2014-04-23 14:25:56 +02:00
|
|
|
Index: hostapd-2.1/hostapd/defconfig
|
|
|
|
===================================================================
|
|
|
|
--- hostapd-2.1.orig/hostapd/defconfig
|
|
|
|
+++ hostapd-2.1/hostapd/defconfig
|
|
|
|
@@ -43,7 +43,7 @@ CONFIG_DRIVER_NL80211=y
|
2013-04-17 11:44:46 +02:00
|
|
|
#LIBS_c += -L/usr/local/lib
|
|
|
|
|
|
|
|
# Driver interface for no driver (e.g., RADIUS server only)
|
|
|
|
-#CONFIG_DRIVER_NONE=y
|
|
|
|
+CONFIG_DRIVER_NONE=y
|
|
|
|
|
|
|
|
# IEEE 802.11F/IAPP
|
|
|
|
CONFIG_IAPP=y
|
2014-04-23 14:25:56 +02:00
|
|
|
@@ -58,7 +58,7 @@ CONFIG_PEERKEY=y
|
2013-04-17 11:44:46 +02:00
|
|
|
# This version is an experimental implementation based on IEEE 802.11w/D1.0
|
|
|
|
# draft and is subject to change since the standard has not yet been finalized.
|
|
|
|
# Driver support is also needed for IEEE 802.11w.
|
|
|
|
-#CONFIG_IEEE80211W=y
|
|
|
|
+CONFIG_IEEE80211W=y
|
|
|
|
|
|
|
|
# Integrated EAP server
|
|
|
|
CONFIG_EAP=y
|
2014-04-23 14:25:56 +02:00
|
|
|
@@ -82,52 +82,52 @@ CONFIG_EAP_GTC=y
|
2013-04-17 11:44:46 +02:00
|
|
|
CONFIG_EAP_TTLS=y
|
|
|
|
|
|
|
|
# EAP-SIM for the integrated EAP server
|
|
|
|
-#CONFIG_EAP_SIM=y
|
|
|
|
+CONFIG_EAP_SIM=y
|
|
|
|
|
|
|
|
# EAP-AKA for the integrated EAP server
|
|
|
|
-#CONFIG_EAP_AKA=y
|
|
|
|
+CONFIG_EAP_AKA=y
|
|
|
|
|
|
|
|
# EAP-AKA' for the integrated EAP server
|
|
|
|
# This requires CONFIG_EAP_AKA to be enabled, too.
|
|
|
|
-#CONFIG_EAP_AKA_PRIME=y
|
|
|
|
+CONFIG_EAP_AKA_PRIME=y
|
|
|
|
|
|
|
|
# EAP-PAX for the integrated EAP server
|
|
|
|
-#CONFIG_EAP_PAX=y
|
|
|
|
+CONFIG_EAP_PAX=y
|
|
|
|
|
|
|
|
# EAP-PSK for the integrated EAP server (this is _not_ needed for WPA-PSK)
|
|
|
|
-#CONFIG_EAP_PSK=y
|
|
|
|
+CONFIG_EAP_PSK=y
|
|
|
|
|
|
|
|
# EAP-pwd for the integrated EAP server (secure authentication with a password)
|
|
|
|
-#CONFIG_EAP_PWD=y
|
|
|
|
+CONFIG_EAP_PWD=y
|
|
|
|
|
|
|
|
# EAP-SAKE for the integrated EAP server
|
|
|
|
-#CONFIG_EAP_SAKE=y
|
|
|
|
+CONFIG_EAP_SAKE=y
|
|
|
|
|
|
|
|
# EAP-GPSK for the integrated EAP server
|
|
|
|
-#CONFIG_EAP_GPSK=y
|
|
|
|
+CONFIG_EAP_GPSK=y
|
|
|
|
# Include support for optional SHA256 cipher suite in EAP-GPSK
|
|
|
|
-#CONFIG_EAP_GPSK_SHA256=y
|
|
|
|
+CONFIG_EAP_GPSK_SHA256=y
|
|
|
|
|
|
|
|
# EAP-FAST for the integrated EAP server
|
2014-04-23 14:25:56 +02:00
|
|
|
# Note: If OpenSSL is used as the TLS library, OpenSSL 1.0 or newer is needed
|
|
|
|
# for EAP-FAST support. Older OpenSSL releases would need to be patched, e.g.,
|
|
|
|
# with openssl-0.9.8x-tls-extensions.patch, to add the needed functions.
|
2013-04-17 11:44:46 +02:00
|
|
|
-#CONFIG_EAP_FAST=y
|
|
|
|
+CONFIG_EAP_FAST=y
|
|
|
|
|
|
|
|
# Wi-Fi Protected Setup (WPS)
|
|
|
|
-#CONFIG_WPS=y
|
|
|
|
+CONFIG_WPS=y
|
|
|
|
# Enable WSC 2.0 support
|
|
|
|
-#CONFIG_WPS2=y
|
|
|
|
+CONFIG_WPS2=y
|
|
|
|
# Enable UPnP support for external WPS Registrars
|
|
|
|
-#CONFIG_WPS_UPNP=y
|
|
|
|
+CONFIG_WPS_UPNP=y
|
|
|
|
# Enable WPS support with NFC config method
|
|
|
|
-#CONFIG_WPS_NFC=y
|
|
|
|
+CONFIG_WPS_NFC=y
|
|
|
|
|
|
|
|
# EAP-IKEv2
|
|
|
|
-#CONFIG_EAP_IKEV2=y
|
|
|
|
+CONFIG_EAP_IKEV2=y
|
|
|
|
|
|
|
|
# Trusted Network Connect (EAP-TNC)
|
|
|
|
-#CONFIG_EAP_TNC=y
|
|
|
|
+CONFIG_EAP_TNC=y
|
|
|
|
|
2014-04-23 14:25:56 +02:00
|
|
|
# EAP-EKE for the integrated EAP server
|
|
|
|
#CONFIG_EAP_EKE=y
|
|
|
|
@@ -138,27 +138,27 @@ CONFIG_PKCS12=y
|
2013-04-17 11:44:46 +02:00
|
|
|
|
|
|
|
# RADIUS authentication server. This provides access to the integrated EAP
|
|
|
|
# server from external hosts using RADIUS.
|
|
|
|
-#CONFIG_RADIUS_SERVER=y
|
|
|
|
+CONFIG_RADIUS_SERVER=y
|
|
|
|
|
|
|
|
# Build IPv6 support for RADIUS operations
|
|
|
|
CONFIG_IPV6=y
|
|
|
|
|
|
|
|
# IEEE Std 802.11r-2008 (Fast BSS Transition)
|
|
|
|
-#CONFIG_IEEE80211R=y
|
|
|
|
+CONFIG_IEEE80211R=y
|
|
|
|
|
|
|
|
# Use the hostapd's IEEE 802.11 authentication (ACL), but without
|
|
|
|
# the IEEE 802.11 Management capability (e.g., madwifi or FreeBSD/net80211)
|
|
|
|
-#CONFIG_DRIVER_RADIUS_ACL=y
|
|
|
|
+CONFIG_DRIVER_RADIUS_ACL=y
|
|
|
|
|
|
|
|
# IEEE 802.11n (High Throughput) support
|
|
|
|
-#CONFIG_IEEE80211N=y
|
|
|
|
+CONFIG_IEEE80211N=y
|
|
|
|
|
|
|
|
# Wireless Network Management (IEEE Std 802.11v-2011)
|
|
|
|
# Note: This is experimental and not complete implementation.
|
|
|
|
-#CONFIG_WNM=y
|
|
|
|
+CONFIG_WNM=y
|
|
|
|
|
|
|
|
# IEEE 802.11ac (Very High Throughput) support
|
|
|
|
-#CONFIG_IEEE80211AC=y
|
|
|
|
+CONFIG_IEEE80211AC=y
|
|
|
|
|
|
|
|
# Remove debugging code that is printing out debug messages to stdout.
|
|
|
|
# This can be used to reduce the size of the hostapd considerably if debugging
|
2014-04-23 14:25:56 +02:00
|
|
|
@@ -186,7 +186,7 @@ CONFIG_IPV6=y
|
2013-04-17 11:44:46 +02:00
|
|
|
|
|
|
|
# Enable support for fully dynamic VLANs. This enables hostapd to
|
|
|
|
# automatically create bridge and VLAN interfaces if necessary.
|
|
|
|
-#CONFIG_FULL_DYNAMIC_VLAN=y
|
|
|
|
+CONFIG_FULL_DYNAMIC_VLAN=y
|
|
|
|
|
|
|
|
# Use netlink-based kernel API for VLAN operations instead of ioctl()
|
|
|
|
# Note: This requires libnl 3.1 or newer.
|
2014-04-23 14:25:56 +02:00
|
|
|
@@ -256,11 +256,11 @@ CONFIG_IPV6=y
|
2013-04-17 11:44:46 +02:00
|
|
|
# TLS-based EAP methods require at least TLS v1.0. Newer version of TLS (v1.1)
|
|
|
|
# can be enabled to get a stronger construction of messages when block ciphers
|
|
|
|
# are used.
|
|
|
|
-#CONFIG_TLSV11=y
|
|
|
|
+CONFIG_TLSV11=y
|
|
|
|
|
|
|
|
# TLS-based EAP methods require at least TLS v1.0. Newer version of TLS (v1.2)
|
|
|
|
# can be enabled to enable use of stronger crypto algorithms.
|
|
|
|
-#CONFIG_TLSV12=y
|
|
|
|
+CONFIG_TLSV12=y
|
|
|
|
|
|
|
|
# If CONFIG_TLS=internal is used, additional library and include paths are
|
|
|
|
# needed for LibTomMath. Alternatively, an integrated, minimal version of
|
2014-04-23 14:25:56 +02:00
|
|
|
@@ -281,13 +281,13 @@ CONFIG_IPV6=y
|
2013-04-17 11:44:46 +02:00
|
|
|
# Interworking (IEEE 802.11u)
|
|
|
|
# This can be used to enable functionality to improve interworking with
|
|
|
|
# external networks.
|
|
|
|
-#CONFIG_INTERWORKING=y
|
|
|
|
+CONFIG_INTERWORKING=y
|
|
|
|
|
|
|
|
# Hotspot 2.0
|
|
|
|
-#CONFIG_HS20=y
|
|
|
|
+CONFIG_HS20=y
|
|
|
|
|
|
|
|
# Enable SQLite database support in hlr_auc_gw, EAP-SIM DB, and eap_user_file
|
|
|
|
-#CONFIG_SQLITE=y
|
|
|
|
+CONFIG_SQLITE=y
|
2014-04-23 14:25:56 +02:00
|
|
|
|
|
|
|
# Testing options
|
|
|
|
# This can be used to enable some testing options (see also the example
|