DGNum/hostapd
6
0
Fork 0
Code Issues Pull requests 1 Projects Releases Packages Wiki Activity Actions
hostapd/wpa_supplicant/Android.mk

1825 lines
38 KiB
Makefile
Raw Normal View History

Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
#
# Copyright (C) 2008 The Android Open Source Project
#
wpa_supplicant: Make Android makefiles available under the BSD license Signed-off-by: Dmitry Shmidt <dimitrysh@google.com>
2012-05-15 02:34:24 +02:00
# This software may be distributed under the terms of the BSD license.
# See README for more details.
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
#
LOCAL_PATH := $(call my-dir)
wpa_supplicant: Respect PKG_CONFIG variable if set in the environment This is required for cross-compilation support on certain platforms to avoid changing the pkg-config files themselves. Signed-off-by: David James <davidjames@chromium.org> Signed-off-by: Paul Stewart <pstew@chromium.org>
2011-07-04 19:35:38 +02:00
PKG_CONFIG ?= pkg-config
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
Android: Remove the simulator target from all makefiles This is commit bbda627478b0e9a312fea4662cd7cd8d6bdf82bf from Android wpa_supplicant_8.git.
2011-11-23 16:56:41 +01:00
ifneq ($(BOARD_WPA_SUPPLICANT_DRIVER),)
CONFIG_DRIVER_$(BOARD_WPA_SUPPLICANT_DRIVER) := y
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
endif
Android: Add build configuration files These are from Android wpa_supplicant_8.git initial 0.8.X commit 8d520ff1dc2da35cdca849e982051b86468016d8 with some additional edits and renaming of .config files to android.config. Signed-off-by: Dmitry Shmidt <dimitrysh@google.com>
2011-11-15 15:02:30 +01:00
include $(LOCAL_PATH)/android.config
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
# To ignore possible wrong network configurations
L_CFLAGS = -DWPA_IGNORE_CONFIG_ERRORS
Android: Add PLATFORM_VERSION to VERSION_STR_POSTFIX definition Signed-off-by: Dmitry Shmidt <dimitrysh@google.com>
2012-02-25 16:35:44 +01:00
L_CFLAGS += -DVERSION_STR_POSTFIX=\"-$(PLATFORM_VERSION)\"
Set ANDROID_LOG_NAME depending on application Signed-off-by: Dmitry Shmidt <dimitrysh@google.com>
2011-10-21 16:26:35 +02:00
# Set Android log name
L_CFLAGS += -DANDROID_LOG_NAME=\"wpa_supplicant\"
Android: Disable unused parameter warnings This avoids large number of undesired compiler warnings since Android build system is added -Wextra. Signed-off-by: Greg Hackmann <ghackmann@google.com>
2014-04-15 02:06:02 +02:00
# Disable unused parameter warnings
L_CFLAGS += -Wno-unused-parameter
Android: Use extended P2P functionality (ANDROID_P2P) for all vendors Signed-off-by: Dmitry Shmidt <dimitrysh@google.com>
2014-04-12 01:05:39 +02:00
# Set Android extended P2P functionality
L_CFLAGS += -DANDROID_P2P
Android: Rename ANDROID_P2P_STUB to ANDROID_LIB_STUB If BOARD_HOSTAPD_PRIVATE_LIB is not used on an Android build, we will need to replace both the p2p functions *and* wpa_driver_nl80211_driver_cmd in order to successfully link. Let's make the name more generic so it is more obvious what it is used for. Suggested-by: Dmitry Shmidt <dimitrysh@google.com> Signed-off-by: Kevin Cernekee <cernekee@google.com>
2015-06-20 02:22:29 +02:00
Android: Use extended P2P functionality (ANDROID_P2P) for all vendors Signed-off-by: Dmitry Shmidt <dimitrysh@google.com>
2014-04-12 01:05:39 +02:00
ifeq ($(BOARD_WPA_SUPPLICANT_PRIVATE_LIB),)
Android: Rename ANDROID_P2P_STUB to ANDROID_LIB_STUB If BOARD_HOSTAPD_PRIVATE_LIB is not used on an Android build, we will need to replace both the p2p functions *and* wpa_driver_nl80211_driver_cmd in order to successfully link. Let's make the name more generic so it is more obvious what it is used for. Suggested-by: Dmitry Shmidt <dimitrysh@google.com> Signed-off-by: Kevin Cernekee <cernekee@google.com>
2015-06-20 02:22:29 +02:00
L_CFLAGS += -DANDROID_LIB_STUB
Android: Use extended P2P functionality (ANDROID_P2P) for all vendors Signed-off-by: Dmitry Shmidt <dimitrysh@google.com>
2014-04-12 01:05:39 +02:00
endif
Android: Pass the vendor events to $(BOARD_WPA_SUPPLICANT_PRIVATE_LIB) Android has a mechanism to extend the driver interface in vendor specific ways. This implementation of the vendor interface is done in $(BOARD_WPA_SUPPLICANT_PRIVATE_LIB). Extend this to allow the vendor events to be provided to this library to facilitate the event processing. Introduce a new board configuration via $(BOARD_WPA_SUPPLICANT_PRIVATE_LIB_EVENT) rather than reusing $(BOARD_WPA_SUPPLICANT_PRIVATE_LIB) to enable this event handling in the private library. This is to avoid compilation issues for wpa_driver_nl80211_driver_event() with the already existing private library implementations defined with $(BOARD_WPA_SUPPLICANT_PRIVATE_LIB). Signed-off-by: Jouni Malinen <jouni@codeaurora.org>
2020-12-11 15:33:48 +01:00
ifneq ($(BOARD_WPA_SUPPLICANT_PRIVATE_LIB_EVENT),)
L_CFLAGS += -DANDROID_LIB_EVENT
endif
Add CONFIG_NO_ROAMING option This can be used to disable wpa_supplicant controlled roaming. It should be noted that the WPA_DRIVER_FLAGS_BSS_SELECTION capability is the preferred way for this and CONFIG_NO_ROAMING should be obsoleted once drivers support the new NL80211_ATTR_ROAM_SUPPORT capability advertisement. Signed-off-by: Dmitry Shmidt <dimitrysh@google.com>
2011-08-16 20:55:46 +02:00
# Disable roaming in wpa_supplicant
ifdef CONFIG_NO_ROAMING
L_CFLAGS += -DCONFIG_NO_ROAMING
endif
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
# Use Android specific directory for control interface sockets
L_CFLAGS += -DCONFIG_CTRL_IFACE_CLIENT_DIR=\"/data/misc/wifi/sockets\"
Android: Make wpa_cli work on wifi.interface without extra params Currently wpa_cli connects to global control interface if -i/-p parameters are not specified. wpa_cli on global control interface is not useful since the prefix like "IFNAME=wlan0 " needs to be added to some commands like "IFNAME=wlan0 scan". And, specifying -i/-p parameters every time is annoying. To improve efficiency of debugging, this patch enables to make wpa_cli work without extra parameters. If you still want to connect to global control interface, the following command can be used instead: $ wpa_cli -g@android:wpa_wlan0 (or -gwlan0) Signed-off-by: Daichi Ueura <daichi.ueura@sonymobile.com>
2015-07-13 17:31:21 +02:00
L_CFLAGS += -DCONFIG_CTRL_IFACE_DIR=\"/data/misc/wifi/sockets\"
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
wpa_cli: Use .wpa_cli_history under Android wpa_cli already implements a command history file for easy accessing commands previously used. Enable the functionality on Android, too. Signed-off-by: Mikael Kanstrup <mikael.kanstrup@sonymobile.com>
2015-03-18 12:51:18 +01:00
# Use Android specific directory for wpa_cli command completion history
L_CFLAGS += -DCONFIG_WPA_CLI_HISTORY_DIR=\"/data/misc/wifi\"
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
# To force sizeof(enum) = 4
ifeq ($(TARGET_ARCH),arm)
L_CFLAGS += -mabi=aapcs-linux
endif
binder: Expose an aidl interface module Restructure the binder related makefile sections to expose a separate |libwpa_binder_interface| which can be imported by clients/tests. While there, Change the name of the binder service to the name used in the selinux permissions. Signed-off-by: Roshan Pius <rpius@google.com>
2016-07-07 18:48:00 +02:00
# C++ flags for binder interface
L_CPPFLAGS := -std=c++11 -Wall -Werror
# TODO: Remove these allowed warnings later.
L_CPPFLAGS += -Wno-unused-variable -Wno-unused-parameter
L_CPPFLAGS += -Wno-unused-private-field
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
INCLUDES = $(LOCAL_PATH)
INCLUDES += $(LOCAL_PATH)/src
INCLUDES += $(LOCAL_PATH)/src/common
# INCLUDES += $(LOCAL_PATH)/src/crypto # To force proper includes
INCLUDES += $(LOCAL_PATH)/src/drivers
INCLUDES += $(LOCAL_PATH)/src/eap_common
INCLUDES += $(LOCAL_PATH)/src/eapol_supp
INCLUDES += $(LOCAL_PATH)/src/eap_peer
INCLUDES += $(LOCAL_PATH)/src/eap_server
INCLUDES += $(LOCAL_PATH)/src/hlr_auc_gw
INCLUDES += $(LOCAL_PATH)/src/l2_packet
INCLUDES += $(LOCAL_PATH)/src/radius
INCLUDES += $(LOCAL_PATH)/src/rsn_supp
INCLUDES += $(LOCAL_PATH)/src/tls
INCLUDES += $(LOCAL_PATH)/src/utils
INCLUDES += $(LOCAL_PATH)/src/wps
Android: Set proper path to keystore include dir Signed-off-by: Dmitry Shmidt <dimitrysh@google.com>
2013-11-08 03:17:26 +01:00
INCLUDES += system/security/keystore/include
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
ifdef CONFIG_DRIVER_NL80211
Android: Use external libnl 2.0 dynamic library Signed-off-by: Dmitry Shmidt <dimitrysh@google.com>
2014-02-19 01:26:10 +01:00
ifneq ($(wildcard external/libnl),)
INCLUDES += external/libnl/include
else
Android: Update libnl use to match with Android ICS The libnl_2 library uses static linking and different path for header files in the Android ICS release. Signed-hostap: Jouni Malinen <jouni@qca.qualcomm.com>
2011-11-15 17:37:10 +01:00
INCLUDES += external/libnl-headers
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
endif
Android: Use external libnl 2.0 dynamic library Signed-off-by: Dmitry Shmidt <dimitrysh@google.com>
2014-02-19 01:26:10 +01:00
endif
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
FIPS: Mix in OpenSSL RAND_bytes() into random_get_bytes() Make sure that the OpenSSL DRBG gets used when generating random numbers in FIPS mode. Signed-hostap: Jouni Malinen <j@w1.fi>
2012-08-16 20:49:41 +02:00
ifdef CONFIG_FIPS
CONFIG_NO_RANDOM_POOL=
FIPS: Use OpenSSL CMAC implementation instead of aes-omac1.c Signed-hostap: Jouni Malinen <j@w1.fi>
2012-08-16 21:19:53 +02:00
CONFIG_OPENSSL_CMAC=y
FIPS: Mix in OpenSSL RAND_bytes() into random_get_bytes() Make sure that the OpenSSL DRBG gets used when generating random numbers in FIPS mode. Signed-hostap: Jouni Malinen <j@w1.fi>
2012-08-16 20:49:41 +02:00
endif
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
OBJS = config.c
OBJS += notify.c
OBJS += bss.c
OBJS += eap_register.c
OBJS += src/utils/common.c
wpa_supplicant: Move wpa_config_get_line() into utils The function wpa_config_get_line() is used by the wpa_supplicant config file parser to retrieve the next non-comment non-blank line. We'll need the same kind of functionality to implement the file-based external password backend, so as a preparatory step this commit extracts the function into its own standalone file in the utils package. No functional changes are expected from this commit. Signed-off-by: Patrick Steinhardt <ps@pks.im>
2021-02-14 12:16:28 +01:00
OBJS += src/utils/config.c
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
OBJS += src/utils/wpa_debug.c
OBJS += src/utils/wpabuf.c
wpa_supplicant: Add support for Beacon Report Radio Measurement Beacon Report Radio Measurement is defined in IEEE Std 802.11-2016, 11.11.9.1. Beacon Report is implemented by triggering a scan on the requested channels with the requested parameters. Signed-off-by: Avraham Stern <avraham.stern@intel.com>
2016-12-28 14:06:47 +01:00
OBJS += src/utils/bitfield.c
DPP: Fix wpa_supplicant build dependencies for DPP-only build Fix CONFIG_DPP=y build for cases where the needed dependencies were not pulled in by other optional build parameters. Signed-off-by: Jouni Malinen <j@w1.fi>
2019-09-08 16:38:53 +02:00
OBJS += src/utils/ip_addr.c
AP: Determine Short SSID value for the BSS This can be used in the future to implement support for RNR and scanning extensions using a shorter field for the SSID. Signed-off-by: Andrei Otcheretianski <andrei.otcheretianski@intel.com>
2019-06-19 14:49:15 +02:00
OBJS += src/utils/crc32.c
WMM AC: Parse WMM IE on association Initialize WMM AC data structures upon successful association with an AP that publishes WMM support, and deinitialize the data structure when the association is no longer valid. Signed-off-by: Moshe Benji <moshe.benji@intel.com> Signed-off-by: Eliad Peller <eliadx.peller@intel.com>
2014-10-22 14:03:54 +02:00
OBJS += wmm_ac.c
Remove MBO dependency from Supported Operating Classes element Supported Operating Classes element and its use is define in the IEEE 802.11 standard and can be sent even when MBO is disabled in the build. As such, move this functionality out from the CONFIG_MBO=y only mbo.c. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2016-12-02 09:54:39 +01:00
OBJS += op_classes.c
wpa_supplicant: Move RRM implementation to a dedicated file As support for new RRM measurements will be added, the RRM implementation will become quite large, so move it to a dedicated file. Signed-off-by: Avraham Stern <avraham.stern@intel.com>
2016-12-28 14:06:34 +01:00
OBJS += rrm.c
MSCS: Add support to send MSCS Request frames Add support to send MSCS add/change/remove types of Action frames to the connected AP. Signed-off-by: Vinita S. Maloo <vmaloo@codeaurora.org>
2020-08-04 16:42:24 +02:00
OBJS += robust_av.c
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
OBJS_p = wpa_passphrase.c
OBJS_p += src/utils/common.c
OBJS_p += src/utils/wpa_debug.c
OBJS_p += src/utils/wpabuf.c
OBJS_c = wpa_cli.c src/common/wpa_ctrl.c
OBJS_c += src/utils/wpa_debug.c
wpa_cli: Add completion functions for P2P peers and BSSes Keep a local list of found P2P peers and BSS entries and use those to complete arguments for p2p_peer, p2p_connect, and bss commands.
2011-10-28 22:37:34 +02:00
OBJS_c += src/utils/common.c
Move parts of wpa_cli to a new common file In preparation for adding further command completion support to hostapd_cli move some cli related utility functions out of wpa_cli into a new common cli file. Signed-off-by: Mikael Kanstrup <mikael.kanstrup@sonymobile.com>
2016-07-07 14:04:34 +02:00
OBJS_c += src/common/cli.c
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
OBJS_d =
OBJS_priv =
ifndef CONFIG_OS
ifdef CONFIG_NATIVE_WINDOWS
CONFIG_OS=win32
else
CONFIG_OS=unix
endif
endif
ifeq ($(CONFIG_OS), internal)
L_CFLAGS += -DOS_NO_C_LIB_DEFINES
endif
OBJS += src/utils/os_$(CONFIG_OS).c
OBJS_p += src/utils/os_$(CONFIG_OS).c
OBJS_c += src/utils/os_$(CONFIG_OS).c
ifdef CONFIG_WPA_TRACE
L_CFLAGS += -DWPA_TRACE
OBJS += src/utils/trace.c
OBJS_p += src/utils/trace.c
OBJS_c += src/utils/trace.c
LDFLAGS += -rdynamic
L_CFLAGS += -funwind-tables
ifdef CONFIG_WPA_TRACE_BFD
L_CFLAGS += -DWPA_TRACE_BFD
LIBS += -lbfd
LIBS_p += -lbfd
LIBS_c += -lbfd
endif
endif
ifndef CONFIG_ELOOP
CONFIG_ELOOP=eloop
endif
OBJS += src/utils/$(CONFIG_ELOOP).c
OBJS_c += src/utils/$(CONFIG_ELOOP).c
Android: Update Android.mk based on Makefile changes This brings the Android makefiles a bit closer to the Makefile changes that had been missed in the past. Signed-hostap: Jouni Malinen <j@w1.fi>
2013-03-17 19:08:23 +01:00
ifdef CONFIG_ELOOP_POLL
L_CFLAGS += -DCONFIG_ELOOP_POLL
endif
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
eloop: Add epoll option for better performance This patch adds epoll option for the eloop implementation. This can be selected with the CONFIG_ELOOP_EPOLL=y build option. [merit] See Table1. Table1. comparison table +--------+--------+-----------+------------+-------------+ | | add fd | remove fd | prepare fd | dispatch fd | +--------+--------+-----------+------------+-------------+ | select | O(1) | O(1) | O(N) | O(N) | +--------+--------+-----------+------------+-------------+ | poll | O(1) | O(1) | O(N) | O(N) | +--------+--------+-----------+------------+-------------+ | epoll | O(1) | O(1) | 0 | O(M) | +--------+--------+-----------+------------+-------------+ "add fd" is addition of fd by eloop_sock_table_add_sock(). "remove fd" is removal of fd by eloop_sock_table_remove_sock(). "prepare fd" is preparation of fds before wait in eloop_run(). "dispatch fd" is dispatchment of fds by eloop_sock_table_dispatch(). "N" is all watching fds. "M" is fds which could be dispatched after waiting. As shown in Table1, epoll option has better performance on "prepare fd" column. Because select/poll option requires setting fds before every select()/poll(). But epoll_wait() doesn't need it. And epoll option has also better performance on "dispatch fd" column. Because select/poll option needs to check all registered fds to find out dispatchable fds. But epoll option doesn't require checking all registered fds. Because epoll_wait() returns dispatchable fd set. So epoll option is effective for GO/AP functionality. [demerit] The epoll option requires additional heap memory. In case of P2P GO, it is about 8K bytes. Signed-off-by: Masashi Honma <masashi.honma@gmail.com>
2014-05-13 02:35:48 +02:00
ifdef CONFIG_ELOOP_EPOLL
L_CFLAGS += -DCONFIG_ELOOP_EPOLL
endif
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
ifdef CONFIG_EAPOL_TEST
L_CFLAGS += -Werror -DEAPOL_TEST
endif
Android: Sync makefile changes for HT/VHT overrides CONFIG_HT_OVERRIDES and CONFIG_VHT_OVERRIDES were already mentioned in android.config, but Android.mk did not yet know about them. Signed-hostap: Jouni Malinen <j@w1.fi>
2013-03-10 17:05:40 +01:00
ifdef CONFIG_HT_OVERRIDES
L_CFLAGS += -DCONFIG_HT_OVERRIDES
endif
ifdef CONFIG_VHT_OVERRIDES
L_CFLAGS += -DCONFIG_VHT_OVERRIDES
endif
wpa_supplicant: Add HE override support Add HE override support under the build parameter CONFIG_HE_OVERRIDES=y. The disable_he=1 network profile parameter can be used to disable HE. This requires a fallback to VHT on the 5 GHz band and to HT on the 2.4 GHz band. There is no nl80211 support for configuring the driver to disable HE, so for now, this applies only to IBSS and mesh cases. Signed-off-by: P Praneesh <ppranees@codeaurora.org>
2020-03-09 11:53:50 +01:00
ifdef CONFIG_HE_OVERRIDES
L_CFLAGS += -DCONFIG_HE_OVERRIDES
endif
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
ifndef CONFIG_BACKEND
CONFIG_BACKEND=file
endif
ifeq ($(CONFIG_BACKEND), file)
OBJS += config_file.c
ifndef CONFIG_NO_CONFIG_BLOBS
NEED_BASE64=y
endif
L_CFLAGS += -DCONFIG_BACKEND_FILE
endif
ifeq ($(CONFIG_BACKEND), winreg)
OBJS += config_winreg.c
endif
ifeq ($(CONFIG_BACKEND), none)
OBJS += config_none.c
endif
ifdef CONFIG_NO_CONFIG_WRITE
L_CFLAGS += -DCONFIG_NO_CONFIG_WRITE
endif
ifdef CONFIG_NO_CONFIG_BLOBS
L_CFLAGS += -DCONFIG_NO_CONFIG_BLOBS
endif
ifdef CONFIG_NO_SCAN_PROCESSING
L_CFLAGS += -DCONFIG_NO_SCAN_PROCESSING
endif
Suite B: PMKID derivation for AKM 00-0F-AC:11 The new AKM uses a different mechanism of deriving the PMKID based on KCK instead of PMK. hostapd was already doing this after the KCK had been derived, but wpa_supplicant functionality needs to be moved from processing of EAPOL-Key frame 1/4 to 3/4 to have the KCK available. Signed-off-by: Jouni Malinen <j@w1.fi>
2014-11-16 12:22:46 +01:00
ifdef CONFIG_SUITEB
L_CFLAGS += -DCONFIG_SUITEB
endif
Add Suite B 192-bit AKM WPA-EAP-SUITE-B-192 can now be used to select 192-bit level Suite B into use as the key management method. Signed-off-by: Jouni Malinen <j@w1.fi>
2015-01-25 22:32:01 +01:00
ifdef CONFIG_SUITEB192
L_CFLAGS += -DCONFIG_SUITEB192
NEED_SHA384=y
endif
OCV: Add build configuration for channel validation support Add compilation flags for Operating Channel Verification (OCV) support. Signed-off-by: Mathy Vanhoef <Mathy.Vanhoef@cs.kuleuven.be>
2018-08-06 21:46:25 +02:00
ifdef CONFIG_OCV
L_CFLAGS += -DCONFIG_OCV
OCV: Add utility functions to insert OCI elements This commit adds utility functions to insert various encoding of the OCI element. Signed-off-by: Mathy Vanhoef <Mathy.Vanhoef@cs.kuleuven.be>
2018-08-06 21:46:26 +02:00
OBJS += src/common/ocv.c
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
endif
ifdef CONFIG_IEEE80211R
L_CFLAGS += -DCONFIG_IEEE80211R
OBJS += src/rsn_supp/wpa_ft.c
endif
nl80211: Add new commands to support mesh interfaces Create init_mesh, mesh_join, and mesh_leave actions to kernel. Signed-off-by: Javier Lopez <jlopex@gmail.com> Signed-off-by: Javier Cardona <javier@cozybit.com> Signed-off-by: Jason Mobarak <x@jason.mobarak.name> Signed-off-by: Bob Copeland <me@bobcopeland.com>
2014-09-01 06:23:23 +02:00
ifdef CONFIG_MESH
NEED_80211_COMMON=y
mesh: Add mesh robust security network This implementation provides: - Mesh SAE authentication mechanism - Key management (set/get PSK) - Cryptographic key establishment - Enhanced protection mechanisms for robust management frames Signed-off-by: Javier Lopez <jlopex@gmail.com> Signed-off-by: Javier Cardona <javier@cozybit.com> Signed-off-by: Jason Mobarak <x@jason.mobarak.name> Signed-off-by: Thomas Pedersen <thomas@noack.us>
2014-09-01 06:23:29 +02:00
NEED_AES_SIV=y
CONFIG_SAE=y
CONFIG_AP=y
nl80211: Add new commands to support mesh interfaces Create init_mesh, mesh_join, and mesh_leave actions to kernel. Signed-off-by: Javier Lopez <jlopex@gmail.com> Signed-off-by: Javier Cardona <javier@cozybit.com> Signed-off-by: Jason Mobarak <x@jason.mobarak.name> Signed-off-by: Bob Copeland <me@bobcopeland.com>
2014-09-01 06:23:23 +02:00
L_CFLAGS += -DCONFIG_MESH
mesh: Add mesh mode routines Add routines to (de)initialize mesh interface data structures and join and leave mesh networks. Signed-off-by: Javier Lopez <jlopex@gmail.com> Signed-off-by: Javier Cardona <javier@cozybit.com> Signed-off-by: Jason Mobarak <x@jason.mobarak.name> Signed-off-by: Thomas Pedersen <thomas@noack.us>
2014-09-01 06:23:21 +02:00
OBJS += mesh.c
mesh: Add mesh peering manager The mesh peering manager establishes and maintains links among mesh peers, tracking each peer link via a finite state machine. This implementation supports open mesh peerings. [assorted fixes from Yu Niiro <yu.niiro@gmail.com>] [more fixes from Masashi Honma <masashi.honma@gmail.com>] Signed-off-by: Javier Lopez <jlopex@gmail.com> Signed-off-by: Javier Cardona <javier@cozybit.com> Signed-off-by: Ashok Nagarajan <ashok.dragon@gmail.com> Signed-off-by: Jason Mobarak <x@jason.mobarak.name> Signed-hostap: Bob Copeland <me@bobcopeland.com>
2014-03-11 05:07:01 +01:00
OBJS += mesh_mpm.c
mesh: Add mesh robust security network This implementation provides: - Mesh SAE authentication mechanism - Key management (set/get PSK) - Cryptographic key establishment - Enhanced protection mechanisms for robust management frames Signed-off-by: Javier Lopez <jlopex@gmail.com> Signed-off-by: Javier Cardona <javier@cozybit.com> Signed-off-by: Jason Mobarak <x@jason.mobarak.name> Signed-off-by: Thomas Pedersen <thomas@noack.us>
2014-09-01 06:23:29 +02:00
OBJS += mesh_rsn.c
nl80211: Add new commands to support mesh interfaces Create init_mesh, mesh_join, and mesh_leave actions to kernel. Signed-off-by: Javier Lopez <jlopex@gmail.com> Signed-off-by: Javier Cardona <javier@cozybit.com> Signed-off-by: Jason Mobarak <x@jason.mobarak.name> Signed-off-by: Bob Copeland <me@bobcopeland.com>
2014-09-01 06:23:23 +02:00
endif
Add initial parts for SAE This introduces new AKM for SAE and FT-SAE and adds the initial parts for going through the SAE Authentication frame exchange. The actual SAE algorithm and new fields in Authentication frames are not yet included in this commit and will be added separately. This version is able to complete a dummy authentication with the correct authentication algorithm and transaction values to allow cfg80211/mac80211 drivers to be tested (all the missing parts can be handled with hostapd/wpa_supplicant changes). Signed-hostap: Jouni Malinen <j@w1.fi>
2012-09-30 18:51:07 +02:00
ifdef CONFIG_SAE
L_CFLAGS += -DCONFIG_SAE
SAE: Add generation of the commit message fields This adds derivation of PWE and the needed commit values so that the full SAE commit message can be built. Signed-hostap: Jouni Malinen <j@w1.fi>
2012-12-30 21:06:11 +01:00
OBJS += src/common/sae.c
SAE-PK: Extend SAE functionality for AP validation This adds core SAE functionality for a new mode of using SAE with a specially constructed password that contains a fingerprint for an AP public key and that public key being used to validate an additional signature in SAE confirm from the AP. Signed-off-by: Jouni Malinen <jouni@codeaurora.org>
2020-05-30 22:30:42 +02:00
ifdef CONFIG_SAE_PK
L_CFLAGS += -DCONFIG_SAE_PK
OBJS += src/common/sae_pk.c
endif
SAE: Use crypto wrappers instead of direct OpenSSL calls This makes the SAE implementation independent of the crypto/bignum library. Signed-hostap: Jouni Malinen <j@w1.fi>
2012-12-31 18:41:21 +01:00
NEED_ECC=y
SAE: Add support for FFC groups This allows FFC groups to be used with SAE. Though, these groups are not included in the default sae_groups value based on what is available since the FFC groups have the additional requirement of using a safe prime with the current implementation (or specification of the group order). Signed-hostap: Jouni Malinen <j@w1.fi>
2013-01-05 20:22:00 +01:00
NEED_DH_GROUPS=y
SAE: Fix build without DPP/OWE/ERP SAE needs sha256-kdf.c to be included in the build. Signed-off-by: Jouni Malinen <j@w1.fi>
2020-04-04 17:08:14 +02:00
NEED_HMAC_SHA256_KDF=y
Share common SAE and EAP-pwd functionality: suitable groups Start sharing common SAE and EAP-pwd functionality by adding a new source code file that can be included into both. This first step is bringing in a shared function to check whether a group is suitable. Signed-off-by: Jouni Malinen <jouni@codeaurora.org>
2019-04-25 18:45:27 +02:00
NEED_DRAGONFLY=y
SAE: Enable NEED_DH_GROUPS_ALL for CONFIG_TESTING_OPTIONS=y builds Enable all DH FFC groups for SAE in wpa_supplicant testing builds. These are needed to allow more testing coverage for AP functionality. Signed-off-by: Jouni Malinen <jouni@codeaurora.org>
2019-12-20 11:36:46 +01:00
ifdef CONFIG_TESTING_OPTIONS
NEED_DH_GROUPS_ALL=y
endif
Add initial parts for SAE This introduces new AKM for SAE and FT-SAE and adds the initial parts for going through the SAE Authentication frame exchange. The actual SAE algorithm and new fields in Authentication frames are not yet included in this commit and will be added separately. This version is able to complete a dummy authentication with the correct authentication algorithm and transaction values to allow cfg80211/mac80211 drivers to be tested (all the missing parts can be handled with hostapd/wpa_supplicant changes). Signed-hostap: Jouni Malinen <j@w1.fi>
2012-09-30 18:51:07 +02:00
endif
DPP: Bootstrap information management Add wpa_supplicant control interface commands for parsing the bootstrap info URI from a QR Code (get peer public key) and to generate a new bootstrap info with private key for local use. The optional key=<hexdump> argument to the DPP_BOOTSTRAP_GEN command can be used to specify the bootstrapping private key in OpenSSL ECPrivateKey DER encoding format. This results in the local bootstrapping information entry being created with the specified key instead of generating a new random one. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2017-06-15 20:18:10 +02:00
ifdef CONFIG_DPP
L_CFLAGS += -DCONFIG_DPP
OBJS += src/common/dpp.c
DPP: Move authentication functionality into a separate source code file This continues splitting dpp.c into smaller pieces. Signed-off-by: Jouni Malinen <jouni@codeaurora.org>
2020-05-11 00:16:12 +02:00
OBJS += src/common/dpp_auth.c
DPP: Move configurator backup into a separate source code file This continues splitting dpp.c into smaller pieces. Signed-off-by: Jouni Malinen <jouni@codeaurora.org>
2020-05-11 00:30:13 +02:00
OBJS += src/common/dpp_backup.c
DPP: Move crypto routines into a separate source code file This is an initial step in splitting the overly long dpp.c into smaller pieces. Signed-off-by: Jouni Malinen <jouni@codeaurora.org>
2020-05-10 15:25:42 +02:00
OBJS += src/common/dpp_crypto.c
DPP: Move PKEX functionality into a separate source code file This continues splitting dpp.c into smaller pieces. Signed-off-by: Jouni Malinen <jouni@codeaurora.org>
2020-05-10 15:51:46 +02:00
OBJS += src/common/dpp_pkex.c
DPP2: Reconfig Announcement transmission Extend DPP chirping mechanism to allow Reconfig Announcement frames to be transmitted instead of the Presence Announcement frames. Add a new wpa_supplicant control interface command "DPP_RECONFIG <network id>" to initiate reconfiguration for a specific network profile. Signed-off-by: Jouni Malinen <jouni@codeaurora.org>
2020-05-01 23:02:15 +02:00
OBJS += src/common/dpp_reconfig.c
DPP: Move TCP encapsulation into a separate source code file This continues splitting dpp.c into smaller pieces. Signed-off-by: Jouni Malinen <jouni@codeaurora.org>
2020-05-11 10:59:46 +02:00
OBJS += src/common/dpp_tcp.c
DPP: Bootstrap information management Add wpa_supplicant control interface commands for parsing the bootstrap info URI from a QR Code (get peer public key) and to generate a new bootstrap info with private key for local use. The optional key=<hexdump> argument to the DPP_BOOTSTRAP_GEN command can be used to specify the bootstrapping private key in OpenSSL ECPrivateKey DER encoding format. This results in the local bootstrapping information entry being created with the specified key instead of generating a new random one. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2017-06-15 20:18:10 +02:00
OBJS += dpp_supplicant.c
DPP: Authentication exchange Add wpa_supplicant control interface commands for managing DPP Authentication exchange. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2017-06-15 20:18:12 +02:00
NEED_AES_SIV=y
NEED_HMAC_SHA256_KDF=y
NEED_HMAC_SHA384_KDF=y
NEED_HMAC_SHA512_KDF=y
NEED_SHA384=y
NEED_SHA512=y
DPP: Fix wpa_supplicant build dependencies for DPP-only build Fix CONFIG_DPP=y build for cases where the needed dependencies were not pulled in by other optional build parameters. Signed-off-by: Jouni Malinen <j@w1.fi>
2019-09-08 16:38:53 +02:00
NEED_ECC=y
DPP: Configuration exchange This adds support for DPP Configuration Protocol using GAS. Full generation and processing of the configuration object is not included in this commit. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2017-06-15 20:18:15 +02:00
NEED_JSON=y
NEED_GAS_SERVER=y
DPP: Add base64 dependency in makefiles Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2017-09-01 20:15:34 +02:00
NEED_BASE64=y
DPP: Add ASN.1 support into build This will be needed in following patches to process DPPEnvelopedData. Signed-off-by: Jouni Malinen <jouni@codeaurora.org>
2019-12-12 01:28:39 +01:00
NEED_ASN1=y
DPP2: Build configuration flags for DPP version 2 support The new CONFIG_DPP2=y build option for hostapd and wpa_supplicant is used to control whether new functionality defined after the DPP specification v1.0 is included. All such functionality are considered experimental and subject to change without notice and as such, not suitable for production use. Signed-off-by: Jouni Malinen <jouni@codeaurora.org>
2019-03-13 11:00:09 +01:00
ifdef CONFIG_DPP2
L_CFLAGS += -DCONFIG_DPP2
endif
DPP: Bootstrap information management Add wpa_supplicant control interface commands for parsing the bootstrap info URI from a QR Code (get peer public key) and to generate a new bootstrap info with private key for local use. The optional key=<hexdump> argument to the DPP_BOOTSTRAP_GEN command can be used to specify the bootstrapping private key in OpenSSL ECPrivateKey DER encoding format. This results in the local bootstrapping information entry being created with the specified key instead of generating a new random one. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2017-06-15 20:18:10 +02:00
endif
OWE: Add CONFIG_OWE=y build option This can be used to enable OWE support in hostapd and wpa_supplicant builds. Signed-off-by: Jouni Malinen <j@w1.fi>
2017-03-11 23:38:24 +01:00
ifdef CONFIG_OWE
L_CFLAGS += -DCONFIG_OWE
NEED_ECC=y
NEED_HMAC_SHA256_KDF=y
OWE: Support DH groups 20 (NIST P-384) and 21 (NIST P-521) in station This extends OWE support in wpa_supplicant to allow DH groups 20 and 21 to be used in addition to the mandatory group 19 (NIST P-256). The group is configured using the new network profile parameter owe_group. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2017-10-08 15:39:08 +02:00
NEED_HMAC_SHA384_KDF=y
NEED_HMAC_SHA512_KDF=y
NEED_SHA384=y
NEED_SHA512=y
OWE: Add CONFIG_OWE=y build option This can be used to enable OWE support in hostapd and wpa_supplicant builds. Signed-off-by: Jouni Malinen <j@w1.fi>
2017-03-11 23:38:24 +01:00
endif
FILS: Add wpa_supplicant configuration options This adds CONFIG_FILS=y build configuration option and new key management options for FILS authentication. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2015-09-01 16:58:53 +02:00
ifdef CONFIG_FILS
L_CFLAGS += -DCONFIG_FILS
NEED_SHA384=y
FILS: Use AEAD cipher to protect EAPOL-Key frames (STA) This modifies wpa_eapol_key_send() to use AEAD cipher (AES-SIV for FILS AKMs) to provide both integrity protection for the EAPOL-Key frame and encryption for the Key Data field. It should be noted that this starts encrypting the Key Data field in EAPOL-Key message 2/4 while it remains unencrypted (but integrity protected) in non-FILS cases. Similarly, the empty Key Data field in EAPOL-Key message 4/4 gets encrypted for AEAD cases. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2015-09-03 11:34:23 +02:00
NEED_AES_SIV=y
FILS: Add FILS SK auth PFS support in STA mode This adds an option to configure wpa_supplicant to use the perfect forward secrecy option in FILS shared key authentication. A new build option CONFIG_FILS_SK_PFS=y can be used to include this functionality. A new runtime network profile parameter fils_dh_group is used to enable this by specifying which DH group to use. For example, fils_dh_group=19 would use FILS SK PFS with a 256-bit random ECP group. Signed-off-by: Jouni Malinen <j@w1.fi>
2017-03-12 21:45:35 +01:00
ifdef CONFIG_FILS_SK_PFS
L_CFLAGS += -DCONFIG_FILS_SK_PFS
NEED_ECC=y
endif
Enable CONFIG_WNM=y automatically for CONFIG_MBO=y builds wpa_supplicant build with MBO enabled failed in CONFIG_WNM=y was not specified explicitly. Add the WNM dependency automatically to avoid needing explicit addition in build configuration. Signed-off-by: Jouni Malinen <j@w1.fi>
2017-05-01 16:33:10 +02:00
endif
ifdef CONFIG_MBO
CONFIG_WNM=y
FILS: Add wpa_supplicant configuration options This adds CONFIG_FILS=y build configuration option and new key management options for FILS authentication. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2015-09-01 16:58:53 +02:00
endif
Android: Use CONFIG_WNM mode consistently Replace CONFIG_IEEE80211V with CONFIG_WNM to get more consistent build options for WNM-Sleep Mode operations. This is similar to the Makefile change in commit ad3872a3720df13d8fc1a4345a5f0a8c3a204b4e. Signed-hostap: Jouni Malinen <j@w1.fi>
2013-03-17 19:13:46 +01:00
ifdef CONFIG_WNM
WNM: Enable CONFIG_WNM in Android.mk Signed-hostap: Vinayak Kamath <vkamat@codeaurora.org>
2013-05-16 16:51:18 +02:00
L_CFLAGS += -DCONFIG_WNM
Android: Update Android.mk based on Makefile changes This brings the Android makefiles a bit closer to the Makefile changes that had been missed in the past. Signed-hostap: Jouni Malinen <j@w1.fi>
2013-03-17 19:08:23 +01:00
OBJS += wnm_sta.c
endif
Add TDLS support to Android.mk
2011-05-16 21:29:43 +02:00
ifdef CONFIG_TDLS
L_CFLAGS += -DCONFIG_TDLS
Android: Sync Android.mk with recent Makefile changes
2011-10-18 16:15:36 +02:00
OBJS += src/rsn_supp/tdls.c
Add TDLS support to Android.mk
2011-05-16 21:29:43 +02:00
endif
TDLS: Support setting CONFIG_TDLS_TESTING in .config Signed-off-by: Arik Nemtsov <arik@wizery.com> Cc: Kalyan C Gaddam <chakkal@iit.edu>
2011-09-26 12:55:22 +02:00
ifdef CONFIG_TDLS_TESTING
L_CFLAGS += -DCONFIG_TDLS_TESTING
endif
External persistent storage for PMKSA cache entries This adds new wpa_supplicant control interface commands PMKSA_GET and PMKSA_ADD that can be used to store PMKSA cache entries in an external persistent storage when terminating a wpa_supplicant process and then restore those entries when starting a new process. The previously added PMKSA-CACHE-ADDED/REMOVED events can be used to help in synchronizing the external storage with the memory-only volatile storage within wpa_supplicant. "PMKSA_GET <network_id>" fetches all stored PMKSA cache entries bound to a specific network profile. The network_id of the current profile is available with the STATUS command (id=<network_id). In addition, the network_id is included in the PMKSA-CACHE-ADDED/REMOVED events. The output of the PMKSA_GET command uses the following format: <BSSID> <PMKID> <PMK> <reauth_time in seconds> <expiration in seconds> <akmp> <opportunistic> For example: 02:00:00:00:03:00 113b8b5dc8eda16594e8274df4caa3d4 355e98681d09e0b69d3a342f96998aa765d10c4459ac592459b5efc6b563eff6 30240 43200 1 0 02:00:00:00:04:00 bbdac8607aaaac28e16aacc9152ffe23 e3dd6adc390e685985e5f40e6fe72df846a0acadc59ba15c208d9cb41732a663 30240 43200 1 0 The PMKSA_GET command uses the following format: <network_id> <BSSID> <PMKID> <PMK> <reauth_time in seconds> <expiration in seconds> <akmp> <opportunistic> (i.e., "PMKSA_ADD <network_id> " prefix followed by a line of PMKSA_GET output data; however, the reauth_time and expiration values need to be updated by decrementing them by number of seconds between the PMKSA_GET and PMKSA_ADD commands) For example: PMKSA_ADD 0 02:00:00:00:03:00 113b8b5dc8eda16594e8274df4caa3d4 355e98681d09e0b69d3a342f96998aa765d10c4459ac592459b5efc6b563eff6 30140 43100 1 0 PMKSA_ADD 0 02:00:00:00:04:00 bbdac8607aaaac28e16aacc9152ffe23 e3dd6adc390e685985e5f40e6fe72df846a0acadc59ba15c208d9cb41732a663 30140 43100 1 0 This functionality is disabled be default and can be enabled with CONFIG_PMKSA_CACHE_EXTERNAL=y build configuration option. It should be noted that this allows any process that has access to the wpa_supplicant control interface to use PMKSA_ADD command to fetch keying material (PMK), so this is for environments in which the control interface access is restricted. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2016-12-12 22:47:04 +01:00
ifdef CONFIG_PMKSA_CACHE_EXTERNAL
L_CFLAGS += -DCONFIG_PMKSA_CACHE_EXTERNAL
endif
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
ifndef CONFIG_NO_WPA
OBJS += src/rsn_supp/wpa.c
OBJS += src/rsn_supp/preauth.c
OBJS += src/rsn_supp/pmksa_cache.c
OBJS += src/rsn_supp/wpa_ie.c
OBJS += src/common/wpa_common.c
NEED_AES=y
NEED_SHA1=y
NEED_MD5=y
NEED_RC4=y
else
Remove CONFIG_NO_WPA2 build parameter There is not much use for enabling WPA without WPA2 nowadays since most networks have been upgraded to WPA2. Furthermore, the code size savings from disabling just WPA2 are pretty small, so there is not much justification for maintaining this build option. Remove it to get rid of undesired complexity. Signed-hostap: Jouni Malinen <jouni@qca.qualcomm.com>
2013-06-07 19:13:25 +02:00
L_CFLAGS += -DCONFIG_NO_WPA
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
endif
ifdef CONFIG_IBSS_RSN
NEED_RSN_AUTHENTICATOR=y
L_CFLAGS += -DCONFIG_IBSS_RSN
wpa_supplicant: Fix CONFIG_IBSS_RSN=y build without CONFIG_AP=y Commit 1889af2e0f89f9a98171761683eb1c244584daf8 ('VLAN: Separate station grouping and uplink configuration') added an ap_sta_set_vlan() function that gets called from pmksa_cache_auth.c. This broke CONFIG_IBSS_RSN=y build if src/ap/sta_info.c did not get included in the build, i.e., if CONFIG_AP=y was not set. Fix this by making the ap_sta_set_vlan() call conditional on CONFIG_NO_VLAN being undefined and define this for CONFIG_IBSS_RSN=y builds. This is fine for wpa_supplicant since CONFIG_AP=y case was already defining this. For hostapd, this function call is not needed for CONFIG_NO_VLAN case either. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2016-03-21 20:09:03 +01:00
L_CFLAGS += -DCONFIG_NO_VLAN
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
OBJS += ibss_rsn.c
endif
ifdef CONFIG_P2P
OBJS += p2p_supplicant.c
P2P: Move upper layer SD interaction into a separate file wpa_supplicant/p2p_supplicant.c has reached almost 10000 lines in length and was getting a bit inconvenient to edit, so start splitting it into separate files. Signed-off-by: Jouni Malinen <j@w1.fi>
2015-03-15 19:25:48 +01:00
OBJS += p2p_supplicant_sd.c
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
OBJS += src/p2p/p2p.c
OBJS += src/p2p/p2p_utils.c
OBJS += src/p2p/p2p_parse.c
OBJS += src/p2p/p2p_build.c
OBJS += src/p2p/p2p_go_neg.c
OBJS += src/p2p/p2p_sd.c
OBJS += src/p2p/p2p_pd.c
OBJS += src/p2p/p2p_invitation.c
OBJS += src/p2p/p2p_dev_disc.c
OBJS += src/p2p/p2p_group.c
OBJS += src/ap/p2p_hostapd.c
L_CFLAGS += -DCONFIG_P2P
Android: Sync Android.mk with recent Makefile changes
2011-10-18 16:15:36 +02:00
NEED_GAS=y
NEED_OFFCHANNEL=y
Automatically include WPS and AP support if P2P is enabled CONFIG_WPS=y and CONFIG_AP=y are required if CONFIG_P2P=y so we may as well enable them automatically in that case.
2011-10-28 20:17:08 +02:00
CONFIG_WPS=y
CONFIG_AP=y
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
ifdef CONFIG_P2P_STRICT
L_CFLAGS += -DCONFIG_P2P_STRICT
endif
endif
Android: Add Wi-Fi Display into the makefile Signed-hostap: Jouni Malinen <jouni@qca.qualcomm.com>
2012-08-31 17:33:42 +02:00
ifdef CONFIG_WIFI_DISPLAY
L_CFLAGS += -DCONFIG_WIFI_DISPLAY
OBJS += wifi_display.c
endif
PASN: Add functions to compute PTK, MIC and hash 1. Add a function to derive the PTK from a PMK and additional data. 2. Add a function to calculate the MIC for a PASN frames. 3. Add a function to compute the hash of an authentication frame body. The above are built only in case that CONFIG_PASN is enabled at build time. Signed-off-by: Ilan Peer <ilan.peer@intel.com>
2020-12-16 12:00:21 +01:00
ifdef CONFIG_PASN
L_CFLAGS += -DCONFIG_PASN
WPA: Add PTKSA cache to wpa_supplicant for PASN PASN requires to store the PTK derived during PASN authentication so it can later be used for secure LTF etc. This is also true for a PTK derived during regular connection. Add an instance of a PTKSA cache for each wpa_supplicant interface when PASN is enabled in build configuration. Signed-off-by: Ilan Peer <ilan.peer@intel.com>
2020-12-16 12:00:27 +01:00
L_CFLAGS += -DCONFIG_PTKSA_CACHE
PASN: Add functions to compute PTK, MIC and hash 1. Add a function to derive the PTK from a PMK and additional data. 2. Add a function to calculate the MIC for a PASN frames. 3. Add a function to compute the hash of an authentication frame body. The above are built only in case that CONFIG_PASN is enabled at build time. Signed-off-by: Ilan Peer <ilan.peer@intel.com>
2020-12-16 12:00:21 +01:00
NEED_HMAC_SHA256_KDF=y
NEED_HMAC_SHA384_KDF=y
NEED_SHA256=y
NEED_SHA384=y
WPA: Add PTKSA cache to wpa_supplicant for PASN PASN requires to store the PTK derived during PASN authentication so it can later be used for secure LTF etc. This is also true for a PTK derived during regular connection. Add an instance of a PTKSA cache for each wpa_supplicant interface when PASN is enabled in build configuration. Signed-off-by: Ilan Peer <ilan.peer@intel.com>
2020-12-16 12:00:27 +01:00
OBJS += src/common/ptksa_cache.c
PASN: Add support for PASN processing to wpa_supplicant Add PASN implementation to wpa_supplicant 1. Add functions to initialize and clear PASN data. 2. Add functions to construct PASN Authentication frames. 3. Add function to process PASN Authentication frame. 4. Add function to handle PASN frame TX status. 5. Implement the station side flow processing for PASN. The implementation is missing support for wrapped data and PMKSA establishment for base AKMs, and only supports PASN authentication or base AKM with PMKSA caching. The missing parts will be added in later patches. Signed-off-by: Ilan Peer <ilan.peer@intel.com>
2020-12-16 12:00:28 +01:00
OBJS += pasn_supplicant.c
PASN: Add functions to compute PTK, MIC and hash 1. Add a function to derive the PTK from a PMK and additional data. 2. Add a function to calculate the MIC for a PASN frames. 3. Add a function to compute the hash of an authentication frame body. The above are built only in case that CONFIG_PASN is enabled at build time. Signed-off-by: Ilan Peer <ilan.peer@intel.com>
2020-12-16 12:00:21 +01:00
endif
Android: Include Hotspot 2.0 support in the default build Signed-hostap: Jouni Malinen <jouni@qca.qualcomm.com>
2012-08-31 17:28:54 +02:00
ifdef CONFIG_HS20
OBJS += hs20_supplicant.c
L_CFLAGS += -DCONFIG_HS20
CONFIG_INTERWORKING=y
endif
Android: Sync Android.mk with recent Makefile changes
2011-10-18 16:15:36 +02:00
ifdef CONFIG_INTERWORKING
OBJS += interworking.c
L_CFLAGS += -DCONFIG_INTERWORKING
NEED_GAS=y
endif
FST: wpa_supplicant build rules Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2014-11-16 16:28:53 +01:00
ifdef CONFIG_FST
L_CFLAGS += -DCONFIG_FST
OBJS += src/fst/fst.c
OBJS += src/fst/fst_session.c
OBJS += src/fst/fst_iface.c
OBJS += src/fst/fst_group.c
OBJS += src/fst/fst_ctrl_aux.c
FST: Testing support This patch introduces infrastructure needed for FST module tests. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2014-12-04 18:20:56 +01:00
ifdef CONFIG_FST_TEST
L_CFLAGS += -DCONFIG_FST_TEST
endif
FST: wpa_supplicant build rules Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2014-11-16 16:28:53 +01:00
ifdef CONFIG_CTRL_IFACE
OBJS += src/fst/fst_ctrl_iface.c
endif
endif
Make WEP functionality an optional build parameter WEP should not be used for anything anymore. As a step towards removing it completely, move all WEP related functionality to be within CONFIG_WEP blocks. This will be included in builds only if CONFIG_WEP=y is explicitly set in build configuration. Signed-off-by: Jouni Malinen <j@w1.fi>
2020-02-29 15:52:39 +01:00
ifdef CONFIG_WEP
L_CFLAGS += -DCONFIG_WEP
endif
Allow TKIP support to be removed from build Add a build flag CONFIG_NO_TKIP=y to remove all TKIP functionality from hostapd and wpa_supplicant builds. This disables use of TKIP as both the pairwise and group cipher. The end result does not interoperate with a WPA(v1)-only device or WPA+WPA2 mixed modes. Signed-off-by: Disha Das <dishad@codeaurora.org>
2020-04-09 06:12:21 +02:00
ifdef CONFIG_NO_TKIP
L_CFLAGS += -DCONFIG_NO_TKIP
endif
FST: wpa_supplicant build rules Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2014-11-16 16:28:53 +01:00
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
include $(LOCAL_PATH)/src/drivers/drivers.mk
ifdef CONFIG_AP
OBJS_d += $(DRV_BOTH_OBJS)
L_CFLAGS += $(DRV_BOTH_CFLAGS)
LDFLAGS += $(DRV_BOTH_LDFLAGS)
LIBS += $(DRV_BOTH_LIBS)
else
NEED_AP_MLME=
OBJS_d += $(DRV_WPA_OBJS)
L_CFLAGS += $(DRV_WPA_CFLAGS)
LDFLAGS += $(DRV_WPA_LDFLAGS)
LIBS += $(DRV_WPA_LIBS)
endif
ifndef CONFIG_L2_PACKET
CONFIG_L2_PACKET=linux
endif
OBJS_l2 += src/l2_packet/l2_packet_$(CONFIG_L2_PACKET).c
ifeq ($(CONFIG_L2_PACKET), pcap)
ifdef CONFIG_WINPCAP
L_CFLAGS += -DCONFIG_WINPCAP
LIBS += -lwpcap -lpacket
LIBS_w += -lwpcap
else
LIBS += -ldnet -lpcap
endif
endif
ifeq ($(CONFIG_L2_PACKET), winpcap)
LIBS += -lwpcap -lpacket
LIBS_w += -lwpcap
endif
ifeq ($(CONFIG_L2_PACKET), freebsd)
LIBS += -lpcap
endif
ERP: Add support for ERP on EAP peer Derive rRK and rIK on EAP peer if ERP is enabled. The new wpa_supplicant network configuration parameter erp=1 can now be used to configure the EAP peer to derive EMSK, rRK, and rIK at the successful completion of an EAP authentication method. This functionality is not included in the default build and can be enabled with CONFIG_ERP=y. If EAP authenticator indicates support for re-authentication protocol, initiate this with EAP-Initiate/Re-auth and complete protocol when receiving EAP-Finish/Re-auth. Signed-off-by: Jouni Malinen <j@w1.fi>
2014-11-29 22:14:40 +01:00
ifdef CONFIG_ERP
L_CFLAGS += -DCONFIG_ERP
NEED_HMAC_SHA256_KDF=y
endif
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
ifdef CONFIG_EAP_TLS
# EAP-TLS
ifeq ($(CONFIG_EAP_TLS), dyn)
L_CFLAGS += -DEAP_TLS_DYNAMIC
EAPDYN += src/eap_peer/eap_tls.so
else
L_CFLAGS += -DEAP_TLS
OBJS += src/eap_peer/eap_tls.c
endif
TLS_FUNCS=y
CONFIG_IEEE8021X_EAPOL=y
endif
Android: Add CONFIG_EAP_UNAUTH_TLS option to makefile Signed-off-by: Dmitry Shmidt <dimitrysh@google.com>
2013-11-08 02:54:48 +01:00
ifdef CONFIG_EAP_UNAUTH_TLS
# EAP-UNAUTH-TLS
L_CFLAGS += -DEAP_UNAUTH_TLS
Fix CONFIG_EAP_UNAUTH_TLS without CONFIG_EAP_TLS build Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2015-03-20 13:42:13 +01:00
ifndef CONFIG_EAP_TLS
Android: Add CONFIG_EAP_UNAUTH_TLS option to makefile Signed-off-by: Dmitry Shmidt <dimitrysh@google.com>
2013-11-08 02:54:48 +01:00
OBJS += src/eap_peer/eap_tls.c
TLS_FUNCS=y
endif
CONFIG_IEEE8021X_EAPOL=y
endif
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
ifdef CONFIG_EAP_PEAP
# EAP-PEAP
ifeq ($(CONFIG_EAP_PEAP), dyn)
L_CFLAGS += -DEAP_PEAP_DYNAMIC
EAPDYN += src/eap_peer/eap_peap.so
else
L_CFLAGS += -DEAP_PEAP
OBJS += src/eap_peer/eap_peap.c
OBJS += src/eap_common/eap_peap_common.c
endif
TLS_FUNCS=y
CONFIG_IEEE8021X_EAPOL=y
endif
ifdef CONFIG_EAP_TTLS
# EAP-TTLS
ifeq ($(CONFIG_EAP_TTLS), dyn)
L_CFLAGS += -DEAP_TTLS_DYNAMIC
EAPDYN += src/eap_peer/eap_ttls.so
else
L_CFLAGS += -DEAP_TTLS
OBJS += src/eap_peer/eap_ttls.c
endif
TLS_FUNCS=y
EAP-TTLS: Disable CHAP, MSCHAP, and MSCHAPV2 in CONFIG_FIPS=y builds FIPS builds do not include support for MD4/MD5, so disable EAP-TTLS/CHAP, MSCHAP, and MSCHAPV2 when CONFIG_FIPS=y is used. Signed-off-by: Jouni Malinen <j@w1.fi>
2015-08-01 15:53:16 +02:00
ifndef CONFIG_FIPS
MS_FUNCS=y
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
CHAP=y
EAP-TTLS: Disable CHAP, MSCHAP, and MSCHAPV2 in CONFIG_FIPS=y builds FIPS builds do not include support for MD4/MD5, so disable EAP-TTLS/CHAP, MSCHAP, and MSCHAPV2 when CONFIG_FIPS=y is used. Signed-off-by: Jouni Malinen <j@w1.fi>
2015-08-01 15:53:16 +02:00
endif
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
CONFIG_IEEE8021X_EAPOL=y
endif
ifdef CONFIG_EAP_MD5
# EAP-MD5
ifeq ($(CONFIG_EAP_MD5), dyn)
L_CFLAGS += -DEAP_MD5_DYNAMIC
EAPDYN += src/eap_peer/eap_md5.so
else
L_CFLAGS += -DEAP_MD5
OBJS += src/eap_peer/eap_md5.c
endif
CHAP=y
CONFIG_IEEE8021X_EAPOL=y
endif
# backwards compatibility for old spelling
ifdef CONFIG_MSCHAPV2
ifndef CONFIG_EAP_MSCHAPV2
CONFIG_EAP_MSCHAPV2=y
endif
endif
ifdef CONFIG_EAP_MSCHAPV2
# EAP-MSCHAPv2
ifeq ($(CONFIG_EAP_MSCHAPV2), dyn)
L_CFLAGS += -DEAP_MSCHAPv2_DYNAMIC
EAPDYN += src/eap_peer/eap_mschapv2.so
EAPDYN += src/eap_peer/mschapv2.so
else
L_CFLAGS += -DEAP_MSCHAPv2
OBJS += src/eap_peer/eap_mschapv2.c
OBJS += src/eap_peer/mschapv2.c
endif
MS_FUNCS=y
CONFIG_IEEE8021X_EAPOL=y
endif
ifdef CONFIG_EAP_GTC
# EAP-GTC
ifeq ($(CONFIG_EAP_GTC), dyn)
L_CFLAGS += -DEAP_GTC_DYNAMIC
EAPDYN += src/eap_peer/eap_gtc.so
else
L_CFLAGS += -DEAP_GTC
OBJS += src/eap_peer/eap_gtc.c
endif
CONFIG_IEEE8021X_EAPOL=y
endif
ifdef CONFIG_EAP_OTP
# EAP-OTP
ifeq ($(CONFIG_EAP_OTP), dyn)
L_CFLAGS += -DEAP_OTP_DYNAMIC
EAPDYN += src/eap_peer/eap_otp.so
else
L_CFLAGS += -DEAP_OTP
OBJS += src/eap_peer/eap_otp.c
endif
CONFIG_IEEE8021X_EAPOL=y
endif
ifdef CONFIG_EAP_SIM
# EAP-SIM
ifeq ($(CONFIG_EAP_SIM), dyn)
L_CFLAGS += -DEAP_SIM_DYNAMIC
EAPDYN += src/eap_peer/eap_sim.so
else
L_CFLAGS += -DEAP_SIM
OBJS += src/eap_peer/eap_sim.c
endif
CONFIG_IEEE8021X_EAPOL=y
CONFIG_EAP_SIM_COMMON=y
NEED_AES_CBC=y
endif
ifdef CONFIG_EAP_LEAP
# EAP-LEAP
ifeq ($(CONFIG_EAP_LEAP), dyn)
L_CFLAGS += -DEAP_LEAP_DYNAMIC
EAPDYN += src/eap_peer/eap_leap.so
else
L_CFLAGS += -DEAP_LEAP
OBJS += src/eap_peer/eap_leap.c
endif
MS_FUNCS=y
CONFIG_IEEE8021X_EAPOL=y
endif
ifdef CONFIG_EAP_PSK
# EAP-PSK
ifeq ($(CONFIG_EAP_PSK), dyn)
L_CFLAGS += -DEAP_PSK_DYNAMIC
EAPDYN += src/eap_peer/eap_psk.so
else
L_CFLAGS += -DEAP_PSK
OBJS += src/eap_peer/eap_psk.c src/eap_common/eap_psk_common.c
endif
CONFIG_IEEE8021X_EAPOL=y
NEED_AES=y
NEED_AES_ENCBLOCK=y
NEED_AES_EAX=y
endif
ifdef CONFIG_EAP_AKA
# EAP-AKA
ifeq ($(CONFIG_EAP_AKA), dyn)
L_CFLAGS += -DEAP_AKA_DYNAMIC
EAPDYN += src/eap_peer/eap_aka.so
else
L_CFLAGS += -DEAP_AKA
OBJS += src/eap_peer/eap_aka.c
endif
CONFIG_IEEE8021X_EAPOL=y
CONFIG_EAP_SIM_COMMON=y
NEED_AES_CBC=y
endif
Android: Fix CONFIG_EAP_PROXY option and move it to right place Signed-off-by: Dmitry Shmidt <dimitrysh@google.com>
2013-11-08 03:01:25 +01:00
ifdef CONFIG_EAP_PROXY
L_CFLAGS += -DCONFIG_EAP_PROXY
OBJS += src/eap_peer/eap_proxy_$(CONFIG_EAP_PROXY).c
eap_proxy: Extend Android.mk to support additional libraries Allow addition static and shared libraries to be specified from the eap_proxy_*.mk file for Android build. In addition use $(LOCAL_PATH) as a prefix for that Android makefile part. Signed-hostap: Jouni Malinen <jouni@qca.qualcomm.com>
2013-12-03 07:37:24 +01:00
include $(LOCAL_PATH)/eap_proxy_$(CONFIG_EAP_PROXY).mk
Android: Fix CONFIG_EAP_PROXY option and move it to right place Signed-off-by: Dmitry Shmidt <dimitrysh@google.com>
2013-11-08 03:01:25 +01:00
CONFIG_IEEE8021X_EAPOL=y
endif
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
ifdef CONFIG_EAP_AKA_PRIME
# EAP-AKA'
ifeq ($(CONFIG_EAP_AKA_PRIME), dyn)
L_CFLAGS += -DEAP_AKA_PRIME_DYNAMIC
else
L_CFLAGS += -DEAP_AKA_PRIME
endif
endif
ifdef CONFIG_EAP_SIM_COMMON
OBJS += src/eap_common/eap_sim_common.c
NEED_AES=y
NEED_FIPS186_2_PRF=y
endif
ifdef CONFIG_EAP_FAST
# EAP-FAST
ifeq ($(CONFIG_EAP_FAST), dyn)
L_CFLAGS += -DEAP_FAST_DYNAMIC
EAPDYN += src/eap_peer/eap_fast.so
EAPDYN += src/eap_common/eap_fast_common.c
else
L_CFLAGS += -DEAP_FAST
OBJS += src/eap_peer/eap_fast.c src/eap_peer/eap_fast_pac.c
OBJS += src/eap_common/eap_fast_common.c
endif
TLS_FUNCS=y
CONFIG_IEEE8021X_EAPOL=y
NEED_T_PRF=y
endif
EAP-TEAP server and peer implementation (RFC 7170) This adds support for a new EAP method: EAP-TEAP (Tunnel Extensible Authentication Protocol). This should be considered experimental since RFC 7170 has number of conflicting statements and missing details to allow unambiguous interpretation. As such, there may be interoperability issues with other implementations and this version should not be deployed for production purposes until those unclear areas are resolved. This does not yet support use of NewSessionTicket message to deliver a new PAC (either in the server or peer implementation). In other words, only the in-tunnel distribution of PAC-Opaque is supported for now. Use of the NewSessionTicket mechanism would require TLS library support to allow arbitrary data to be specified as the contents of the message. Signed-off-by: Jouni Malinen <j@w1.fi>
2019-07-09 15:56:02 +02:00
ifdef CONFIG_EAP_TEAP
# EAP-TEAP
ifeq ($(CONFIG_EAP_TEAP), dyn)
L_CFLAGS += -DEAP_YEAP_DYNAMIC
EAPDYN += src/eap_peer/eap_teap.so
EAPDYN += src/eap_common/eap_teap_common.c
else
L_CFLAGS += -DEAP_TEAP
OBJS += src/eap_peer/eap_teap.c src/eap_peer/eap_teap_pac.c
OBJS += src/eap_common/eap_teap_common.c
endif
TLS_FUNCS=y
CONFIG_IEEE8021X_EAPOL=y
NEED_T_PRF=y
NEED_SHA384=y
Add TLS-PRF using HMAC with P_SHA384 for TEAP This version of TLS PRF is needed when using TEAP with TLS ciphersuites that are defined to use SHA384 instead of SHA256. Signed-off-by: Jouni Malinen <j@w1.fi>
2019-08-16 20:15:32 +02:00
NEED_TLS_PRF_SHA256=y
NEED_TLS_PRF_SHA384=y
EAP-TEAP server and peer implementation (RFC 7170) This adds support for a new EAP method: EAP-TEAP (Tunnel Extensible Authentication Protocol). This should be considered experimental since RFC 7170 has number of conflicting statements and missing details to allow unambiguous interpretation. As such, there may be interoperability issues with other implementations and this version should not be deployed for production purposes until those unclear areas are resolved. This does not yet support use of NewSessionTicket message to deliver a new PAC (either in the server or peer implementation). In other words, only the in-tunnel distribution of PAC-Opaque is supported for now. Use of the NewSessionTicket mechanism would require TLS library support to allow arbitrary data to be specified as the contents of the message. Signed-off-by: Jouni Malinen <j@w1.fi>
2019-07-09 15:56:02 +02:00
endif
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
ifdef CONFIG_EAP_PAX
# EAP-PAX
ifeq ($(CONFIG_EAP_PAX), dyn)
L_CFLAGS += -DEAP_PAX_DYNAMIC
EAPDYN += src/eap_peer/eap_pax.so
else
L_CFLAGS += -DEAP_PAX
OBJS += src/eap_peer/eap_pax.c src/eap_common/eap_pax_common.c
endif
CONFIG_IEEE8021X_EAPOL=y
endif
ifdef CONFIG_EAP_SAKE
# EAP-SAKE
ifeq ($(CONFIG_EAP_SAKE), dyn)
L_CFLAGS += -DEAP_SAKE_DYNAMIC
EAPDYN += src/eap_peer/eap_sake.so
else
L_CFLAGS += -DEAP_SAKE
OBJS += src/eap_peer/eap_sake.c src/eap_common/eap_sake_common.c
endif
CONFIG_IEEE8021X_EAPOL=y
endif
ifdef CONFIG_EAP_GPSK
# EAP-GPSK
ifeq ($(CONFIG_EAP_GPSK), dyn)
L_CFLAGS += -DEAP_GPSK_DYNAMIC
EAPDYN += src/eap_peer/eap_gpsk.so
else
L_CFLAGS += -DEAP_GPSK
OBJS += src/eap_peer/eap_gpsk.c src/eap_common/eap_gpsk_common.c
endif
CONFIG_IEEE8021X_EAPOL=y
ifdef CONFIG_EAP_GPSK_SHA256
L_CFLAGS += -DEAP_GPSK_SHA256
endif
endif
ifdef CONFIG_EAP_PWD
L_CFLAGS += -DEAP_PWD
OBJS += src/eap_peer/eap_pwd.c src/eap_common/eap_pwd_common.c
CONFIG_IEEE8021X_EAPOL=y
EAP-pwd: Use abstract crypto API This makes it easier to use EAP-pwd with other crypto libraries than OpenSSL. Signed-off-by: Sean Parkinson <sean@wolfssl.com>
2017-10-16 07:45:09 +02:00
NEED_ECC=y
Share common SAE and EAP-pwd functionality: suitable groups Start sharing common SAE and EAP-pwd functionality by adding a new source code file that can be included into both. This first step is bringing in a shared function to check whether a group is suitable. Signed-off-by: Jouni Malinen <jouni@codeaurora.org>
2019-04-25 18:45:27 +02:00
NEED_DRAGONFLY=y
EAP-EKE: Add peer implementation This adds a new password-based EAP method defined in RFC 6124. Signed-hostap: Jouni Malinen <j@w1.fi>
2013-07-06 17:45:38 +02:00
endif
ifdef CONFIG_EAP_EKE
# EAP-EKE
ifeq ($(CONFIG_EAP_EKE), dyn)
L_CFLAGS += -DEAP_EKE_DYNAMIC
EAPDYN += src/eap_peer/eap_eke.so
else
L_CFLAGS += -DEAP_EKE
OBJS += src/eap_peer/eap_eke.c src/eap_common/eap_eke_common.c
endif
CONFIG_IEEE8021X_EAPOL=y
NEED_DH_GROUPS=y
NEED_DH_GROUPS_ALL=y
Fix EAP-EKE peer build rules NEED_AES_CBC is needed for EAP-EKE builds. Signed-off-by: Jouni Malinen <j@w1.fi>
2015-09-25 18:43:44 +02:00
NEED_AES_CBC=y
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
endif
ifdef CONFIG_WPS
# EAP-WSC
L_CFLAGS += -DCONFIG_WPS -DEAP_WSC
OBJS += wps_supplicant.c
OBJS += src/utils/uuid.c
OBJS += src/eap_peer/eap_wsc.c src/eap_common/eap_wsc_common.c
OBJS += src/wps/wps.c
OBJS += src/wps/wps_common.c
OBJS += src/wps/wps_attr_parse.c
OBJS += src/wps/wps_attr_build.c
OBJS += src/wps/wps_attr_process.c
OBJS += src/wps/wps_dev_attr.c
OBJS += src/wps/wps_enrollee.c
OBJS += src/wps/wps_registrar.c
CONFIG_IEEE8021X_EAPOL=y
NEED_DH_GROUPS=y
NEED_BASE64=y
NEED_AES_CBC=y
NEED_MODEXP=y
ifdef CONFIG_WPS_NFC
L_CFLAGS += -DCONFIG_WPS_NFC
OBJS += src/wps/ndef.c
NEED_WPS_OOB=y
endif
ifdef NEED_WPS_OOB
L_CFLAGS += -DCONFIG_WPS_OOB
endif
ifdef CONFIG_WPS_ER
CONFIG_WPS_UPNP=y
L_CFLAGS += -DCONFIG_WPS_ER
OBJS += src/wps/wps_er.c
OBJS += src/wps/wps_er_ssdp.c
endif
ifdef CONFIG_WPS_UPNP
L_CFLAGS += -DCONFIG_WPS_UPNP
OBJS += src/wps/wps_upnp.c
OBJS += src/wps/wps_upnp_ssdp.c
OBJS += src/wps/wps_upnp_web.c
OBJS += src/wps/wps_upnp_event.c
OBJS += src/wps/wps_upnp_ap.c
OBJS += src/wps/upnp_xml.c
OBJS += src/wps/httpread.c
OBJS += src/wps/http_client.c
OBJS += src/wps/http_server.c
endif
ifdef CONFIG_WPS_STRICT
L_CFLAGS += -DCONFIG_WPS_STRICT
OBJS += src/wps/wps_validate.c
endif
ifdef CONFIG_WPS_TESTING
L_CFLAGS += -DCONFIG_WPS_TESTING
endif
ifdef CONFIG_WPS_REG_DISABLE_OPEN
L_CFLAGS += -DCONFIG_WPS_REG_DISABLE_OPEN
endif
endif
ifdef CONFIG_EAP_IKEV2
# EAP-IKEv2
ifeq ($(CONFIG_EAP_IKEV2), dyn)
L_CFLAGS += -DEAP_IKEV2_DYNAMIC
EAPDYN += src/eap_peer/eap_ikev2.so src/eap_peer/ikev2.c
EAPDYN += src/eap_common/eap_ikev2_common.c src/eap_common/ikev2_common.c
else
L_CFLAGS += -DEAP_IKEV2
OBJS += src/eap_peer/eap_ikev2.c src/eap_peer/ikev2.c
OBJS += src/eap_common/eap_ikev2_common.c src/eap_common/ikev2_common.c
endif
CONFIG_IEEE8021X_EAPOL=y
NEED_DH_GROUPS=y
NEED_DH_GROUPS_ALL=y
NEED_MODEXP=y
NEED_CIPHER=y
endif
ifdef CONFIG_EAP_VENDOR_TEST
ifeq ($(CONFIG_EAP_VENDOR_TEST), dyn)
L_CFLAGS += -DEAP_VENDOR_TEST_DYNAMIC
EAPDYN += src/eap_peer/eap_vendor_test.so
else
L_CFLAGS += -DEAP_VENDOR_TEST
OBJS += src/eap_peer/eap_vendor_test.c
endif
CONFIG_IEEE8021X_EAPOL=y
endif
ifdef CONFIG_EAP_TNC
# EAP-TNC
L_CFLAGS += -DEAP_TNC
OBJS += src/eap_peer/eap_tnc.c
OBJS += src/eap_peer/tncc.c
NEED_BASE64=y
ifndef CONFIG_NATIVE_WINDOWS
ifndef CONFIG_DRIVER_BSD
LIBS += -ldl
endif
endif
endif
ifdef CONFIG_IEEE8021X_EAPOL
# IEEE 802.1X/EAPOL state machines (e.g., for RADIUS authentication)
L_CFLAGS += -DIEEE8021X_EAPOL
OBJS += src/eapol_supp/eapol_supp_sm.c
OBJS += src/eap_peer/eap.c src/eap_peer/eap_methods.c
NEED_EAP_COMMON=y
ifdef CONFIG_DYNAMIC_EAP_METHODS
L_CFLAGS += -DCONFIG_DYNAMIC_EAP_METHODS
LIBS += -ldl -rdynamic
endif
endif
ifdef CONFIG_AP
NEED_EAP_COMMON=y
NEED_RSN_AUTHENTICATOR=y
L_CFLAGS += -DCONFIG_AP
OBJS += ap.c
L_CFLAGS += -DCONFIG_NO_RADIUS
L_CFLAGS += -DCONFIG_NO_ACCOUNTING
L_CFLAGS += -DCONFIG_NO_VLAN
OBJS += src/ap/hostapd.c
OBJS += src/ap/wpa_auth_glue.c
OBJS += src/ap/utils.c
OBJS += src/ap/authsrv.c
OBJS += src/ap/ap_config.c
OBJS += src/ap/sta_info.c
OBJS += src/ap/tkip_countermeasures.c
OBJS += src/ap/ap_mlme.c
OBJS += src/ap/ieee802_1x.c
OBJS += src/eapol_auth/eapol_auth_sm.c
OBJS += src/ap/ieee802_11_auth.c
Android: Sync Android.mk with recent Makefile changes
2011-10-18 16:15:36 +02:00
OBJS += src/ap/ieee802_11_shared.c
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
OBJS += src/ap/drv_callbacks.c
OBJS += src/ap/ap_drv_ops.c
Android: Sync Android.mk with recent Makefile changes
2011-10-18 16:15:36 +02:00
OBJS += src/ap/beacon.c
AP: Add support for BSS load element (STA Count, Channel Utilization) The new "bss_load_update_period" parameter can be used to configure hostapd to advertise its BSS Load element in Beacon and Probe Response frames. This parameter is in the units of BUs (Beacon Units). When enabled, the STA Count and the Channel Utilization value will be updated periodically in the BSS Load element. The AAC is set to 0 sinze explicit admission control is not supported. Channel Utilization is calculated based on the channel survey information from the driver and as such, requires a driver that supports providing that information for the current operating channel. Signed-off-by: Kyeyoon Park <kyeyoonp@qca.qualcomm.com>
2014-10-16 01:36:04 +02:00
OBJS += src/ap/bss_load.c
Android: Fix AP builds to include the new eap_user_db.c This is needed to fix the builds after commit ee431d77a51b361b4697f2b737bcf46a1860a6fe. Signed-hostap: Jouni Malinen <jouni@qca.qualcomm.com>
2012-11-21 16:55:36 +01:00
OBJS += src/ap/eap_user_db.c
hostapd: Add a database of neighboring APs Add a configurable neighbor database that includes the content of Nighbor Report element, LCI and Location Civic subelements and SSID. All parameters for a neighbor must be updated at once; Neighbor Report element and SSID are mandatory, LCI and civic are optional. The age of LCI is set to the time of neighbor update. The control interface API is: SET_NEIGHBOR <BSSID> <ssid=SSID> <nr=data> [lci=<data>] [civic=<data>] To delete a neighbor use: REMOVE_NEIGHBOR <BSSID> <SSID> Signed-off-by: David Spinadel <david.spinadel@intel.com>
2016-04-06 18:42:07 +02:00
OBJS += src/ap/neighbor_db.c
hostapd: Handle Neighbor Report Request frame Process Neighbor Report Request frame and send Neighbor Report Response frame based on the configured neighbor report data. Signed-off-by: David Spinadel <david.spinadel@intel.com>
2016-04-06 18:42:09 +02:00
OBJS += src/ap/rrm.c
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
OBJS += src/ap/ieee802_11_ht.c
Android: Add CONFIG_IEEE80211AC option to makefile Signed-off-by: Dmitry Shmidt <dimitrysh@google.com>
2013-11-08 02:57:52 +01:00
ifdef CONFIG_IEEE80211AC
OBJS += src/ap/ieee802_11_vht.c
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
endif
hostapd: Add IEEE 802.11ax HE IEs into Beacon/Probe Response frames IEEE 802.11ax HE changes to include HE IEs in Beacon and Probe Response frames. These elements are using vendor specific forms for now since the IEEE 802.11ax draft is not yet finalized and the element contents is subject to change. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2016-10-25 19:23:24 +02:00
ifdef CONFIG_IEEE80211AX
OBJS += src/ap/ieee802_11_he.c
endif
WNM: Differentiate between WNM for station and for AP in build Previously, CONFIG_WNM enabled build that supports WNM for both station mode and AP mode. However, in most wpa_supplicant cases only station mode WNM is required and there is no need for AP mode WNM. Add support to differentiate between station mode WNM and AP mode WNM in wpa_supplicant builds by adding CONFIG_WNM_AP that should be used when AP mode WNM support is required in addition to station mode WNM. This allows binary size to be reduced for builds that require only the station side WNM functionality. Signed-off-by: Avraham Stern <avraham.stern@intel.com>
2017-06-12 08:29:27 +02:00
ifdef CONFIG_WNM_AP
L_CFLAGS += -DCONFIG_WNM_AP
WNM: Enable CONFIG_WNM in Android.mk Signed-hostap: Vinayak Kamath <vkamat@codeaurora.org>
2013-05-16 16:51:18 +02:00
OBJS += src/ap/wnm_ap.c
endif
MBO: Track STA cellular data capability from association request This makes hostapd parse the MBO attribute in (Re)Association Request frame and track the cellular data capability (mbo_cell_capa=<val> in STA control interface command). Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2016-02-22 12:03:28 +01:00
ifdef CONFIG_MBO
OBJS += src/ap/mbo_ap.c
endif
FILS: Move HLP request handling into a separate file This is independent functionality from the core IEEE 802.11 management handling and will increase significantly in size, so it is cleaner to maintain this in a separate source code file. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2017-01-31 13:00:12 +01:00
ifdef CONFIG_FILS
OBJS += src/ap/fils_hlp.c
endif
Android: Add CONFIG_IEEE80211AC option to makefile Signed-off-by: Dmitry Shmidt <dimitrysh@google.com>
2013-11-08 02:57:52 +01:00
ifdef CONFIG_CTRL_IFACE
OBJS += src/ap/ctrl_iface_ap.c
endif
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
L_CFLAGS += -DEAP_SERVER -DEAP_SERVER_IDENTITY
OBJS += src/eap_server/eap_server.c
OBJS += src/eap_server/eap_server_identity.c
OBJS += src/eap_server/eap_server_methods.c
Android: Add CONFIG_IEEE80211AC option to makefile Signed-off-by: Dmitry Shmidt <dimitrysh@google.com>
2013-11-08 02:57:52 +01:00
ifdef CONFIG_IEEE80211AC
L_CFLAGS += -DCONFIG_IEEE80211AC
endif
hostapd: Initial IEEE 802.11ax (HE) definitions Add IEEE 802.11ax definitions for config, IEEE structures, and constants. These are still subject to change in the IEEE process. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2017-02-08 00:16:52 +01:00
ifdef CONFIG_IEEE80211AX
L_CFLAGS += -DCONFIG_IEEE80211AX
endif
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
ifdef NEED_AP_MLME
OBJS += src/ap/wmm.c
OBJS += src/ap/ap_list.c
OBJS += src/ap/ieee802_11.c
OBJS += src/ap/hw_features.c
Android: Add dfs.c into build This fixes Android build after commit e76da5052980f301fe61f2fc0e1e7a5789716061 that added the new dfs.c file. Signed-hostap: Jouni Malinen <jouni@qca.qualcomm.com>
2013-10-18 14:18:40 +02:00
OBJS += src/ap/dfs.c
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
L_CFLAGS += -DNEED_AP_MLME
endif
ifdef CONFIG_WPS
L_CFLAGS += -DEAP_SERVER_WSC
OBJS += src/ap/wps_hostapd.c
OBJS += src/eap_server/eap_server_wsc.c
endif
DPP: Integration for hostapd This adds DPP bootstrapping, authentication, and configuration into hostapd similarly to how the design was integrated in wpa_supplicant. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2017-06-15 21:16:45 +02:00
ifdef CONFIG_DPP
OBJS += src/ap/dpp_hostapd.c
OBJS += src/ap/gas_query_ap.c
DPP2: Fix wpa_supplicant build dependencies for CONFIG_AP=y build Fix CONFIG_DPP2=y with CONFIG_AP=y build for cases where the needed dependencies were not pulled in by other optional build parameters. Signed-off-by: Jouni Malinen <j@w1.fi>
2019-09-08 16:44:07 +02:00
NEED_AP_GAS_SERV=y
DPP: Integration for hostapd This adds DPP bootstrapping, authentication, and configuration into hostapd similarly to how the design was integrated in wpa_supplicant. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2017-06-15 21:16:45 +02:00
endif
Android: Include Hotspot 2.0 support in the default build Signed-hostap: Jouni Malinen <jouni@qca.qualcomm.com>
2012-08-31 17:28:54 +02:00
ifdef CONFIG_INTERWORKING
DPP2: Fix wpa_supplicant build dependencies for CONFIG_AP=y build Fix CONFIG_DPP2=y with CONFIG_AP=y build for cases where the needed dependencies were not pulled in by other optional build parameters. Signed-off-by: Jouni Malinen <j@w1.fi>
2019-09-08 16:44:07 +02:00
NEED_AP_GAS_SERV=y
endif
ifdef NEED_AP_GAS_SERV
Android: Include Hotspot 2.0 support in the default build Signed-hostap: Jouni Malinen <jouni@qca.qualcomm.com>
2012-08-31 17:28:54 +02:00
OBJS += src/ap/gas_serv.c
endif
ifdef CONFIG_HS20
OBJS += src/ap/hs20.c
endif
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
endif
wpa_supplicant: Make CONFIG_MBO independent of CONFIG_AP CONFIG_MBO was defined inside ifdef CONFIG_AP, so when AP support was not compiled, MBO was not compiled either. However, CONFIG_MBO is not related AP support, so it should not depend on CONFIG_AP. Fix this by moving CONFIG_MBO outside of ifdef CONFIG_AP. Signed-off-by: Avrahams Stern <avraham.stern@intel.com>
2016-10-27 14:18:27 +02:00
ifdef CONFIG_MBO
OBJS += mbo.c
L_CFLAGS += -DCONFIG_MBO
endif
Android: Define CONFIG_TESTING_OPTIONS if enabled in config Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2017-05-04 14:33:44 +02:00
ifdef CONFIG_TESTING_OPTIONS
L_CFLAGS += -DCONFIG_TESTING_OPTIONS
endif
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
ifdef NEED_RSN_AUTHENTICATOR
L_CFLAGS += -DCONFIG_NO_RADIUS
NEED_AES_WRAP=y
OBJS += src/ap/wpa_auth.c
OBJS += src/ap/wpa_auth_ie.c
OBJS += src/ap/pmksa_cache_auth.c
endif
wpa_supplicant: Enable Automatic Channel Selection support for AP mode Since hostapd supports ACS now, let's enable its support in wpa_supplicant as well when starting AP mode. Signed-off-by: Tomasz Bursztyka <tomasz.bursztyka@linux.intel.com> [u.oelmann@pengutronix.de: rebased series from hostap_2_1~944 to master] [u.oelmann@pengutronix.de: adjusted added text in defconfig] Signed-off-by: Ulrich Ölmann <u.oelmann@pengutronix.de>
2015-11-27 12:40:37 +01:00
ifdef CONFIG_ACS
L_CFLAGS += -DCONFIG_ACS
OBJS += src/ap/acs.c
LIBS += -lm
endif
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
ifdef CONFIG_PCSC
# PC/SC interface for smartcards (USIM, GSM SIM)
L_CFLAGS += -DPCSC_FUNCS -I/usr/include/PCSC
OBJS += src/utils/pcsc_funcs.c
# -lpthread may not be needed depending on how pcsc-lite was configured
ifdef CONFIG_NATIVE_WINDOWS
#Once MinGW gets support for WinScard, -lwinscard could be used instead of the
#dynamic symbol loading that is now used in pcsc_funcs.c
#LIBS += -lwinscard
else
LIBS += -lpcsclite -lpthread
endif
endif
ifdef CONFIG_SIM_SIMULATOR
L_CFLAGS += -DCONFIG_SIM_SIMULATOR
NEED_MILENAGE=y
endif
ifdef CONFIG_USIM_SIMULATOR
L_CFLAGS += -DCONFIG_USIM_SIMULATOR
NEED_MILENAGE=y
endif
ifdef NEED_MILENAGE
OBJS += src/crypto/milenage.c
Android: Sync Android.mk with recent Makefile changes
2011-10-18 16:15:36 +02:00
NEED_AES_ENCBLOCK=y
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
endif
ifdef CONFIG_PKCS12
L_CFLAGS += -DPKCS12_FUNCS
endif
ifdef CONFIG_SMARTCARD
L_CFLAGS += -DCONFIG_SMARTCARD
endif
Share common SAE and EAP-pwd functionality: suitable groups Start sharing common SAE and EAP-pwd functionality by adding a new source code file that can be included into both. This first step is bringing in a shared function to check whether a group is suitable. Signed-off-by: Jouni Malinen <jouni@codeaurora.org>
2019-04-25 18:45:27 +02:00
ifdef NEED_DRAGONFLY
OBJS += src/common/dragonfly.c
endif
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
ifdef MS_FUNCS
OBJS += src/crypto/ms_funcs.c
NEED_DES=y
NEED_MD4=y
endif
ifdef CHAP
OBJS += src/eap_common/chap.c
endif
ifdef TLS_FUNCS
NEED_DES=y
# Shared TLS functions (needed for EAP_TLS, EAP_PEAP, EAP_TTLS, and EAP_FAST)
OBJS += src/eap_peer/eap_tls_common.c
Fix CONFIG_NO_WPA build with TLS The SHA1 and MD5 functions need to be included in builds that use TLS even if WPA support is removed. Signed-hostap: Jouni Malinen <j@w1.fi>
2012-12-18 14:16:00 +01:00
ifndef CONFIG_FIPS
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
NEED_TLS_PRF=y
Fix CONFIG_NO_WPA build with TLS The SHA1 and MD5 functions need to be included in builds that use TLS even if WPA support is removed. Signed-hostap: Jouni Malinen <j@w1.fi>
2012-12-18 14:16:00 +01:00
NEED_SHA1=y
NEED_MD5=y
endif
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
endif
ifndef CONFIG_TLS
CONFIG_TLS=openssl
endif
Android: Sync Android.mk with recent Makefile changes
2011-10-18 16:15:36 +02:00
ifdef CONFIG_TLSV11
L_CFLAGS += -DCONFIG_TLSV11
endif
Android: Update Android.mk based on Makefile changes This brings the Android makefiles a bit closer to the Makefile changes that had been missed in the past. Signed-hostap: Jouni Malinen <j@w1.fi>
2013-03-17 19:08:23 +01:00
ifdef CONFIG_TLSV12
L_CFLAGS += -DCONFIG_TLSV12
endif
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
ifeq ($(CONFIG_TLS), openssl)
ifdef TLS_FUNCS
L_CFLAGS += -DEAP_TLS_OPENSSL
OBJS += src/crypto/tls_openssl.c
BoringSSL: Move OCSP implementation into a separate file This makes it easier to share the OCSP implementation needed for BoringSSL outside tls_openssl.c. For now, this is mainly for http_curl.c. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2015-12-04 13:04:31 +01:00
OBJS += src/crypto/tls_openssl_ocsp.c
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
LIBS += -lssl
endif
OBJS += src/crypto/crypto_openssl.c
OBJS_p += src/crypto/crypto_openssl.c
ifdef NEED_FIPS186_2_PRF
OBJS += src/crypto/fips_prf_openssl.c
endif
OpenSSL: Add SHA256 support in openssl_tls_prf() for TLSv1.2 This is needed when enabling TLSv1.2 support for EAP-FAST since the SSL_export_keying_material() call does not support the needed parameters for TLS PRF and the external-to-OpenSSL PRF needs to be used instead. Signed-off-by: Jouni Malinen <j@w1.fi>
2015-07-28 10:40:17 +02:00
NEED_TLS_PRF_SHA256=y
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
LIBS += -lcrypto
LIBS_p += -lcrypto
Android: Sync Android.mk with Makefile This brings in commit 411f56705019ac5b13b4daf62f423fceb3c703e2 changes to allow libdl to be linked in after OpenSSL. Signed-hostap: Jouni Malinen <jouni@qca.qualcomm.com>
2013-11-08 11:57:19 +01:00
ifdef CONFIG_TLS_ADD_DL
LIBS += -ldl
LIBS_p += -ldl
endif
OpenSSL: Add build option to select default ciphers Add a build option to select different default ciphers for OpenSSL instead of the hardcoded default "DEFAULT:!EXP:!LOW". This new option is useful on distributions where the security level should be consistent for all applications, as in Fedora [1]. In such cases the new configuration option would be set to "" or "PROFILE=SYSTEM" to select the global crypto policy by default. [1] https://fedoraproject.org/wiki/Changes/CryptoPolicy Signed-off-by: Beniamino Galvani <bgalvani@redhat.com>
2017-07-09 11:06:50 +02:00
ifndef CONFIG_TLS_DEFAULT_CIPHERS
CONFIG_TLS_DEFAULT_CIPHERS = "DEFAULT:!EXP:!LOW"
endif
L_CFLAGS += -DTLS_DEFAULT_CIPHERS=\"$(CONFIG_TLS_DEFAULT_CIPHERS)\"
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
endif
ifeq ($(CONFIG_TLS), gnutls)
GnuTLS: Add option to build with libnettle instead of libgcrypt GnuTLS-based builds can now be done using either libnettle or libgcrypt for crypto functionality: CONFIG_TLS=gnutls CONFIG_CRYPTO=nettle CONFIG_TLS=gnutls CONFIG_CRYPTO=gnutls Signed-off-by: Jouni Malinen <j@w1.fi>
2017-12-29 16:11:21 +01:00
ifndef CONFIG_CRYPTO
# default to libgcrypt
CONFIG_CRYPTO=gnutls
endif
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
ifdef TLS_FUNCS
OBJS += src/crypto/tls_gnutls.c
LIBS += -lgnutls -lgpg-error
endif
GnuTLS: Add option to build with libnettle instead of libgcrypt GnuTLS-based builds can now be done using either libnettle or libgcrypt for crypto functionality: CONFIG_TLS=gnutls CONFIG_CRYPTO=nettle CONFIG_TLS=gnutls CONFIG_CRYPTO=gnutls Signed-off-by: Jouni Malinen <j@w1.fi>
2017-12-29 16:11:21 +01:00
OBJS += src/crypto/crypto_$(CONFIG_CRYPTO).c
OBJS_p += src/crypto/crypto_$(CONFIG_CRYPTO).c
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
ifdef NEED_FIPS186_2_PRF
Use internal FIPS 186-2 PRF if needed Previously, EAP-SIM/AKA/AKA' did not work with number of crypto libraries (GnuTLS, CryptoAPI, NSS) since the required FIPS 186-2 PRF function was not implemented. This resulted in somewhat confusing error messages since the placeholder functions were silently returning an error. Fix this by using the internal implementation of FIP 186-2 PRF (including internal SHA-1 implementation) with crypto libraries that do not implement this in case EAP-SIM/AKA/AKA' is included in the build. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2014-03-11 15:33:05 +01:00
OBJS += src/crypto/fips_prf_internal.c
OBJS += src/crypto/sha1-internal.c
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
endif
GnuTLS: Add option to build with libnettle instead of libgcrypt GnuTLS-based builds can now be done using either libnettle or libgcrypt for crypto functionality: CONFIG_TLS=gnutls CONFIG_CRYPTO=nettle CONFIG_TLS=gnutls CONFIG_CRYPTO=gnutls Signed-off-by: Jouni Malinen <j@w1.fi>
2017-12-29 16:11:21 +01:00
ifeq ($(CONFIG_CRYPTO), gnutls)
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
LIBS += -lgcrypt
LIBS_p += -lgcrypt
CONFIG_INTERNAL_RC4=y
CONFIG_INTERNAL_DH_GROUP5=y
endif
GnuTLS: Add option to build with libnettle instead of libgcrypt GnuTLS-based builds can now be done using either libnettle or libgcrypt for crypto functionality: CONFIG_TLS=gnutls CONFIG_CRYPTO=nettle CONFIG_TLS=gnutls CONFIG_CRYPTO=gnutls Signed-off-by: Jouni Malinen <j@w1.fi>
2017-12-29 16:11:21 +01:00
ifeq ($(CONFIG_CRYPTO), nettle)
LIBS += -lnettle -lgmp
LIBS_p += -lnettle -lgmp
CONFIG_INTERNAL_RC4=y
CONFIG_INTERNAL_DH_GROUP5=y
endif
endif
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
ifeq ($(CONFIG_TLS), internal)
ifndef CONFIG_CRYPTO
CONFIG_CRYPTO=internal
endif
ifdef TLS_FUNCS
OBJS += src/crypto/crypto_internal-rsa.c
OBJS += src/crypto/tls_internal.c
OBJS += src/tls/tlsv1_common.c
OBJS += src/tls/tlsv1_record.c
OBJS += src/tls/tlsv1_cred.c
OBJS += src/tls/tlsv1_client.c
OBJS += src/tls/tlsv1_client_write.c
OBJS += src/tls/tlsv1_client_read.c
TLS: Parse CertificateStatus message This allows the internal TLS client implementation to accept CertificateStatus message from the server when trying to use OCSP stapling. The actual OCSPResponse is not yet processed in this commit, but the CertificateStatus message is accepted to allow the TLS handshake to continue. Signed-off-by: Jouni Malinen <j@w1.fi>
2015-12-13 22:11:32 +01:00
OBJS += src/tls/tlsv1_client_ocsp.c
DPP: Add ASN.1 support into build This will be needed in following patches to process DPPEnvelopedData. Signed-off-by: Jouni Malinen <jouni@codeaurora.org>
2019-12-12 01:28:39 +01:00
NEED_ASN1=y
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
OBJS += src/tls/rsa.c
OBJS += src/tls/x509v3.c
OBJS += src/tls/pkcs1.c
OBJS += src/tls/pkcs5.c
OBJS += src/tls/pkcs8.c
NEED_BASE64=y
NEED_TLS_PRF=y
Android: Update Android.mk based on Makefile changes This brings the Android makefiles a bit closer to the Makefile changes that had been missed in the past. Signed-hostap: Jouni Malinen <j@w1.fi>
2013-03-17 19:08:23 +01:00
ifdef CONFIG_TLSV12
NEED_TLS_PRF_SHA256=y
endif
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
NEED_MODEXP=y
NEED_CIPHER=y
L_CFLAGS += -DCONFIG_TLS_INTERNAL_CLIENT
endif
ifdef NEED_CIPHER
NEED_DES=y
OBJS += src/crypto/crypto_internal-cipher.c
endif
ifdef NEED_MODEXP
OBJS += src/crypto/crypto_internal-modexp.c
OBJS += src/tls/bignum.c
endif
ifeq ($(CONFIG_CRYPTO), libtomcrypt)
OBJS += src/crypto/crypto_libtomcrypt.c
OBJS_p += src/crypto/crypto_libtomcrypt.c
LIBS += -ltomcrypt -ltfm
LIBS_p += -ltomcrypt -ltfm
CONFIG_INTERNAL_SHA256=y
CONFIG_INTERNAL_RC4=y
CONFIG_INTERNAL_DH_GROUP5=y
endif
ifeq ($(CONFIG_CRYPTO), internal)
OBJS += src/crypto/crypto_internal.c
OBJS_p += src/crypto/crypto_internal.c
NEED_AES_ENC=y
L_CFLAGS += -DCONFIG_CRYPTO_INTERNAL
ifdef CONFIG_INTERNAL_LIBTOMMATH
L_CFLAGS += -DCONFIG_INTERNAL_LIBTOMMATH
ifdef CONFIG_INTERNAL_LIBTOMMATH_FAST
L_CFLAGS += -DLTM_FAST
endif
else
LIBS += -ltommath
LIBS_p += -ltommath
endif
CONFIG_INTERNAL_AES=y
CONFIG_INTERNAL_DES=y
CONFIG_INTERNAL_SHA1=y
CONFIG_INTERNAL_MD4=y
CONFIG_INTERNAL_MD5=y
CONFIG_INTERNAL_SHA256=y
Add SHA384 and SHA512 implementations from LibTomCrypt library These will be used with the internal TLS implementation to extend hash algorithm support for new certificates and TLS v1.2. Signed-off-by: Pali Rohár <pali.rohar@gmail.com>
2015-11-22 02:02:57 +01:00
CONFIG_INTERNAL_SHA384=y
CONFIG_INTERNAL_SHA512=y
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
CONFIG_INTERNAL_RC4=y
CONFIG_INTERNAL_DH_GROUP5=y
endif
ifeq ($(CONFIG_CRYPTO), cryptoapi)
OBJS += src/crypto/crypto_cryptoapi.c
OBJS_p += src/crypto/crypto_cryptoapi.c
L_CFLAGS += -DCONFIG_CRYPTO_CRYPTOAPI
CONFIG_INTERNAL_SHA256=y
CONFIG_INTERNAL_RC4=y
endif
endif
ifeq ($(CONFIG_TLS), none)
ifdef TLS_FUNCS
OBJS += src/crypto/tls_none.c
L_CFLAGS += -DEAP_TLS_NONE
CONFIG_INTERNAL_AES=y
CONFIG_INTERNAL_SHA1=y
CONFIG_INTERNAL_MD5=y
endif
OBJS += src/crypto/crypto_none.c
OBJS_p += src/crypto/crypto_none.c
CONFIG_INTERNAL_SHA256=y
CONFIG_INTERNAL_RC4=y
endif
ifdef TLS_FUNCS
ifdef CONFIG_SMARTCARD
ifndef CONFIG_NATIVE_WINDOWS
ifneq ($(CONFIG_L2_PACKET), freebsd)
LIBS += -ldl
endif
endif
endif
endif
ifndef TLS_FUNCS
OBJS += src/crypto/tls_none.c
ifeq ($(CONFIG_TLS), internal)
CONFIG_INTERNAL_AES=y
CONFIG_INTERNAL_SHA1=y
CONFIG_INTERNAL_MD5=y
CONFIG_INTERNAL_RC4=y
endif
endif
AESOBJS = # none so far (see below)
ifdef CONFIG_INTERNAL_AES
AESOBJS += src/crypto/aes-internal.c src/crypto/aes-internal-dec.c
endif
OpenSSL: Implement aes_wrap() and aes_unwrap() This replaces the implementation in aes-wrap.c and aes-unwrap.c with OpenSSL AES_wrap_key() and AES_unwrap_key() functions when building hostapd or wpa_supplicant with OpenSSL. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2015-01-27 12:57:59 +01:00
ifneq ($(CONFIG_TLS), openssl)
OpenSSL: Implement aes_wrap/aes_unwrap through EVP for CONFIG_FIPS=y The OpenSSL internal AES_wrap_key() and AES_unwrap_key() functions are unfortunately not available in FIPS mode. Trying to use them results in "aes_misc.c(83): OpenSSL internal error, assertion failed: Low level API call to cipher AES forbidden in FIPS mode!" and process termination. Work around this by reverting commit f19c907822ad0dec3480b1435b615ae22c5533a1 ('OpenSSL: Implement aes_wrap() and aes_unwrap()') changes for CONFIG_FIPS=y case. In practice, this ends up using the internal AES key wrap/unwrap implementation through the OpenSSL EVP API which is available in FIPS mode. When CONFIG_FIPS=y is not used, the OpenSSL AES_wrap_key()/AES_unwrap_key() API continues to be used to minimize code size. Signed-off-by: Jouni Malinen <j@w1.fi>
2015-08-01 15:31:45 +02:00
NEED_INTERNAL_AES_WRAP=y
endif
BoringSSL: Allow internal AES key wrap to be used with "OpenSSL" build It looks like BoringSSL has removed the AES_wrap_key(), AES_unwrap_key() API. This broke wpa_supplicant/hostapd build since those functions from OpenSSL were used to replace the internal AES key wrap implementation. Add a new build configuration option (CONFIG_OPENSSL_INTERNAL_AES_WRAP=y) to allow the internal implementation to be used with CONFIG_OPENSSL=y build to allow build against the latest BoringSSL version. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2015-08-17 20:31:17 +02:00
ifdef CONFIG_OPENSSL_INTERNAL_AES_WRAP
# Seems to be needed at least with BoringSSL
NEED_INTERNAL_AES_WRAP=y
L_CFLAGS += -DCONFIG_OPENSSL_INTERNAL_AES_WRAP
endif
OpenSSL: Implement aes_wrap/aes_unwrap through EVP for CONFIG_FIPS=y The OpenSSL internal AES_wrap_key() and AES_unwrap_key() functions are unfortunately not available in FIPS mode. Trying to use them results in "aes_misc.c(83): OpenSSL internal error, assertion failed: Low level API call to cipher AES forbidden in FIPS mode!" and process termination. Work around this by reverting commit f19c907822ad0dec3480b1435b615ae22c5533a1 ('OpenSSL: Implement aes_wrap() and aes_unwrap()') changes for CONFIG_FIPS=y case. In practice, this ends up using the internal AES key wrap/unwrap implementation through the OpenSSL EVP API which is available in FIPS mode. When CONFIG_FIPS=y is not used, the OpenSSL AES_wrap_key()/AES_unwrap_key() API continues to be used to minimize code size. Signed-off-by: Jouni Malinen <j@w1.fi>
2015-08-01 15:31:45 +02:00
ifdef CONFIG_FIPS
# Have to use internal AES key wrap routines to use OpenSSL EVP since the
# OpenSSL AES_wrap_key()/AES_unwrap_key() API is not available in FIPS mode.
NEED_INTERNAL_AES_WRAP=y
endif
ifdef NEED_INTERNAL_AES_WRAP
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
AESOBJS += src/crypto/aes-unwrap.c
OpenSSL: Implement aes_wrap() and aes_unwrap() This replaces the implementation in aes-wrap.c and aes-unwrap.c with OpenSSL AES_wrap_key() and AES_unwrap_key() functions when building hostapd or wpa_supplicant with OpenSSL. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2015-01-27 12:57:59 +01:00
endif
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
ifdef NEED_AES_EAX
AESOBJS += src/crypto/aes-eax.c
NEED_AES_CTR=y
Fix AES-SIV build dependencies aes-siv.c needs functions from aes-ctr.c and aes-omac1.c, so set NEED_AES_CTR=y and NEED_AES_OMAC1=y if NEED_AES_SIV is defined. This fixes some build configuration combinations where either of those dependencies were not pulled in through other parameters. For example, some CONFIG_FILS=y cases were impacted. Signed-off-by: Jouni Malinen <j@w1.fi>
2017-02-26 11:02:21 +01:00
endif
ifdef NEED_AES_SIV
AESOBJS += src/crypto/aes-siv.c
NEED_AES_CTR=y
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
endif
ifdef NEED_AES_CTR
AESOBJS += src/crypto/aes-ctr.c
endif
ifdef NEED_AES_ENCBLOCK
AESOBJS += src/crypto/aes-encblock.c
endif
NEED_AES_ENC=y
FIPS: Use OpenSSL CMAC implementation instead of aes-omac1.c Signed-hostap: Jouni Malinen <j@w1.fi>
2012-08-16 21:19:53 +02:00
ifdef CONFIG_OPENSSL_CMAC
Android: Fix CFLAGS -> L_CFLAGS Signed-off-by: Dmitry Shmidt <dimitrysh@google.com>
2013-11-06 01:45:35 +01:00
L_CFLAGS += -DCONFIG_OPENSSL_CMAC
FIPS: Use OpenSSL CMAC implementation instead of aes-omac1.c Signed-hostap: Jouni Malinen <j@w1.fi>
2012-08-16 21:19:53 +02:00
else
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
AESOBJS += src/crypto/aes-omac1.c
endif
ifdef NEED_AES_WRAP
NEED_AES_ENC=y
OpenSSL: Implement aes_wrap/aes_unwrap through EVP for CONFIG_FIPS=y The OpenSSL internal AES_wrap_key() and AES_unwrap_key() functions are unfortunately not available in FIPS mode. Trying to use them results in "aes_misc.c(83): OpenSSL internal error, assertion failed: Low level API call to cipher AES forbidden in FIPS mode!" and process termination. Work around this by reverting commit f19c907822ad0dec3480b1435b615ae22c5533a1 ('OpenSSL: Implement aes_wrap() and aes_unwrap()') changes for CONFIG_FIPS=y case. In practice, this ends up using the internal AES key wrap/unwrap implementation through the OpenSSL EVP API which is available in FIPS mode. When CONFIG_FIPS=y is not used, the OpenSSL AES_wrap_key()/AES_unwrap_key() API continues to be used to minimize code size. Signed-off-by: Jouni Malinen <j@w1.fi>
2015-08-01 15:31:45 +02:00
ifdef NEED_INTERNAL_AES_WRAP
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
AESOBJS += src/crypto/aes-wrap.c
endif
OpenSSL: Implement aes_wrap() and aes_unwrap() This replaces the implementation in aes-wrap.c and aes-unwrap.c with OpenSSL AES_wrap_key() and AES_unwrap_key() functions when building hostapd or wpa_supplicant with OpenSSL. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2015-01-27 12:57:59 +01:00
endif
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
ifdef NEED_AES_CBC
NEED_AES_ENC=y
OpenSSL: Implement AES-128 CBC using EVP API This replaces the internal CBC mode implementation in aes_128_cbc_encrypt() and aes_128_cbc_decrypt() with the OpenSSL implementation for CONFIG_TLS=openssl builds. Signed-off-by: Jouni Malinen <j@w1.fi>
2015-03-29 19:30:58 +02:00
ifneq ($(CONFIG_TLS), openssl)
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
AESOBJS += src/crypto/aes-cbc.c
endif
OpenSSL: Implement AES-128 CBC using EVP API This replaces the internal CBC mode implementation in aes_128_cbc_encrypt() and aes_128_cbc_decrypt() with the OpenSSL implementation for CONFIG_TLS=openssl builds. Signed-off-by: Jouni Malinen <j@w1.fi>
2015-03-29 19:30:58 +02:00
endif
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
ifdef NEED_AES_ENC
ifdef CONFIG_INTERNAL_AES
AESOBJS += src/crypto/aes-internal-enc.c
endif
endif
ifdef NEED_AES
OBJS += $(AESOBJS)
endif
SHA1OBJS =
ifdef NEED_SHA1
OpenSSL: Implement SHA1 HMAC functions using HMAC API Use the OpenSSL HMAC implementation instead of the internal sha1.c implementation of HMAC with SHA1. Signed-hostap: Jouni Malinen <j@w1.fi>
2012-08-16 19:38:25 +02:00
ifneq ($(CONFIG_TLS), openssl)
GnuTLS: Implement HMAC functions using libgcrypt Replace the internal HMAC MD5, SHA-1, and SHA256 implementations with the ones from libgcrypt and also add the SHA384 and SHA512 versions. Signed-off-by: Jouni Malinen <j@w1.fi>
2017-12-27 22:35:26 +01:00
ifneq ($(CONFIG_TLS), gnutls)
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
SHA1OBJS += src/crypto/sha1.c
OpenSSL: Implement SHA1 HMAC functions using HMAC API Use the OpenSSL HMAC implementation instead of the internal sha1.c implementation of HMAC with SHA1. Signed-hostap: Jouni Malinen <j@w1.fi>
2012-08-16 19:38:25 +02:00
endif
GnuTLS: Implement HMAC functions using libgcrypt Replace the internal HMAC MD5, SHA-1, and SHA256 implementations with the ones from libgcrypt and also add the SHA384 and SHA512 versions. Signed-off-by: Jouni Malinen <j@w1.fi>
2017-12-27 22:35:26 +01:00
endif
Move SHA1-based PRF function into a separate C file This makes it easier to conditionally build in SHA1 functions based on which TLS/crypto library is used. Signed-hostap: Jouni Malinen <j@w1.fi>
2012-08-16 19:23:12 +02:00
SHA1OBJS += src/crypto/sha1-prf.c
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
ifdef CONFIG_INTERNAL_SHA1
SHA1OBJS += src/crypto/sha1-internal.c
ifdef NEED_FIPS186_2_PRF
SHA1OBJS += src/crypto/fips_prf_internal.c
endif
endif
Android: Sync Android.mk with recent Makefile changes
2011-10-18 16:15:36 +02:00
ifdef CONFIG_NO_WPA_PASSPHRASE
L_CFLAGS += -DCONFIG_NO_PBKDF2
else
OpenSSL: Use library function for PBKDF2 passphrase-to-PSK Use the OpenSSL PKCS5_PBKDF2_HMAC_SHA1() function instead of the internal implementation in sha1-pbkdf2.c. Signed-hostap: Jouni Malinen <j@w1.fi>
2012-08-16 19:13:02 +02:00
ifneq ($(CONFIG_TLS), openssl)
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
SHA1OBJS += src/crypto/sha1-pbkdf2.c
endif
OpenSSL: Use library function for PBKDF2 passphrase-to-PSK Use the OpenSSL PKCS5_PBKDF2_HMAC_SHA1() function instead of the internal implementation in sha1-pbkdf2.c. Signed-hostap: Jouni Malinen <j@w1.fi>
2012-08-16 19:13:02 +02:00
endif
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
ifdef NEED_T_PRF
SHA1OBJS += src/crypto/sha1-tprf.c
endif
ifdef NEED_TLS_PRF
SHA1OBJS += src/crypto/sha1-tlsprf.c
endif
endif
Android: Reset MD5OBJS value before += operation Signed-off-by: Dmitry Shmidt <dimitrysh@google.com>
2013-11-09 14:30:46 +01:00
MD5OBJS =
Android: Update Android.mk based on Makefile changes This brings the Android makefiles a bit closer to the Makefile changes that had been missed in the past. Signed-hostap: Jouni Malinen <j@w1.fi>
2013-03-17 19:08:23 +01:00
ifndef CONFIG_FIPS
OpenSSL: Replace internal HMAC-MD5 implementation Use OpenSSL HMAC_* functions to implement HMAC-MD5 instead of depending on the src/crypto/md5.c implementation. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2015-01-27 12:26:01 +01:00
ifneq ($(CONFIG_TLS), openssl)
GnuTLS: Implement HMAC functions using libgcrypt Replace the internal HMAC MD5, SHA-1, and SHA256 implementations with the ones from libgcrypt and also add the SHA384 and SHA512 versions. Signed-off-by: Jouni Malinen <j@w1.fi>
2017-12-27 22:35:26 +01:00
ifneq ($(CONFIG_TLS), gnutls)
Android: Update Android.mk based on Makefile changes This brings the Android makefiles a bit closer to the Makefile changes that had been missed in the past. Signed-hostap: Jouni Malinen <j@w1.fi>
2013-03-17 19:08:23 +01:00
MD5OBJS += src/crypto/md5.c
endif
OpenSSL: Replace internal HMAC-MD5 implementation Use OpenSSL HMAC_* functions to implement HMAC-MD5 instead of depending on the src/crypto/md5.c implementation. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2015-01-27 12:26:01 +01:00
endif
GnuTLS: Implement HMAC functions using libgcrypt Replace the internal HMAC MD5, SHA-1, and SHA256 implementations with the ones from libgcrypt and also add the SHA384 and SHA512 versions. Signed-off-by: Jouni Malinen <j@w1.fi>
2017-12-27 22:35:26 +01:00
endif
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
ifdef NEED_MD5
ifdef CONFIG_INTERNAL_MD5
MD5OBJS += src/crypto/md5-internal.c
endif
OBJS += $(MD5OBJS)
OBJS_p += $(MD5OBJS)
endif
ifdef NEED_MD4
ifdef CONFIG_INTERNAL_MD4
OBJS += src/crypto/md4-internal.c
endif
endif
DESOBJS = # none needed when not internal
ifdef NEED_DES
ifdef CONFIG_INTERNAL_DES
DESOBJS += src/crypto/des-internal.c
endif
endif
Add build option to remove all internal RC4 uses The new CONFIG_NO_RC4=y build option can be used to remove all internal hostapd and wpa_supplicant uses of RC4. It should be noted that external uses (e.g., within a TLS library) do not get disabled when doing this. This removes capability of supporting WPA/TKIP, dynamic WEP keys with IEEE 802.1X, WEP shared key authentication, and MSCHAPv2 password changes. Signed-off-by: Jouni Malinen <j@w1.fi>
2015-08-01 22:37:07 +02:00
ifdef CONFIG_NO_RC4
L_CFLAGS += -DCONFIG_NO_RC4
endif
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
ifdef NEED_RC4
ifdef CONFIG_INTERNAL_RC4
Add build option to remove all internal RC4 uses The new CONFIG_NO_RC4=y build option can be used to remove all internal hostapd and wpa_supplicant uses of RC4. It should be noted that external uses (e.g., within a TLS library) do not get disabled when doing this. This removes capability of supporting WPA/TKIP, dynamic WEP keys with IEEE 802.1X, WEP shared key authentication, and MSCHAPv2 password changes. Signed-off-by: Jouni Malinen <j@w1.fi>
2015-08-01 22:37:07 +02:00
ifndef CONFIG_NO_RC4
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
OBJS += src/crypto/rc4.c
endif
endif
Add build option to remove all internal RC4 uses The new CONFIG_NO_RC4=y build option can be used to remove all internal hostapd and wpa_supplicant uses of RC4. It should be noted that external uses (e.g., within a TLS library) do not get disabled when doing this. This removes capability of supporting WPA/TKIP, dynamic WEP keys with IEEE 802.1X, WEP shared key authentication, and MSCHAPv2 password changes. Signed-off-by: Jouni Malinen <j@w1.fi>
2015-08-01 22:37:07 +02:00
endif
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
SHA256OBJS = # none by default
L_CFLAGS += -DCONFIG_SHA256
OpenSSL: Implement SHA256 HMAC functions using HMAC API Use the OpenSSL HMAC implementation instead of the internal sha256.c implementation of HMAC with SHA256. Signed-hostap: Jouni Malinen <j@w1.fi>
2012-08-16 21:34:35 +02:00
ifneq ($(CONFIG_TLS), openssl)
GnuTLS: Implement HMAC functions using libgcrypt Replace the internal HMAC MD5, SHA-1, and SHA256 implementations with the ones from libgcrypt and also add the SHA384 and SHA512 versions. Signed-off-by: Jouni Malinen <j@w1.fi>
2017-12-27 22:35:26 +01:00
ifneq ($(CONFIG_TLS), gnutls)
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
SHA256OBJS += src/crypto/sha256.c
OpenSSL: Implement SHA256 HMAC functions using HMAC API Use the OpenSSL HMAC implementation instead of the internal sha256.c implementation of HMAC with SHA256. Signed-hostap: Jouni Malinen <j@w1.fi>
2012-08-16 21:34:35 +02:00
endif
GnuTLS: Implement HMAC functions using libgcrypt Replace the internal HMAC MD5, SHA-1, and SHA256 implementations with the ones from libgcrypt and also add the SHA384 and SHA512 versions. Signed-off-by: Jouni Malinen <j@w1.fi>
2017-12-27 22:35:26 +01:00
endif
Move SHA256-based PRF function into a separate C file This makes it easier to conditionally build in SHA256 functions based on which TLS/crypto library is used. Signed-hostap: Jouni Malinen <j@w1.fi>
2012-08-16 21:24:11 +02:00
SHA256OBJS += src/crypto/sha256-prf.c
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
ifdef CONFIG_INTERNAL_SHA256
SHA256OBJS += src/crypto/sha256-internal.c
endif
Add SHA384 and SHA512 implementations from LibTomCrypt library These will be used with the internal TLS implementation to extend hash algorithm support for new certificates and TLS v1.2. Signed-off-by: Pali Rohár <pali.rohar@gmail.com>
2015-11-22 02:02:57 +01:00
ifdef CONFIG_INTERNAL_SHA384
L_CFLAGS += -DCONFIG_INTERNAL_SHA384
SHA256OBJS += src/crypto/sha384-internal.c
endif
ifdef CONFIG_INTERNAL_SHA512
L_CFLAGS += -DCONFIG_INTERNAL_SHA512
SHA256OBJS += src/crypto/sha512-internal.c
endif
Android: Update Android.mk based on Makefile changes This brings the Android makefiles a bit closer to the Makefile changes that had been missed in the past. Signed-hostap: Jouni Malinen <j@w1.fi>
2013-03-17 19:08:23 +01:00
ifdef NEED_TLS_PRF_SHA256
SHA256OBJS += src/crypto/sha256-tlsprf.c
endif
Add TLS-PRF using HMAC with P_SHA384 for TEAP This version of TLS PRF is needed when using TEAP with TLS ciphersuites that are defined to use SHA384 instead of SHA256. Signed-off-by: Jouni Malinen <j@w1.fi>
2019-08-16 20:15:32 +02:00
ifdef NEED_TLS_PRF_SHA384
SHA256OBJS += src/crypto/sha384-tlsprf.c
endif
ERP: Add support for ERP on EAP peer Derive rRK and rIK on EAP peer if ERP is enabled. The new wpa_supplicant network configuration parameter erp=1 can now be used to configure the EAP peer to derive EMSK, rRK, and rIK at the successful completion of an EAP authentication method. This functionality is not included in the default build and can be enabled with CONFIG_ERP=y. If EAP authenticator indicates support for re-authentication protocol, initiate this with EAP-Initiate/Re-auth and complete protocol when receiving EAP-Finish/Re-auth. Signed-off-by: Jouni Malinen <j@w1.fi>
2014-11-29 22:14:40 +01:00
ifdef NEED_HMAC_SHA256_KDF
tests: Fix build without CONFIG_ERP=y hmac_sha256_kdf() got pulled in only if CONFIG_ERP=y is set. Fix test_sha256() by making the test case conditional on the function being present. Signed-off-by: Jouni Malinen <j@w1.fi>
2015-10-25 23:42:14 +01:00
L_CFLAGS += -DCONFIG_HMAC_SHA256_KDF
ERP: Add support for ERP on EAP peer Derive rRK and rIK on EAP peer if ERP is enabled. The new wpa_supplicant network configuration parameter erp=1 can now be used to configure the EAP peer to derive EMSK, rRK, and rIK at the successful completion of an EAP authentication method. This functionality is not included in the default build and can be enabled with CONFIG_ERP=y. If EAP authenticator indicates support for re-authentication protocol, initiate this with EAP-Initiate/Re-auth and complete protocol when receiving EAP-Finish/Re-auth. Signed-off-by: Jouni Malinen <j@w1.fi>
2014-11-29 22:14:40 +01:00
SHA256OBJS += src/crypto/sha256-kdf.c
endif
Extend SHA-384 and SHA-512 support to match SHA-256 The additional SHA-384 and SHA-512 functionality is needed to support DPP with various ECC curves. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2017-06-15 20:17:50 +02:00
ifdef NEED_HMAC_SHA384_KDF
L_CFLAGS += -DCONFIG_HMAC_SHA384_KDF
SHA256OBJS += src/crypto/sha384-kdf.c
endif
ifdef NEED_HMAC_SHA512_KDF
L_CFLAGS += -DCONFIG_HMAC_SHA512_KDF
SHA256OBJS += src/crypto/sha512-kdf.c
endif
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
OBJS += $(SHA256OBJS)
Add HMAC-SHA384 For now, this is only implemented with OpenSSL. Signed-off-by: Jouni Malinen <j@w1.fi>
2015-01-25 23:37:18 +01:00
ifdef NEED_SHA384
L_CFLAGS += -DCONFIG_SHA384
Add HMAC-SHA384 with internal crypto This is a copy of the internal HMAC-SHA256 implementation with the hash block size and output length updated to match SHA384 parameters. Signed-off-by: Jouni Malinen <j@w1.fi>
2017-02-16 19:37:19 +01:00
ifneq ($(CONFIG_TLS), openssl)
GnuTLS: Implement HMAC functions using libgcrypt Replace the internal HMAC MD5, SHA-1, and SHA256 implementations with the ones from libgcrypt and also add the SHA384 and SHA512 versions. Signed-off-by: Jouni Malinen <j@w1.fi>
2017-12-27 22:35:26 +01:00
ifneq ($(CONFIG_TLS), gnutls)
Add HMAC-SHA384 with internal crypto This is a copy of the internal HMAC-SHA256 implementation with the hash block size and output length updated to match SHA384 parameters. Signed-off-by: Jouni Malinen <j@w1.fi>
2017-02-16 19:37:19 +01:00
OBJS += src/crypto/sha384.c
endif
GnuTLS: Implement HMAC functions using libgcrypt Replace the internal HMAC MD5, SHA-1, and SHA256 implementations with the ones from libgcrypt and also add the SHA384 and SHA512 versions. Signed-off-by: Jouni Malinen <j@w1.fi>
2017-12-27 22:35:26 +01:00
endif
Fix key derivation for Suite B 192-bit AKM to use SHA384 While the EAPOL-Key MIC derivation was already changed from SHA256 to SHA384 for the Suite B 192-bit AKM, KDF had not been updated similarly. Fix this by using HMAC-SHA384 instead of HMAC-SHA256 when deriving PTK from PMK when using the Suite B 192-bit AKM. Signed-off-by: Jouni Malinen <j@w1.fi>
2015-08-27 19:42:14 +02:00
OBJS += src/crypto/sha384-prf.c
Add HMAC-SHA384 For now, this is only implemented with OpenSSL. Signed-off-by: Jouni Malinen <j@w1.fi>
2015-01-25 23:37:18 +01:00
endif
Extend SHA-384 and SHA-512 support to match SHA-256 The additional SHA-384 and SHA-512 functionality is needed to support DPP with various ECC curves. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2017-06-15 20:17:50 +02:00
ifdef NEED_SHA512
L_CFLAGS += -DCONFIG_SHA512
ifneq ($(CONFIG_TLS), openssl)
GnuTLS: Implement HMAC functions using libgcrypt Replace the internal HMAC MD5, SHA-1, and SHA256 implementations with the ones from libgcrypt and also add the SHA384 and SHA512 versions. Signed-off-by: Jouni Malinen <j@w1.fi>
2017-12-27 22:35:26 +01:00
ifneq ($(CONFIG_TLS), gnutls)
Extend SHA-384 and SHA-512 support to match SHA-256 The additional SHA-384 and SHA-512 functionality is needed to support DPP with various ECC curves. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2017-06-15 20:17:50 +02:00
OBJS += src/crypto/sha512.c
endif
GnuTLS: Implement HMAC functions using libgcrypt Replace the internal HMAC MD5, SHA-1, and SHA256 implementations with the ones from libgcrypt and also add the SHA384 and SHA512 versions. Signed-off-by: Jouni Malinen <j@w1.fi>
2017-12-27 22:35:26 +01:00
endif
Extend SHA-384 and SHA-512 support to match SHA-256 The additional SHA-384 and SHA-512 functionality is needed to support DPP with various ECC curves. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2017-06-15 20:17:50 +02:00
OBJS += src/crypto/sha512-prf.c
endif
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
DPP: Add ASN.1 support into build This will be needed in following patches to process DPPEnvelopedData. Signed-off-by: Jouni Malinen <jouni@codeaurora.org>
2019-12-12 01:28:39 +01:00
ifdef NEED_ASN1
OBJS += src/tls/asn1.c
endif
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
ifdef NEED_DH_GROUPS
OBJS += src/crypto/dh_groups.c
endif
ifdef NEED_DH_GROUPS_ALL
L_CFLAGS += -DALL_DH_GROUPS
endif
ifdef CONFIG_INTERNAL_DH_GROUP5
ifdef NEED_DH_GROUPS
OBJS += src/crypto/dh_group5.c
endif
endif
SAE: Use crypto wrappers instead of direct OpenSSL calls This makes the SAE implementation independent of the crypto/bignum library. Signed-hostap: Jouni Malinen <j@w1.fi>
2012-12-31 18:41:21 +01:00
ifdef NEED_ECC
L_CFLAGS += -DCONFIG_ECC
endif
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
ifdef CONFIG_NO_RANDOM_POOL
L_CFLAGS += -DCONFIG_NO_RANDOM_POOL
else
OBJS += src/crypto/random.c
endif
ifdef CONFIG_CTRL_IFACE
ifeq ($(CONFIG_CTRL_IFACE), y)
ifdef CONFIG_NATIVE_WINDOWS
CONFIG_CTRL_IFACE=named_pipe
else
CONFIG_CTRL_IFACE=unix
endif
endif
L_CFLAGS += -DCONFIG_CTRL_IFACE
ifeq ($(CONFIG_CTRL_IFACE), unix)
L_CFLAGS += -DCONFIG_CTRL_IFACE_UNIX
wpa_supplicant: Use common functions for ctrl_iface Use the common functions, structures when UNIX socket ctrl_iface used. Signed-off-by: Janusz Dziedzic <janusz.dziedzic@tieto.com>
2016-03-04 10:20:21 +01:00
OBJS += src/common/ctrl_iface_common.c
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
endif
ifeq ($(CONFIG_CTRL_IFACE), udp)
L_CFLAGS += -DCONFIG_CTRL_IFACE_UDP
endif
ifeq ($(CONFIG_CTRL_IFACE), named_pipe)
L_CFLAGS += -DCONFIG_CTRL_IFACE_NAMED_PIPE
endif
wpa_supplicant: Add optional remote access for ctrl_iface Add new option for ctrl iface: CONFIG_CTRL_IFACE=udp-remote. This enables remote access to control interface via UDP port(s). This should be used for testing purpose only since there is no authentication or access control on the commands. Signed-hostap: Janusz Dziedzic <janusz.dziedzic@tieto.com>
2012-08-05 19:01:07 +02:00
ifeq ($(CONFIG_CTRL_IFACE), udp-remote)
CONFIG_CTRL_IFACE=udp
L_CFLAGS += -DCONFIG_CTRL_IFACE_UDP
L_CFLAGS += -DCONFIG_CTRL_IFACE_UDP_REMOTE
endif
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
OBJS += ctrl_iface.c ctrl_iface_$(CONFIG_CTRL_IFACE).c
endif
ifdef CONFIG_CTRL_IFACE_DBUS_NEW
wpa_supplicant: Drop the old D-Bus interface support This drops support for the fi.epitest.hostap.WPASupplicant D-Bus name along with the associated CONFIG_CTRL_IFACE_DBUS option. Nothing should really be using this since 2010. This is a just a straightforward removal. Perhaps the dbus_common.c and dbus_new.c can be merged now. Also, the "_NEW" suffix of the config option seems to make even less sense than it used to. Signed-off-by: Lubomir Rintel <lkundrak@v3.sk>
2019-02-26 12:04:36 +01:00
L_CFLAGS += -DCONFIG_CTRL_IFACE_DBUS_NEW
OBJS += dbus/dbus_dict_helpers.c
OBJS += dbus/dbus_new_helpers.c
OBJS += dbus/dbus_new.c dbus/dbus_new_handlers.c
OBJS += dbus/dbus_common.c
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
ifdef CONFIG_WPS
wpa_supplicant: Drop the old D-Bus interface support This drops support for the fi.epitest.hostap.WPASupplicant D-Bus name along with the associated CONFIG_CTRL_IFACE_DBUS option. Nothing should really be using this since 2010. This is a just a straightforward removal. Perhaps the dbus_common.c and dbus_new.c can be merged now. Also, the "_NEW" suffix of the config option seems to make even less sense than it used to. Signed-off-by: Lubomir Rintel <lkundrak@v3.sk>
2019-02-26 12:04:36 +01:00
OBJS += dbus/dbus_new_handlers_wps.c
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
endif
Android: Fix D-Bus P2P interface location in Android.mk This was supposed to be in the new D-Bus interface block, not in the old one. Signed-hostap: Jouni Malinen <jouni@qca.qualcomm.com>
2011-11-15 17:35:58 +01:00
ifdef CONFIG_P2P
wpa_supplicant: Drop the old D-Bus interface support This drops support for the fi.epitest.hostap.WPASupplicant D-Bus name along with the associated CONFIG_CTRL_IFACE_DBUS option. Nothing should really be using this since 2010. This is a just a straightforward removal. Perhaps the dbus_common.c and dbus_new.c can be merged now. Also, the "_NEW" suffix of the config option seems to make even less sense than it used to. Signed-off-by: Lubomir Rintel <lkundrak@v3.sk>
2019-02-26 12:04:36 +01:00
OBJS += dbus/dbus_new_handlers_p2p.c
Android: Fix D-Bus P2P interface location in Android.mk This was supposed to be in the new D-Bus interface block, not in the old one. Signed-hostap: Jouni Malinen <jouni@qca.qualcomm.com>
2011-11-15 17:35:58 +01:00
endif
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
ifdef CONFIG_CTRL_IFACE_DBUS_INTRO
wpa_supplicant: Drop the old D-Bus interface support This drops support for the fi.epitest.hostap.WPASupplicant D-Bus name along with the associated CONFIG_CTRL_IFACE_DBUS option. Nothing should really be using this since 2010. This is a just a straightforward removal. Perhaps the dbus_common.c and dbus_new.c can be merged now. Also, the "_NEW" suffix of the config option seems to make even less sense than it used to. Signed-off-by: Lubomir Rintel <lkundrak@v3.sk>
2019-02-26 12:04:36 +01:00
OBJS += dbus/dbus_new_introspect.c
L_CFLAGS += -DCONFIG_CTRL_IFACE_DBUS_INTRO
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
endif
wpa_supplicant: Drop the old D-Bus interface support This drops support for the fi.epitest.hostap.WPASupplicant D-Bus name along with the associated CONFIG_CTRL_IFACE_DBUS option. Nothing should really be using this since 2010. This is a just a straightforward removal. Perhaps the dbus_common.c and dbus_new.c can be merged now. Also, the "_NEW" suffix of the config option seems to make even less sense than it used to. Signed-off-by: Lubomir Rintel <lkundrak@v3.sk>
2019-02-26 12:04:36 +01:00
L_CFLAGS += $(DBUS_INCLUDE)
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
endif
binder: Add binder skeletal code for Android Create the skeletal binder interface for wpa_supplicant. The interface hierarchy is based off the existing dbus interface(https://w1.fi/wpa_supplicant/devel/dbus.html). Since we use libbinder, the binder interface codebase needs to be written in C++ and can only be compiled on Android platform for now. The aidl files define binder RPC interfaces. The Android build system generates the corresponding C++ interface classes which needs to be implemented by the server process. The clients can obtain a reference to the binder service (root object) using: android::String16 service_name("fi.w1.wpa_supplicant"); android::sp<android::IBinder> binder = android::defaultServiceManager()->getService(service_name); Once a reference to the root object is retrieved, the clients can obtain references to other RPC objects using that root object methods. Signed-off-by: Roshan Pius <rpius@google.com>
2016-02-17 01:39:28 +01:00
ifdef CONFIG_CTRL_IFACE_BINDER
binder: Expose an aidl interface module Restructure the binder related makefile sections to expose a separate |libwpa_binder_interface| which can be imported by clients/tests. While there, Change the name of the binder service to the name used in the selinux permissions. Signed-off-by: Roshan Pius <rpius@google.com>
2016-07-07 18:48:00 +02:00
WPA_SUPPLICANT_USE_BINDER=y
binder: Add binder skeletal code for Android Create the skeletal binder interface for wpa_supplicant. The interface hierarchy is based off the existing dbus interface(https://w1.fi/wpa_supplicant/devel/dbus.html). Since we use libbinder, the binder interface codebase needs to be written in C++ and can only be compiled on Android platform for now. The aidl files define binder RPC interfaces. The Android build system generates the corresponding C++ interface classes which needs to be implemented by the server process. The clients can obtain a reference to the binder service (root object) using: android::String16 service_name("fi.w1.wpa_supplicant"); android::sp<android::IBinder> binder = android::defaultServiceManager()->getService(service_name); Once a reference to the root object is retrieved, the clients can obtain references to other RPC objects using that root object methods. Signed-off-by: Roshan Pius <rpius@google.com>
2016-02-17 01:39:28 +01:00
L_CFLAGS += -DCONFIG_BINDER -DCONFIG_CTRL_IFACE_BINDER
endif
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
ifdef CONFIG_READLINE
OBJS_c += src/utils/edit_readline.c
LIBS_c += -lncurses -lreadline
else
ifdef CONFIG_WPA_CLI_EDIT
OBJS_c += src/utils/edit.c
else
OBJS_c += src/utils/edit_simple.c
endif
endif
ifdef CONFIG_NATIVE_WINDOWS
L_CFLAGS += -DCONFIG_NATIVE_WINDOWS
LIBS += -lws2_32 -lgdi32 -lcrypt32
LIBS_c += -lws2_32
LIBS_p += -lws2_32 -lgdi32
ifeq ($(CONFIG_CRYPTO), cryptoapi)
LIBS_p += -lcrypt32
endif
endif
ifdef CONFIG_NO_STDOUT_DEBUG
L_CFLAGS += -DCONFIG_NO_STDOUT_DEBUG
ifndef CONFIG_CTRL_IFACE
L_CFLAGS += -DCONFIG_NO_WPA_MSG
endif
endif
ifdef CONFIG_ANDROID_LOG
L_CFLAGS += -DCONFIG_ANDROID_LOG
endif
ifdef CONFIG_IPV6
# for eapol_test only
L_CFLAGS += -DCONFIG_IPV6
endif
ifdef NEED_BASE64
OBJS += src/utils/base64.c
endif
ifdef NEED_SME
OBJS += sme.c
L_CFLAGS += -DCONFIG_SME
endif
OBJS += src/common/ieee802_11_common.c
Introduce common hw features Introduce wpa_supplicant/hostapd hw features. Signed-off-by: Janusz Dziedzic <janusz.dziedzic@tieto.com>
2015-01-08 12:48:29 +01:00
OBJS += src/common/hw_features_common.c
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
ifdef NEED_EAP_COMMON
OBJS += src/eap_common/eap_common.c
endif
ifndef CONFIG_MAIN
CONFIG_MAIN=main
endif
ifdef CONFIG_DEBUG_SYSLOG
L_CFLAGS += -DCONFIG_DEBUG_SYSLOG
Android: Sync Android.mk with recent Makefile changes
2011-10-18 16:15:36 +02:00
ifdef CONFIG_DEBUG_SYSLOG_FACILITY
L_CFLAGS += -DLOG_HOSTAPD="$(CONFIG_DEBUG_SYSLOG_FACILITY)"
endif
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
endif
Android: Update Android.mk based on Makefile changes This brings the Android makefiles a bit closer to the Makefile changes that had been missed in the past. Signed-hostap: Jouni Malinen <j@w1.fi>
2013-03-17 19:08:23 +01:00
ifdef CONFIG_DEBUG_LINUX_TRACING
L_CFLAGS += -DCONFIG_DEBUG_LINUX_TRACING
endif
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
ifdef CONFIG_DEBUG_FILE
L_CFLAGS += -DCONFIG_DEBUG_FILE
endif
ifdef CONFIG_DELAYED_MIC_ERROR_REPORT
L_CFLAGS += -DCONFIG_DELAYED_MIC_ERROR_REPORT
endif
ifdef CONFIG_FIPS
L_CFLAGS += -DCONFIG_FIPS
endif
OBJS += $(SHA1OBJS) $(DESOBJS)
OBJS_p += $(SHA1OBJS)
Android: Update Android.mk based on Makefile changes This brings the Android makefiles a bit closer to the Makefile changes that had been missed in the past. Signed-hostap: Jouni Malinen <j@w1.fi>
2013-03-17 19:08:23 +01:00
OBJS_p += $(SHA256OBJS)
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
ifdef CONFIG_BGSCAN_SIMPLE
L_CFLAGS += -DCONFIG_BGSCAN_SIMPLE
OBJS += bgscan_simple.c
NEED_BGSCAN=y
endif
ifdef CONFIG_BGSCAN_LEARN
L_CFLAGS += -DCONFIG_BGSCAN_LEARN
OBJS += bgscan_learn.c
NEED_BGSCAN=y
endif
ifdef NEED_BGSCAN
L_CFLAGS += -DCONFIG_BGSCAN
OBJS += bgscan.c
endif
Add autoscan module named exponential This module will compute the interval on a base exponential. Thus, params to this module are following this format: <base>:<limit> Signed-hostap: Tomasz Bursztyka <tomasz.bursztyka@linux.intel.com>
2012-06-26 18:22:56 +02:00
ifdef CONFIG_AUTOSCAN_EXPONENTIAL
L_CFLAGS += -DCONFIG_AUTOSCAN_EXPONENTIAL
OBJS += autoscan_exponential.c
NEED_AUTOSCAN=y
endif
Add a simple periodic autoscan module This module will sets a fixed scanning interval. Thus, the parameter to this module is following this format: <fixed interval> Signed-hostap: Tomasz Bursztyka <tomasz.bursztyka@linux.intel.com>
2012-06-26 18:28:21 +02:00
ifdef CONFIG_AUTOSCAN_PERIODIC
Android: Fix CFLAGS -> L_CFLAGS Signed-off-by: Dmitry Shmidt <dimitrysh@google.com>
2013-11-06 01:45:35 +01:00
L_CFLAGS += -DCONFIG_AUTOSCAN_PERIODIC
Add a simple periodic autoscan module This module will sets a fixed scanning interval. Thus, the parameter to this module is following this format: <fixed interval> Signed-hostap: Tomasz Bursztyka <tomasz.bursztyka@linux.intel.com>
2012-06-26 18:28:21 +02:00
OBJS += autoscan_periodic.c
NEED_AUTOSCAN=y
endif
Add automatic scanning support Like bgscan, autoscan is an optional module based feature to automate scanning but while disconnected or inactive. Instead of requesting directly a scan, it only sets the scan_interval and the sched_scan_interval. So, if the driver supports sched_scan, autoscan will be able to tweak its interval. Otherwise, the tweaked scan_interval will be used. If scan parameters needs to be tweaked, an autoscan_params pointer in wpa_s will provide those. So req_scan / req_sched_scan will not set the scan parameters as they usually do, but instead will use this pointer. Modules will not have to request a scan directly, like bgscan does. Instead, it will need to return the interval it wants after each notification. Signed-hostap: Tomasz Bursztyka <tomasz.bursztyka@linux.intel.com>
2012-06-26 17:55:41 +02:00
ifdef NEED_AUTOSCAN
L_CFLAGS += -DCONFIG_AUTOSCAN
OBJS += autoscan.c
endif
EXT PW: Add framework for supporting external password storage This new mechanism can be used to make wpa_supplicant using external storage (e.g., key store in the operating system) for passwords, passphrases, and PSKs. This commit is only adding the framework part needed to support this, i.e., no actual configuration parameter can yet use this new mechanism. In addition, only a simple test backend is added to allow developer testing of the functionality. Signed-hostap: Jouni Malinen <j@w1.fi>
2012-08-03 20:28:42 +02:00
ifdef CONFIG_EXT_PASSWORD_TEST
Android: Update Android.mk based on Makefile changes This brings the Android makefiles a bit closer to the Makefile changes that had been missed in the past. Signed-hostap: Jouni Malinen <j@w1.fi>
2013-03-17 19:08:23 +01:00
OBJS += src/utils/ext_password_test.c
EXT PW: Add framework for supporting external password storage This new mechanism can be used to make wpa_supplicant using external storage (e.g., key store in the operating system) for passwords, passphrases, and PSKs. This commit is only adding the framework part needed to support this, i.e., no actual configuration parameter can yet use this new mechanism. In addition, only a simple test backend is added to allow developer testing of the functionality. Signed-hostap: Jouni Malinen <j@w1.fi>
2012-08-03 20:28:42 +02:00
L_CFLAGS += -DCONFIG_EXT_PASSWORD_TEST
NEED_EXT_PASSWORD=y
ext_password: Implement new file-based backend It was not easily possible to separate configuration of an interface and credentials when using the configuration file instead of the control interface or D-Bus interface for setting up the network profiles. This makes it hard to distribute configuration across a set of nodes which use wpa_supplicant without also having to store credentials in the same file. While this can be solved via scripting, having a native way to achieve this would be preferable. Turns out there already is a framework to have external password storages. It only had a single "test" backend though, which is kind of an in-memory store which gets initialized with all passwords up front and is mainly for testing purposes. This isn't really suitable for the above use case: the backend cannot be initialized as part of the central configuration given that it needs the credentials, and we want to avoid scripting. This commit thus extends the infrastructure to implement a new backend, which instead uses a simple configuration file containing key-value pairs. The file follows the format which wpa_supplicant.conf(5) uses: empty lines and comments are ignored, while passwords can be specified with simple `password-name=password-value` assignments. With this new backend, splitting up credentials and configuration becomes trivial: # /etc/wpa_supplicant/wpa_supplicant.conf ext_password_backend=file:/etc/wpa_supplicant/psk.conf network={ ssid="foobar" psk=ext:foobar } # /etc/wpa_supplicant/psk.conf foobar=ecdabff9c80632ec6fcffc4a8875e95d45cf93376d3b99da6881298853dc686b Alternative approaches would be to support including other configuration files in the main configuration, such that common configuration and network declarations including credentials are split up into separate files. But the implementation would probably have been more complex compared to reusing the already-existing framework for external password backends. Signed-off-by: Patrick Steinhardt <ps@pks.im>
2021-02-14 12:16:33 +01:00
endif
ifdef CONFIG_EXT_PASSWORD_FILE
OBJS += src/utils/ext_password_file.c
L_CFLAGS += -DCONFIG_EXT_PASSWORD_FILE
NEED_EXT_PASSWORD=y
EXT PW: Add framework for supporting external password storage This new mechanism can be used to make wpa_supplicant using external storage (e.g., key store in the operating system) for passwords, passphrases, and PSKs. This commit is only adding the framework part needed to support this, i.e., no actual configuration parameter can yet use this new mechanism. In addition, only a simple test backend is added to allow developer testing of the functionality. Signed-hostap: Jouni Malinen <j@w1.fi>
2012-08-03 20:28:42 +02:00
endif
ifdef NEED_EXT_PASSWORD
Android: Update Android.mk based on Makefile changes This brings the Android makefiles a bit closer to the Makefile changes that had been missed in the past. Signed-hostap: Jouni Malinen <j@w1.fi>
2013-03-17 19:08:23 +01:00
OBJS += src/utils/ext_password.c
EXT PW: Add framework for supporting external password storage This new mechanism can be used to make wpa_supplicant using external storage (e.g., key store in the operating system) for passwords, passphrases, and PSKs. This commit is only adding the framework part needed to support this, i.e., no actual configuration parameter can yet use this new mechanism. In addition, only a simple test backend is added to allow developer testing of the functionality. Signed-hostap: Jouni Malinen <j@w1.fi>
2012-08-03 20:28:42 +02:00
L_CFLAGS += -DCONFIG_EXT_PASSWORD
endif
DPP: Configuration exchange This adds support for DPP Configuration Protocol using GAS. Full generation and processing of the configuration object is not included in this commit. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2017-06-15 20:18:15 +02:00
ifdef NEED_GAS_SERVER
OBJS += src/common/gas_server.c
L_CFLAGS += -DCONFIG_GAS_SERVER
NEED_GAS=y
endif
Android: Sync Android.mk with recent Makefile changes
2011-10-18 16:15:36 +02:00
ifdef NEED_GAS
Android: Update Android.mk based on Makefile changes This brings the Android makefiles a bit closer to the Makefile changes that had been missed in the past. Signed-hostap: Jouni Malinen <j@w1.fi>
2013-03-17 19:08:23 +01:00
OBJS += src/common/gas.c
Android: Sync Android.mk with recent Makefile changes
2011-10-18 16:15:36 +02:00
OBJS += gas_query.c
L_CFLAGS += -DCONFIG_GAS
NEED_OFFCHANNEL=y
endif
ifdef NEED_OFFCHANNEL
OBJS += offchannel.c
L_CFLAGS += -DCONFIG_OFFCHANNEL
endif
Add JavaScript Object Notation (JSON) parser (RFC7159) This is needed for DPP configuration attributes/objects. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2017-06-15 20:18:00 +02:00
ifdef NEED_JSON
OBJS += src/utils/json.c
L_CFLAGS += -DCONFIG_JSON
endif
Move wpa_scan_results_free() into shared C file Replace the inline helper function with a new C file that can be used for common driver API related function. Signed-hostap: Jouni Malinen <j@w1.fi>
2011-11-13 17:56:26 +01:00
OBJS += src/drivers/driver_common.c
Rename blacklist.[ch] to bssid_ignore.[ch] This completes renaming of this functionality for a list of temporarily ignored BSSIDs. Signed-off-by: Jouni Malinen <j@w1.fi>
2021-02-07 16:06:19 +01:00
OBJS += wpa_supplicant.c events.c bssid_ignore.c wpas_glue.c scan.c
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
OBJS_t := $(OBJS) $(OBJS_l2) eapol_test.c
OBJS_t += src/radius/radius_client.c
OBJS_t += src/radius/radius.c
OBJS_t2 := $(OBJS) $(OBJS_l2) preauth_test.c
OBJS += $(CONFIG_MAIN).c
ifdef CONFIG_PRIVSEP
OBJS_priv += $(OBJS_d) src/drivers/drivers.c
OBJS_priv += $(OBJS_l2)
OBJS_priv += src/utils/os_$(CONFIG_OS).c
OBJS_priv += src/utils/$(CONFIG_ELOOP).c
OBJS_priv += src/utils/common.c
OBJS_priv += src/utils/wpa_debug.c
OBJS_priv += src/utils/wpabuf.c
OBJS_priv += wpa_priv.c
Android: Update Android.mk based on Makefile changes This brings the Android makefiles a bit closer to the Makefile changes that had been missed in the past. Signed-hostap: Jouni Malinen <j@w1.fi>
2013-03-17 19:08:23 +01:00
ifdef CONFIG_DRIVER_NL80211
OBJS_priv += src/common/ieee802_11_common.c
endif
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
OBJS += src/l2_packet/l2_packet_privsep.c
OBJS += src/drivers/driver_privsep.c
EXTRA_progs += wpa_priv
else
OBJS += $(OBJS_d) src/drivers/drivers.c
OBJS += $(OBJS_l2)
endif
ifdef CONFIG_NDIS_EVENTS_INTEGRATED
L_CFLAGS += -DCONFIG_NDIS_EVENTS_INTEGRATED
OBJS += src/drivers/ndis_events.c
EXTRALIBS += -loleaut32 -lole32 -luuid
ifdef PLATFORMSDKLIB
EXTRALIBS += $(PLATFORMSDKLIB)/WbemUuid.Lib
else
EXTRALIBS += WbemUuid.Lib
endif
endif
ifndef LDO
LDO=$(CC)
endif
########################
include $(CLEAR_VARS)
LOCAL_MODULE := wpa_cli
LOCAL_MODULE_TAGS := debug
Android: Add liblog Signed-off-by: Dmitry Shmidt <dimitrysh@google.com>
2013-11-08 00:09:36 +01:00
LOCAL_SHARED_LIBRARIES := libc libcutils liblog
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
LOCAL_CFLAGS := $(L_CFLAGS)
LOCAL_SRC_FILES := $(OBJS_c)
LOCAL_C_INCLUDES := $(INCLUDES)
include $(BUILD_EXECUTABLE)
########################
include $(CLEAR_VARS)
LOCAL_MODULE := wpa_supplicant
ifdef CONFIG_DRIVER_CUSTOM
LOCAL_STATIC_LIBRARIES := libCustomWifi
endif
ifneq ($(BOARD_WPA_SUPPLICANT_PRIVATE_LIB),)
LOCAL_STATIC_LIBRARIES += $(BOARD_WPA_SUPPLICANT_PRIVATE_LIB)
endif
Android: Add liblog Signed-off-by: Dmitry Shmidt <dimitrysh@google.com>
2013-11-08 00:09:36 +01:00
LOCAL_SHARED_LIBRARIES := libc libcutils liblog
eap_proxy: Extend Android.mk to support additional libraries Allow addition static and shared libraries to be specified from the eap_proxy_*.mk file for Android build. In addition use $(LOCAL_PATH) as a prefix for that Android makefile part. Signed-hostap: Jouni Malinen <jouni@qca.qualcomm.com>
2013-12-03 07:37:24 +01:00
ifdef CONFIG_EAP_PROXY
LOCAL_STATIC_LIBRARIES += $(LIB_STATIC_EAP_PROXY)
LOCAL_SHARED_LIBRARIES += $(LIB_SHARED_EAP_PROXY)
endif
Android: Include libcrypto and libssl only if CONFIG_TLS=openssl
2011-09-02 15:16:22 +02:00
ifeq ($(CONFIG_TLS), openssl)
Android: Switch keystore to binder Signed-off-by: Dmitry Shmidt <dimitrysh@google.com>
2013-11-08 00:06:59 +01:00
LOCAL_SHARED_LIBRARIES += libcrypto libssl libkeystore_binder
Android: Include libcrypto and libssl only if CONFIG_TLS=openssl
2011-09-02 15:16:22 +02:00
endif
Android: Fix keystore-backed keys with BoringSSL The switch to BoringSSL broke keystore-backed keys because wpa_supplicant was using the dynamic ENGINE loading to load the keystore module. The ENGINE-like functionality in BoringSSL is much simpler and this change should enable it. Signed-off-by: Dmitry Shmidt <dimitrysh@google.com>
2015-10-06 20:05:53 +02:00
# With BoringSSL we need libkeystore-engine in order to provide access to
# keystore keys.
LOCAL_SHARED_LIBRARIES += libkeystore-engine
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
ifdef CONFIG_DRIVER_NL80211
Android: Use external libnl 2.0 dynamic library Signed-off-by: Dmitry Shmidt <dimitrysh@google.com>
2014-02-19 01:26:10 +01:00
ifneq ($(wildcard external/libnl),)
LOCAL_SHARED_LIBRARIES += libnl
else
Android: Update libnl use to match with Android ICS The libnl_2 library uses static linking and different path for header files in the Android ICS release. Signed-hostap: Jouni Malinen <jouni@qca.qualcomm.com>
2011-11-15 17:37:10 +01:00
LOCAL_STATIC_LIBRARIES += libnl_2
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
endif
Android: Use external libnl 2.0 dynamic library Signed-off-by: Dmitry Shmidt <dimitrysh@google.com>
2014-02-19 01:26:10 +01:00
endif
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
LOCAL_CFLAGS := $(L_CFLAGS)
LOCAL_SRC_FILES := $(OBJS)
LOCAL_C_INCLUDES := $(INCLUDES)
Android: Use libdbus rather than dbus-1 The upstream wpa_supplicant uses the dbus-1 library when it is compiled with D-Bus support. In Android, we imported the D-Bus shared libraries under the name "libdbus", so use this shared library instead of dbus-1 when compiling wpa_supplicant with D-Bus support. Signed-off-by: Samuel Tan <samueltan@google.com>
2015-11-05 19:48:48 +01:00
ifeq ($(DBUS), y)
LOCAL_SHARED_LIBRARIES += libdbus
endif
binder: Expose an aidl interface module Restructure the binder related makefile sections to expose a separate |libwpa_binder_interface| which can be imported by clients/tests. While there, Change the name of the binder service to the name used in the selinux permissions. Signed-off-by: Roshan Pius <rpius@google.com>
2016-07-07 18:48:00 +02:00
ifeq ($(WPA_SUPPLICANT_USE_BINDER), y)
LOCAL_SHARED_LIBRARIES += libbinder libutils
LOCAL_STATIC_LIBRARIES += libwpa_binder libwpa_binder_interface
binder: Add binder skeletal code for Android Create the skeletal binder interface for wpa_supplicant. The interface hierarchy is based off the existing dbus interface(https://w1.fi/wpa_supplicant/devel/dbus.html). Since we use libbinder, the binder interface codebase needs to be written in C++ and can only be compiled on Android platform for now. The aidl files define binder RPC interfaces. The Android build system generates the corresponding C++ interface classes which needs to be implemented by the server process. The clients can obtain a reference to the binder service (root object) using: android::String16 service_name("fi.w1.wpa_supplicant"); android::sp<android::IBinder> binder = android::defaultServiceManager()->getService(service_name); Once a reference to the root object is retrieved, the clients can obtain references to other RPC objects using that root object methods. Signed-off-by: Roshan Pius <rpius@google.com>
2016-02-17 01:39:28 +01:00
endif
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
include $(BUILD_EXECUTABLE)
########################
#
#include $(CLEAR_VARS)
#LOCAL_MODULE := eapol_test
#ifdef CONFIG_DRIVER_CUSTOM
#LOCAL_STATIC_LIBRARIES := libCustomWifi
#endif
#LOCAL_SHARED_LIBRARIES := libc libcrypto libssl
#LOCAL_CFLAGS := $(L_CFLAGS)
#LOCAL_SRC_FILES := $(OBJS_t)
#LOCAL_C_INCLUDES := $(INCLUDES)
#include $(BUILD_EXECUTABLE)
#
########################
#
#local_target_dir := $(TARGET_OUT)/etc/wifi
#
#include $(CLEAR_VARS)
#LOCAL_MODULE := wpa_supplicant.conf
#LOCAL_MODULE_CLASS := ETC
#LOCAL_MODULE_PATH := $(local_target_dir)
#LOCAL_SRC_FILES := $(LOCAL_MODULE)
#include $(BUILD_PREBUILT)
#
########################
include $(CLEAR_VARS)
LOCAL_MODULE = libwpa_client
LOCAL_CFLAGS = $(L_CFLAGS)
LOCAL_SRC_FILES = src/common/wpa_ctrl.c src/utils/os_$(CONFIG_OS).c
LOCAL_C_INCLUDES = $(INCLUDES)
Android: Add liblog Signed-off-by: Dmitry Shmidt <dimitrysh@google.com>
2013-11-08 00:09:36 +01:00
LOCAL_SHARED_LIBRARIES := libcutils liblog
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
LOCAL_COPY_HEADERS_TO := libwpa_client
LOCAL_COPY_HEADERS := src/common/wpa_ctrl.h
Android: Add qca-vendor.h to be exported Add qca-vendor.h along with wpa_ctrl.h to be exported to common staged location. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2014-04-04 22:40:58 +02:00
LOCAL_COPY_HEADERS += src/common/qca-vendor.h
Add Android make files for hostapd and wpa_supplicant
2011-02-27 18:19:43 +01:00
include $(BUILD_SHARED_LIBRARY)
binder: Expose an aidl interface module Restructure the binder related makefile sections to expose a separate |libwpa_binder_interface| which can be imported by clients/tests. While there, Change the name of the binder service to the name used in the selinux permissions. Signed-off-by: Roshan Pius <rpius@google.com>
2016-07-07 18:48:00 +02:00
ifeq ($(WPA_SUPPLICANT_USE_BINDER), y)
### Binder interface library ###
########################
include $(CLEAR_VARS)
LOCAL_MODULE := libwpa_binder_interface
LOCAL_AIDL_INCLUDES := \
$(LOCAL_PATH)/binder \
frameworks/native/aidl/binder
LOCAL_EXPORT_C_INCLUDE_DIRS := \
$(LOCAL_PATH)/binder
LOCAL_CPPFLAGS := $(L_CPPFLAGS)
LOCAL_SRC_FILES := \
binder/binder_constants.cpp \
binder/fi/w1/wpa_supplicant/ISupplicant.aidl \
binder/fi/w1/wpa_supplicant/ISupplicantCallbacks.aidl \
binder/fi/w1/wpa_supplicant/IIface.aidl
LOCAL_SHARED_LIBRARIES := libbinder
include $(BUILD_STATIC_LIBRARY)
### Binder service library ###
########################
include $(CLEAR_VARS)
LOCAL_MODULE := libwpa_binder
LOCAL_CPPFLAGS := $(L_CPPFLAGS)
LOCAL_CFLAGS := $(L_CFLAGS)
LOCAL_C_INCLUDES := $(INCLUDES)
LOCAL_SRC_FILES := \
binder/binder.cpp binder/binder_manager.cpp \
binder/supplicant.cpp binder/iface.cpp
LOCAL_SHARED_LIBRARIES := \
libbinder \
libutils
LOCAL_STATIC_LIBRARIES := libwpa_binder_interface
include $(BUILD_STATIC_LIBRARY)
endif # BINDER == y
Reference in a new issue Copy permalink