS=y 418CHAP=y 419endif 420 421ifdef CONFIG_EAP_MSCHAPV2 422CFLAGS += -DEAP_SERVER_MSCHAPV2 423OBJS += ../src/eap_server/eap_server_mschapv2.o 424MS_FUNCS=y 425endif 426 427ifdef CONFIG_EAP_GTC 428CFLAGS += -DEAP_SERVER_GTC 429OBJS += ../src/eap_server/eap_server_gtc.o 430endif 431 432ifdef CONFIG_EAP_SIM 433CFLAGS += -DEAP_SERVER_SIM 434OBJS += ../src/eap_server/eap_server_sim.o 435CONFIG_EAP_SIM_COMMON=y 436NEED_AES_CBC=y 437endif 438 439ifdef CONFIG_EAP_AKA 440CFLAGS += -DEAP_SERVER_AKA 441OBJS += ../src/eap_server/eap_server_aka.o 442CONFIG_EAP_SIM_COMMON=y 443NEED_SHA256=y 444NEED_AES_CBC=y 445endif 446 447ifdef CONFIG_EAP_AKA_PRIME 448CFLAGS += -DEAP_SERVER_AKA_PRIME 449endif 450 451ifdef CONFIG_EAP_SIM_COMMON 452OBJS += ../src/eap_common/eap_sim_common.o 453# Example EAP-SIM/AKA interface for GSM/UMTS authentication. This can be 454# replaced with another file implementating the interface specified in 455# eap_sim_db.h. 456OBJS += ../src/eap_server/eap_sim_db.o 457NEED_FIPS186_2_PRF=y 458endif 459 460ifdef CONFIG_EAP_PAX 461CFLAGS += -DEAP_SERVER_PAX 462OBJS += ../src/eap_server/eap_server_pax.o ../src/eap_common/eap_pax_common.o 463endif 464 465ifdef CONFIG_EAP_PSK 466CFLAGS += -DEAP_SERVER_PSK 467OBJS += ../src/eap_server/eap_server_psk.o ../src/eap_common/eap_psk_common.o 468NEED_AES_OMAC1=y 469NEED_AES_ENCBLOCK=y 470NEED_AES_EAX=y 471endif 472 473ifdef CONFIG_EAP_SAKE 474CFLAGS += -DEAP_SERVER_SAKE 475OBJS += ../src/eap_server/eap_server_sake.o ../src/eap_common/eap_sake_common.o 476endif 477 478ifdef CONFIG_EAP_GPSK 479CFLAGS += -DEAP_SERVER_GPSK 480OBJS += ../src/eap_server/eap_server_gpsk.o ../src/eap_common/eap_gpsk_common.o 481ifdef CONFIG_EAP_GPSK_SHA256 482CFLAGS += -DEAP_GPSK_SHA256 483endif 484NEED_SHA256=y 485NEED_AES_OMAC1=y 486endif 487 488ifdef CONFIG_EAP_PWD 489CFLAGS += -DEAP_SERVER_PWD 490OBJS += ../src/eap_server/eap_server_pwd.o ../src/eap_common/eap_pwd_common.o 491NEED_SHA256=y 492endif 493 494ifdef CONFIG_EAP_EKE 495CFLAGS += -DEAP_SERVER_EKE 496OBJS += ../src/eap_server/eap_server_eke.o ../src/eap_common/eap_eke_common.o 497NEED_DH_GROUPS=y 498NEED_DH_GROUPS_ALL=y 499endif 500 501ifdef CONFIG_EAP_VENDOR_TEST 502CFLAGS += -DEAP_SERVER_VENDOR_TEST 503OBJS += ../src/eap_server/eap_server_vendor_test.o 504endif 505 506ifdef CONFIG_EAP_FAST 507CFLAGS += -DEAP_SERVER_FAST 508OBJS += ../src/eap_server/eap_server_fast.o 509OBJS += ../src/eap_common/eap_fast_common.o 510TLS_FUNCS=y 511NEED_T_PRF=y 512NEED_AES_UNWRAP=y 513endif 514 515ifdef CONFIG_WPS 516CFLAGS += -DCONFIG_WPS -DEAP_SERVER_WSC 517OBJS += ../src/utils/uuid.o 518OBJS += ../src/ap/wps_hostapd.o 519OBJS += ../src/eap_server/eap_server_wsc.o ../src/eap_common/eap_wsc_common.o 520OBJS += ../src/wps/wps.o 521OBJS += ../src/wps/wps_common.o 522OBJS += ../src/wps/wps_attr_parse.o 523OBJS += ../src/wps/wps_attr_build.o 524OBJS += ../src/wps/wps_attr_process.o 525OBJS += ../src/wps/wps_dev_attr.o 526OBJS += ../src/wps/wps_enrollee.o 527OBJS += ../src/wps/wps_registrar.o 528NEED_DH_GROUPS=y 529NEED_SHA256=y 530NEED_BASE64=y 531NEED_AES_CBC=y 532NEED_MODEXP=y 533CONFIG_EAP=y 534 535ifdef CONFIG_WPS_NFC 536CFLAGS += -DCONFIG_WPS_NFC 537OBJS += ../src/wps/ndef.o 538NEED_WPS_OOB=y 539endif 540 541ifdef NEED_WPS_OOB 542CFLAGS += -DCONFIG_WPS_OOB 543endif 544 545ifdef CONFIG_WPS_UPNP 546CFLAGS += -DCONFIG_WPS_UPNP 547OBJS += ../src/wps/wps_upnp.o 548OBJS += ../src/wps/wps_upnp_ssdp.o 549OBJS += ../src/wps/wps_upnp_web.o 550OBJS += ../src/wps/wps_upnp_event.o 551OBJS += ../src/wps/wps_upnp_ap.o 552OBJS += ../src/wps/upnp_xml.o 553OBJS += ../src/wps/httpread.o 554OBJS += ../src/wps/http_client.o 555OBJS += ../src/wps/http_server.o 556endif 557 558ifdef CONFIG_WPS_STRICT 559CFLAGS += -DCONFIG_WPS_STRICT 560OBJS += ../src/wps/wps_validate.o 561endif 562 563ifdef CONFIG_WPS_TESTING 564CFLAGS += -DCONFIG_WPS_TESTING 565endif 566 567endif 568 569ifdef CONFIG_DPP 570CFLAGS += -DCONFIG_DPP 571OBJS += ../src/common/dpp.o 572OBJS += ../src/ap/dpp_hostapd.o 573OBJS += ../src/ap/gas_query_ap.o 574NEED_AES_SIV=y 575NEED_HMAC_SHA256_KDF=y 576NEED_HMAC_SHA384_KDF=y 577NEED_HMAC_SHA512_KDF=y 578NEED_SHA256=y 579NEED_SHA384=y 580NEED_SHA512=y 581NEED_JSON=y 582NEED_GAS=y 583NEED_BASE64=y 584endif 585 586ifdef CONFIG_EAP_IKEV2 587CFLAGS += -DEAP_SERVER_IKEV2 588OBJS += ../src/eap_server/eap_server_ikev2.o ../src/eap_server/ikev2.o 589OBJS += ../src/eap_common/eap_ikev2_common.o ../src/eap_common/ikev2_common.o 590NEED_DH_GROUPS=y 591NEED_DH_GROUPS_ALL=y 592NEED_MODEXP=y 593NEED_CIPHER=y 594endif 595 596ifdef CONFIG_EAP_TNC 597CFLAGS += -DEAP_SERVER_TNC 598OBJS += ../src/eap_server/eap_server_tnc.o 599OBJS += ../src/eap_server/tncs.o 600NEED_BASE64=y 601ifndef CONFIG_DRIVER_BSD 602LIBS += -ldl 603endif 604endif 605 606# Basic EAP functionality is needed for EAPOL 607OBJS += eap_register.o 608OBJS += ../src/eap_server/eap_server.o 609OBJS += ../src/eap_common/eap_common.o 610OBJS += ../src/eap_server/eap_server_methods.o 611OBJS += ../src/eap_server/eap_server_identity.o 612CFLAGS += -DEAP_SERVER_IDENTITY 613 614ifdef CONFIG_EAP 615CFLAGS += -DEAP_SERVER 616endif 617 618ifdef CONFIG_PKCS12 619CFLAGS += -DPKCS12_FUNCS 620endif 621 622ifdef MS_FUNCS 623OBJS += ../src/crypto/ms_funcs.o 624NEED_DES=y 625NEED_MD4=y 626endif 627 628ifdef CHAP 629OBJS += ../src/eap_common/chap.o 630endif 631 632ifdef TLS_FUNCS 633NEED_DES=y 634# Shared TLS functions (needed for EAP_TLS, EAP_PEAP, and EAP_TTLS) 635CFLAGS += -DEAP_TLS_FUNCS 636OBJS += ../src/eap_server/eap_server_tls_common.o 637NEED_TLS_PRF=y 638endif 639 640ifndef CONFIG_TLS 641CONFIG_TLS=openssl 642endif 643 644ifdef CONFIG_TLSV11 645CFLAGS += -DCONFIG_TLSV11 646endif 647 648ifdef CONFIG_TLSV12 649CFLAGS += -DCONFIG_TLSV12 650NEED_SHA256=y 651endif 652 653ifeq ($(CONFIG_TLS), openssl) 654ifdef TLS_FUNCS 655OBJS += ../src/crypto/tls_openssl.o 656OBJS += ../src/crypto/tls_openssl_ocsp.o 657LIBS += -lssl 658endif 659OBJS += ../src/crypto/crypto_openssl.o 660HOBJS += ../src/crypto/crypto_openssl.o 661ifdef NEED_FIPS186_2_PRF 662OBJS += ../src/crypto/fips_prf_openssl.o 663endif 664NEED_SHA256=y 665NEED_TLS_PRF_SHA256=y 666LIBS += -lcrypto 667LIBS_h += -lcrypto 668ifdef CONFIG_TLS_ADD_DL 669LIBS += -ldl 670LIBS_h += -ldl 671endif 672ifndef CONFIG_TLS_DEFAULT_CIPHERS 673CONFIG_TLS_DEFAULT_CIPHERS = "DEFAULT:!EXP:!LOW" 674endif 675CFLAGS += -DTLS_DEFAULT_CIPHERS=\"$(CONFIG_TLS_DEFAULT_CIPHERS)\" 676endif 677 678ifeq ($(CONFIG_TLS), gnutls) 679ifdef TLS_FUNCS 680OBJS += ../src/crypto/tls_gnutls.o 681LIBS += -lgnutls -lgpg-error 682endif 683OBJS += ../src/crypto/crypto_gnutls.o 684HOBJS += ../src/crypto/crypto_gnutls.o 685ifdef NEED_FIPS186_2_PRF 686OBJS += ../src/crypto/fips_prf_internal.o 687SHA1OBJS += ../src/crypto/sha1-internal.o 688endif 689LIBS += -lgcrypt 690LIBS_h += -lgcrypt 691CONFIG_INTERNAL_SHA256=y 692CONFIG_INTERNAL_RC4=y 693CONFIG_INTERNAL_DH_GROUP5=y 694endif 695 696ifeq ($(CONFIG_TLS), internal) 697ifndef CONFIG_CRYPTO 698CONFIG_CRYPTO=internal 699endif 700ifdef TLS_FUNCS 701OBJS += ../src/crypto/crypto_internal-rsa.o 702OBJS += ../src/crypto/tls_internal.o 703OBJS += ../src/tls/tlsv1_common.o 704OBJS += ../src/tls/tlsv1_record.o 705OBJS += ../src/tls/tlsv1_cred.o 706OBJS += ../src/tls/tlsv1_server.o 707OBJS += ../src/tls/tlsv1_server_write.o 708OBJS += ../src/tls/tlsv1_server_read.o 709OBJS += ../src/tls/asn1.o 710OBJS += ../src/tls/rsa.o 711OBJS += ../src/tls/x509v3.o 712OBJS += ../src/tls/pkcs1.o 713OBJS += ../src/tls/pkcs5.o 714OBJS += ../src/tls/pkcs8.o 715NEED_SHA256=y 716NEED_BASE64=y 717NEED_TLS_PRF=y 718ifdef CONFIG_TLSV12 719NEED_TLS_PRF_SHA256=y 720endif 721NEED_MODEXP=y 722NEED_CIPHER=y 723CFLAGS += -DCONFIG_TLS_INTERNAL 724CFLAGS += -DCONFIG_TLS_INTERNAL_SERVER 725endif 726ifdef NEED_CIPHER 727NEED_DES=y 728OBJS += ../src/crypto/crypto_internal-cipher.o 729endif 730ifdef NEED_MODEXP 731OBJS += ../src/crypto/crypto_internal-modexp.o 732OBJS += ../src/tls/bignum.o 733endif 734ifeq ($(CONFIG_CRYPTO), libtomcrypt) 735OBJS += ../src/crypto/crypto_libtomcrypt.o 736LIBS += -ltomcrypt -ltfm 737LIBS_h += -ltomcrypt -ltfm 738CONFIG_INTERNAL_SHA256=y 739CONFIG_INTERNAL_RC4=y 740CONFIG_INTERNAL_DH_GROUP5=y 741endif 742ifeq ($(CONFIG_CRYPTO), internal) 743OBJS += ../src/crypto/crypto_internal.o 744NEED_AES_DEC=y 745CFLAGS += -DCONFIG_CRYPTO_INTERNAL 746ifdef CONFIG_INTERNAL_LIBTOMMATH 747CFLAGS += -DCONFIG_INTERNAL_LIBTOMMATH 748ifdef CONFIG_INTERNAL_LIBTOMMATH_FAST 749CFLAGS += -DLTM_FAST 750endif 751else 752LIBS += -ltommath 753LIBS_h += -ltommath 754endif 755CONFIG_INTERNAL_AES=y 756CONFIG_INTERNAL_DES=y 757CONFIG_INTERNAL_SHA1=y 758CONFIG_INTERNAL_MD4=y 759CONFIG_INTERNAL_MD5=y 760CONFIG_INTERNAL_SHA256=y 761CONFIG_INTERNAL_SHA384=y 762CONFIG_INTERNAL_SHA512=y 763CONFIG_INTERNAL_RC4=y 764CONFIG_INTERNAL_DH_GROUP5=y 765endif 766ifeq ($(CONFIG_CRYPTO), cryptoapi) 767OBJS += ../src/crypto/crypto_cryptoapi.o 768OBJS_p += ../src/crypto/crypto_cryptoapi.o 769CFLAGS += -DCONFIG_CRYPTO_CRYPTOAPI 770CONFIG_INTERNAL_SHA256=y 771CONFIG_INTERNAL_RC4=y 772endif 773endif 774 775ifeq ($(CONFIG_TLS), linux) 776OBJS += ../src/crypto/crypto_linux.o 777ifdef TLS_FUNCS 778OBJS += ../src/crypto/crypto_internal-rsa.o 779OBJS += ../src/crypto/tls_internal.o 780OBJS += ../src/tls/tlsv1_common.o 781OBJS += ../src/tls/tlsv1_record.o 782OBJS += ../src/tls/tlsv1_cred.o 783OBJS += ../src/tls/tlsv1_server.o 784OBJS += ../src/tls/tlsv1_server_write.o 785OBJS += ../src/tls/tlsv1_server_read.o 786OBJS += ../src/tls/asn1.o 787OBJS += ../src/tls/rsa.o 788OBJS += ../src/tls/x509v3.o 789OBJS += ../src/tls/pkcs1.o 790OBJS += ../src/tls/pkcs5.o 791OBJS += ../src/tls/pkcs8.o 792NEED_SHA256=y 793NEED_BASE64=y 794NEED_TLS_PRF=y 795ifdef CONFIG_TLSV12 796NEED_TLS_PRF_SHA256=y 797endif 798NEED_MODEXP=y 799NEED_CIPHER=y 800CFLAGS += -DCONFIG_TLS_INTERNAL 801CFLAGS += -DCONFIG_TLS_INTERNAL_SERVER 802endif 803ifdef NEED_MODEXP 804OBJS += ../src/crypto/crypto_internal-modexp.o 805OBJS += ../src/tls/bignum.o 806CFLAGS += -DCONFIG_INTERNAL_LIBTOMMATH 807CFLAGS += -DLTM_FAST 808endif 809CONFIG_INTERNAL_DH_GROUP5=y 810ifdef NEED_FIPS186_2_PRF 811OBJS += ../src/crypto/fips_prf_internal.o 812OBJS += ../src/crypto/sha1-internal.o 813endif 814endif 815 816ifeq ($(CONFIG_TLS), none) 817ifdef TLS_FUNCS 818OBJS += ../src/crypto/tls_none.o 819CFLAGS += -DEAP_TLS_NONE 820CONFIG_INTERNAL_AES=y 821CONFIG_INTERNAL_SHA1=y 822CONFIG_INTERNAL_MD5=y 823endif 824OBJS += ../src/crypto/crypto_none.o 825OBJS_p += ../src/crypto/crypto_none.o 826CONFIG_INTERNAL_SHA256=y 827CONFIG_INTERNAL_RC4=y 828endif 829 830ifndef TLS_FUNCS 831OBJS += ../src/crypto/tls_none.o 832ifeq ($(CONFIG_TLS), internal) 833CONFIG_INTERNAL_AES=y 834CONFIG_INTERNAL_SHA1=y 835CONFIG_INTERNAL_MD5=y 836CONFIG_INTERNAL_RC4=y 837endif 838endif 839 840AESOBJS = # none so far 841ifdef CONFIG_INTERNAL_AES 842AESOBJS += ../src/crypto/aes-internal.o ../src/crypto/aes-internal-enc.o 843endif 844 845ifneq ($(CONFIG_TLS), openssl) 846AESOBJS += ../src/crypto/aes-wrap.o 847endif 848ifdef NEED_AES_EAX 849AESOBJS += ../src/crypto/aes-eax.o 850NEED_AES_CTR=y 851NEED_AES_OMAC1=y 852endif 853ifdef NEED_AES_SIV 854AESOBJS += ../src/crypto/aes-siv.o 855NEED_AES_CTR=y 856NEED_AES_OMAC1=y 857endif 858ifdef NEED_AES_CTR 859AESOBJS += ../src/crypto/aes-ctr.o 860endif 861ifdef NEED_AES_ENCBLOCK 862AESOBJS += ../src/crypto/aes-encblock.o 863endif 864ifdef NEED_AES_OMAC1 865ifneq ($(CONFIG_TLS), linux) 866AESOBJS += ../src/crypto/aes-omac1.o 867endif 868endif 869ifdef NEED_AES_UNWRAP 870ifneq ($(CONFIG_TLS), openssl) 871ifneq ($(CONFIG_TLS), linux) 872NEED_AES_DEC=y 873AESOBJS += ../src/crypto/aes-unwrap.o 874endif 875endif 876endif 877ifdef NEED_AES_CBC 878NEED_AES_DEC=y 879ifneq ($(CONFIG_TLS), openssl) 880ifneq ($(CONFIG_TLS), linux) 881AESOBJS += ../src/crypto/aes-cbc.o 882endif 883endif 884endif 885ifdef NEED_AES_DEC 886ifdef CONFIG_INTERNAL_AES 887AESOBJS += ../src/crypto/aes-internal-dec.o 888endif 889endif 890ifdef NEED_AES 891OBJS += $(AESOBJS) 892endif 893 894ifdef NEED_SHA1 895ifneq ($(CONFIG_TLS), openssl) 896ifneq ($(CONFIG_TLS), linux) 897SHA1OBJS += ../src/crypto/sha1.o 898endif 899endif 900SHA1OBJS += ../src/crypto/sha1-prf.o 901ifdef CONFIG_INTERNAL_SHA1 902SHA1OBJS += ../src/crypto/sha1-internal.o 903ifdef NEED_FIPS186_2_PRF 904SHA1OBJS += ../src/crypto/fips_prf_internal.o 905endif 906endif 907ifneq ($(CONFIG_TLS), openssl) 908SHA1OBJS += ../src/crypto/sha1-pbkdf2.o 909endif 910ifdef NEED_T_PRF 911SHA1OBJS += ../src/crypto/sha1-tprf.o 912endif 913ifdef NEED_TLS_PRF 914SHA1OBJS += ../src/crypto/sha1-tlsprf.o 915endif 916endif 917 918ifdef NEED_SHA1 919OBJS += $(SHA1OBJS) 920endif 921 922ifneq ($(CONFIG_TLS), openssl) 923ifneq ($(CONFIG_TLS), linux) 924OBJS += ../src/crypto/md5.o 925endif 926endif 927 928ifdef NEED_MD5 929ifdef CONFIG_INTERNAL_MD5 930OBJS += ../src/crypto/md5-internal.o 931HOBJS += ../src/crypto/md5-internal.o 932endif 933endif 934 935ifdef NEED_MD4 936ifdef CONFIG_INTERNAL_MD4 937OBJS += ../src/crypto/md4-internal.o 938endif 939endif 940 941ifdef NEED_DES 942ifdef CONFIG_INTERNAL_DES 943OBJS += ../src/crypto/des-internal.o 944endif 945endif 946 947ifdef CONFIG_NO_RC4 948CFLAGS += -DCONFIG_NO_RC4 949endif 950 951ifdef NEED_RC4 952ifdef CONFIG_INTERNAL_RC4 953ifndef CONFIG_NO_RC4 954OBJS += ../src/crypto/rc4.o 955endif 956endif 957endif 958 959ifdef NEED_SHA256 960CFLAGS += -DCONFIG_SHA256 961ifneq ($(CONFIG_TLS), openssl) 962ifneq ($(CONFIG_TLS), linux) 963OBJS += ../src/crypto/sha256.o 964endif 965endif 966OBJS += ../src/crypto/sha256-prf.o 967ifdef CONFIG_INTERNAL_SHA256 968OBJS += ../src/crypto/sha256-internal.o 969endif 970ifdef NEED_TLS_PRF_SHA256 971OBJS += ../src/crypto/sha256-tlsprf.o 972endif 973ifdef NEED_HMAC_SHA256_KDF 974OBJS += ../src/crypto/sha256-kdf.o 975endif 976ifdef NEED_HMAC_SHA384_KDF 977OBJS += ../src/crypto/sha384-kdf.o 978endif 979ifdef NEED_HMAC_SHA512_KDF 980OBJS += ../src/crypto/sha512-kdf.o 981endif 982endif 983ifdef NEED_SHA384 984CFLAGS += -DCONFIG_SHA384 985ifneq ($(CONFIG_TLS), openssl) 986ifneq ($(CONFIG_TLS), linux) 987OBJS += ../src/crypto/sha384.o 988endif 989endif 990OBJS += ../src/crypto/sha384-prf.o 991endif 992ifdef NEED_SHA512 993CFLAGS += -DCONFIG_SHA512 994ifneq ($(CONFIG_TLS), openssl) 995ifneq ($(CONFIG_TLS), linux) 996OBJS += ../src/crypto/sha512.o 997endif 998endif 999OBJS += ../src/crypto/sha512-prf.o 1000endif 1001 1002ifdef CONFIG_INTERNAL_SHA384 1003CFLAGS += -DCONFIG_INTERNAL_SHA384 1004OBJS += ../src/crypto/sha384-internal.o 1005endif 1006 1007ifdef CONFIG_INTERNAL_SHA512 1008CFLAGS += -DCONFIG_INTERNAL_SHA512 1009OBJS += ../src/crypto/sha512-internal.o 1010endif 1011 1012ifdef NEED_DH_GROUPS 1013OBJS += ../src/crypto/dh_groups.o 1014endif 1015ifdef NEED_DH_GROUPS_ALL 1016CFLAGS += -DALL_DH_GROUPS 1017endif 1018ifdef CONFIG_INTERNAL_DH_GROUP5 1019ifdef NEED_DH_GROUPS 1020OBJS += ../src/crypto/dh_group5.o 1021endif 1022endif 1023 1024ifdef NEED_ECC 1025CFLAGS += -DCONFIG_ECC 1026endif 1027 1028ifdef CONFIG_NO_RANDOM_POOL 1029CFLAGS += -DCONFIG_NO_RANDOM_POOL 1030else 1031OBJS += ../src/crypto/random.o 1032HOBJS += ../src/crypto/random.o 1033HOBJS += ../src/utils/eloop.o 1034HOBJS += $(SHA1OBJS) 1035ifneq ($(CONFIG_TLS), openssl) 1036ifneq ($(CONFIG_TLS), linux) 1037HOBJS += ../src/crypto/md5.o 1038endif 1039endif 1040endif 1041 1042ifdef CONFIG_RADIUS_SERVER 1043CFLAGS += -DRADIUS_SERVER 1044OBJS += ../src/radius/radius_server.o 1045endif 1046 1047ifdef CONFIG_IPV6 1048CFLAGS += -DCONFIG_IPV6 1049endif 1050 1051ifdef CONFIG_DRIVER_RADIUS_ACL 1052CFLAGS += -DCONFIG_DRIVER_RADIUS_ACL 1053endif 1054 1055ifdef NEED_BASE64 1056OBJS += ../src/utils/base64.o 1057endif 1058 1059ifdef NEED_JSON 1060OBJS += ../src/utils/json.o 1061CFLAGS += -DCONFIG_JSON 1062endif 1063 1064ifdef NEED_AP_MLME 1065OBJS += ../src/ap/wmm.o 1066OBJS += ../src/ap/ap_list.o 1067OBJS += ../src/ap/ieee802_11.o 1068OBJS += ../src/ap/hw_features.o 1069OBJS += ../src/ap/dfs.o 1070CFLAGS += -DNEED_AP_MLME 1071endif 1072ifdef CONFIG_IEEE80211N 1073OBJS += ../src/ap/ieee802_11_ht.o 1074endif 1075 1076ifdef CONFIG_IEEE80211AC 1077OBJS += ../src/ap/ieee802_11_vht.o 1078endif 1079 1080ifdef CONFIG_P2P_MANAGER 1081CFLAGS += -DCONFIG_P2P_MANAGER 1082OBJS += ../src/ap/p2p_hostapd.o 1083endif 1084 1085ifdef CONFIG_HS20 1086CFLAGS += -DCONFIG_HS20 1087OBJS += ../src/ap/hs20.o 1088CONFIG_INTERWORKING=y 1089endif 1090 1091ifdef CONFIG_INTERWORKING 1092CFLAGS += -DCONFIG_INTERWORKING 1093NEED_GAS=y 1094endif 1095 1096ifdef NEED_GAS 1097OBJS += ../src/common/gas.o 1098OBJS += ../src/ap/gas_serv.o 1099endif 1100 1101ifdef CONFIG_PROXYARP 1102CFLAGS += -DCONFIG_PROXYARP 1103OBJS += ../src/ap/x_snoop.o 1104OBJS += ../src/ap/dhcp_snoop.o 1105ifdef CONFIG_IPV6 1106OBJS += ../src/ap/ndisc_snoop.o 1107endif 1108endif 1109 1110OBJS += ../src/drivers/driver_common.o 1111 1112ifdef CONFIG_WPA_CLI_EDIT 1113OBJS_c += ../src/utils/edit.o 1114else 1115OBJS_c += ../src/utils/edit_simple.o 1116endif 1117 1118ifdef CONFIG_ACS 1119CFLAGS += -DCONFIG_ACS 1120OBJS += ../src/ap/acs.o 1121LIBS += -lm 1122endif 1123 1124ifdef CONFIG_NO_STDOUT_DEBUG 1125CFLAGS += -DCONFIG_NO_STDOUT_DEBUG 1126endif 1127 1128ifdef CONFIG_DEBUG_SYSLOG 1129CFLAGS += -DCONFIG_DEBUG_SYSLOG 1130endif 1131 1132ifdef CONFIG_DEBUG_LINUX_TRACING 1133CFLAGS += -DCONFIG_DEBUG_LINUX_TRACING 1134endif 1135 1136ifdef CONFIG_DEBUG_FILE 1137CFLAGS += -DCONFIG_DEBUG_FILE 1138endif 1139 1140ifdef CONFIG_SQLITE 1141CFLAGS += -DCONFIG_SQLITE 1142LIBS += -lsqlite3 1143LIBS_h += -lsqlite3 1144endif 1145 1146ifdef CONFIG_FST 1147CFLAGS += -DCONFIG_FST 1148OBJS += ../src/fst/fst.o 1149OBJS += ../src/fst/fst_group.o 1150OBJS += ../src/fst/fst_iface.o 1151OBJS += ../src/fst/fst_session.o 1152OBJS += ../src/fst/fst_ctrl_aux.o 1153ifdef CONFIG_FST_TEST 1154CFLAGS += -DCONFIG_FST_TEST 1155endif 1156ifndef CONFIG_NO_CTRL_IFACE 1157OBJS += ../src/fst/fst_ctrl_iface.o 1158endif 1159endif 1160 1161ALL=hostapd hostapd_cli 1162 1163all: verify_config $(ALL) 1164 1165Q=@ 1166E=echo 1167ifeq ($(V), 1) 1168Q= 1169E=true 1170endif 1171ifeq ($(QUIET), 1) 1172Q=@ 1173E=true 1174endif 1175 1176ifdef CONFIG_CODE_COVERAGE 1177%.o: %.c 1178 @$(E) " CC " $< 1179 $(Q)cd $(dir $@); $(CC) -c -o $(notdir $@) $(CFLAGS) $(notdir $<) 1180else 1181%.o: %.c 1182 $(Q)$(CC) -c -o $@ $(CFLAGS) $< 1183 @$(E) " CC " $< 1184endif 1185 1186verify_config: 1187 @if [ ! -r .config ]; then \ 1188 echo 'Building hostapd requires a configuration file'; \ 1189 echo '(.config). See README for more instructions. You can'; \ 1190 echo 'run "cp defconfig .config" to create an example'; \ 1191 echo 'configuration.'; \ 1192 exit 1; \ 1193 fi 1194 1195$(DESTDIR)$(BINDIR)/%: % 1196 install -D $(<) $(@) 1197 1198install: $(addprefix $(DESTDIR)$(BINDIR)/,$(ALL)) 1199 1200../src/drivers/build.hostapd: 1201 @if [ -f ../src/drivers/build.wpa_supplicant ]; then \ 1202 $(MAKE) -C ../src/drivers clean; \ 1203 fi 1204 @touch ../src/drivers/build.hostapd 1205 1206BCHECK=../src/drivers/build.hostapd 1207 1208hostapd: $(BCHECK) $(OBJS) 1209 $(Q)$(CC) $(LDFLAGS) -o hostapd $(OBJS) $(LIBS) 1210 @$(E) " LD " $@ 1211 1212ifdef CONFIG_WPA_TRACE 1213OBJS_c += ../src/utils/trace.o 1214endif 1215hostapd_cli: $(OBJS_c) 1216 $(Q)$(CC) $(LDFLAGS) -o hostapd_cli $(OBJS_c) $(LIBS_c) 1217 @$(E) " LD " $@ 1218 1219NOBJS = nt_password_hash.o ../src/crypto/ms_funcs.o $(SHA1OBJS) 1220NOBJS += ../src/utils/common.o 1221ifdef NEED_RC4 1222ifdef CONFIG_INTERNAL_RC4 1223ifndef CONFIG_NO_RC4 1224NOBJS += ../src/crypto/rc4.o 1225endif 1226endif 1227endif 1228ifdef CONFIG_INTERNAL_MD5 1229NOBJS += ../src/crypto/md5-internal.o 1230endif 1231NOBJS += ../src/crypto/crypto_openssl.o ../src/utils/os_$(CONFIG_OS).o 1232NOBJS += ../src/utils/wpa_debug.o 1233NOBJS += ../src/utils/wpabuf.o 1234ifdef CONFIG_WPA_TRACE 1235NOBJS += ../src/utils/trace.o 1236LIBS_n += -lbfd 1237endif 1238ifdef TLS_FUNCS 1239LIBS_n += -lcrypto 1240endif 1241 1242HOBJS += hlr_auc_gw.o ../src/utils/common.o ../src/utils/wpa_debug.o ../src/utils/os_$(CONFIG_OS).o ../src/utils/wpabuf.o ../src/crypto/milenage.o 1243HOBJS += ../src/crypto/aes-encblock.o 1244ifdef CONFIG_INTERNAL_AES 1245HOBJS += ../src/crypto/aes-internal.o 1246HOBJS += ../src/crypto/aes-internal-enc.o 1247endif 1248ifeq ($(CONFIG_TLS), linux) 1249HOBJS += ../src/crypto/crypto_linux.o 1250endif 1251 1252nt_password_hash: $(NOBJS) 1253 $(Q)$(CC) $(LDFLAGS) -o nt_password_hash $(NOBJS) $(LIBS_n) 1254 @$(E) " LD " $@ 1255 1256hlr_auc_gw: $(HOBJS) 1257 $(Q)$(CC) $(LDFLAGS) -o hlr_auc_gw $(HOBJS) $(LIBS_h) 1258 @$(E) " LD " $@ 1259 1260lcov-html: 1261 lcov -c -d .. > lcov.info 1262 genhtml lcov.info --output-directory lcov-html 1263 1264clean: 1265 $(MAKE) -C ../src clean 1266 rm -f core *~ *.o hostapd hostapd_cli nt_password_hash hlr_auc_gw 1267 rm -f *.d *.gcno *.gcda *.gcov 1268 rm -f lcov.info 1269 rm -rf lcov-html 1270 1271-include $(OBJS:%.o=%.d) 1272