]> rtime.felk.cvut.cz Git - coffee/buildroot.git/blob - package/wpa_supplicant/wpa_supplicant.mk
wpa_supplicant: add upstream security fixes
[coffee/buildroot.git] / package / wpa_supplicant / wpa_supplicant.mk
1 ################################################################################
2 #
3 # wpa_supplicant
4 #
5 ################################################################################
6
7 WPA_SUPPLICANT_VERSION = 2.6
8 WPA_SUPPLICANT_SITE = http://hostap.epitest.fi/releases
9 WPA_SUPPLICANT_PATCH = \
10         http://w1.fi/security/2017-1/rebased-v2.6-0001-hostapd-Avoid-key-reinstallation-in-FT-handshake.patch \
11         http://w1.fi/security/2017-1/rebased-v2.6-0002-Prevent-reinstallation-of-an-already-in-use-group-ke.patch \
12         http://w1.fi/security/2017-1/rebased-v2.6-0003-Extend-protection-of-GTK-IGTK-reinstallation-of-WNM-.patch \
13         http://w1.fi/security/2017-1/rebased-v2.6-0004-Prevent-installation-of-an-all-zero-TK.patch \
14         http://w1.fi/security/2017-1/rebased-v2.6-0006-TDLS-Reject-TPK-TK-reconfiguration.patch \
15         http://w1.fi/security/2017-1/rebased-v2.6-0007-WNM-Ignore-WNM-Sleep-Mode-Response-without-pending-r.patch \
16         http://w1.fi/security/2017-1/rebased-v2.6-0008-FT-Do-not-allow-multiple-Reassociation-Response-fram.patch
17 WPA_SUPPLICANT_LICENSE = BSD-3-Clause
18 WPA_SUPPLICANT_LICENSE_FILES = README
19 WPA_SUPPLICANT_CONFIG = $(WPA_SUPPLICANT_DIR)/wpa_supplicant/.config
20 WPA_SUPPLICANT_SUBDIR = wpa_supplicant
21 WPA_SUPPLICANT_DBUS_OLD_SERVICE = fi.epitest.hostap.WPASupplicant
22 WPA_SUPPLICANT_DBUS_NEW_SERVICE = fi.w1.wpa_supplicant1
23 WPA_SUPPLICANT_CFLAGS = $(TARGET_CFLAGS) -I$(STAGING_DIR)/usr/include/libnl3/
24 WPA_SUPPLICANT_LDFLAGS = $(TARGET_LDFLAGS)
25
26 # install the wpa_client library
27 WPA_SUPPLICANT_INSTALL_STAGING = YES
28
29 WPA_SUPPLICANT_CONFIG_EDITS =
30
31 # Add support for simple background scan
32 WPA_SUPPLICANT_CONFIG_SET = CONFIG_BGSCAN_SIMPLE
33
34 WPA_SUPPLICANT_CONFIG_ENABLE = \
35         CONFIG_IEEE80211AC \
36         CONFIG_IEEE80211N \
37         CONFIG_IEEE80211R \
38         CONFIG_INTERNAL_LIBTOMMATH \
39         CONFIG_DEBUG_FILE \
40         CONFIG_MATCH_IFACE
41
42 WPA_SUPPLICANT_CONFIG_DISABLE = \
43         CONFIG_SMARTCARD
44
45 # libnl-3 needs -lm (for rint) and -lpthread if linking statically
46 # And library order matters hence stick -lnl-3 first since it's appended
47 # in the wpa_supplicant Makefiles as in LIBS+=-lnl-3 ... thus failing
48 ifeq ($(BR2_PACKAGE_WPA_SUPPLICANT_NL80211),y)
49 ifeq ($(BR2_STATIC_LIBS),y)
50 WPA_SUPPLICANT_LIBS += -lnl-3 -lm -lpthread
51 endif
52 WPA_SUPPLICANT_DEPENDENCIES += host-pkgconf libnl
53 WPA_SUPPLICANT_CONFIG_ENABLE += CONFIG_LIBNL32
54 else
55 WPA_SUPPLICANT_CONFIG_DISABLE += CONFIG_DRIVER_NL80211
56 endif
57
58 # Trailing underscore on purpose to not enable CONFIG_EAPOL_TEST
59 ifeq ($(BR2_PACKAGE_WPA_SUPPLICANT_EAP),y)
60 WPA_SUPPLICANT_CONFIG_ENABLE += CONFIG_EAP_
61 # uses dlopen()
62 ifeq ($(BR2_STATIC_LIBS),y)
63 WPA_SUPPLICANT_CONFIG_DISABLE += CONFIG_EAP_TNC
64 endif
65 else
66 WPA_SUPPLICANT_CONFIG_DISABLE += CONFIG_EAP
67 endif
68
69 ifeq ($(BR2_PACKAGE_WPA_SUPPLICANT_HOTSPOT),y)
70 WPA_SUPPLICANT_CONFIG_ENABLE += CONFIG_HS20 \
71         CONFIG_INTERWORKING
72 endif
73
74 ifeq ($(BR2_PACKAGE_WPA_SUPPLICANT_AP_SUPPORT),y)
75 WPA_SUPPLICANT_CONFIG_ENABLE += \
76         CONFIG_AP \
77         CONFIG_P2P
78 endif
79
80 ifeq ($(BR2_PACKAGE_WPA_SUPPLICANT_WIFI_DISPLAY),y)
81 WPA_SUPPLICANT_CONFIG_ENABLE += CONFIG_WIFI_DISPLAY
82 endif
83
84 ifeq ($(BR2_PACKAGE_WPA_SUPPLICANT_MESH_NETWORKING),y)
85 WPA_SUPPLICANT_CONFIG_SET += CONFIG_MESH
86 WPA_SUPPLICANT_CONFIG_ENABLE += CONFIG_IEEE80211W
87 endif
88
89 ifeq ($(BR2_PACKAGE_WPA_SUPPLICANT_AUTOSCAN),y)
90 WPA_SUPPLICANT_CONFIG_ENABLE += \
91         CONFIG_AUTOSCAN_EXPONENTIAL \
92         CONFIG_AUTOSCAN_PERIODIC
93 endif
94
95 ifeq ($(BR2_PACKAGE_WPA_SUPPLICANT_WPS),y)
96 WPA_SUPPLICANT_CONFIG_ENABLE += CONFIG_WPS
97 endif
98
99 # Try to use openssl if it's already available
100 ifeq ($(BR2_PACKAGE_OPENSSL),y)
101 WPA_SUPPLICANT_DEPENDENCIES += openssl
102 WPA_SUPPLICANT_LIBS += $(if $(BR2_STATIC_LIBS),-lcrypto -lz)
103 WPA_SUPPLICANT_CONFIG_EDITS += 's/\#\(CONFIG_TLS=openssl\)/\1/'
104 else
105 WPA_SUPPLICANT_CONFIG_DISABLE += CONFIG_EAP_PWD
106 WPA_SUPPLICANT_CONFIG_EDITS += 's/\#\(CONFIG_TLS=\).*/\1internal/'
107 endif
108
109 ifeq ($(BR2_PACKAGE_DBUS),y)
110 WPA_SUPPLICANT_DEPENDENCIES += host-pkgconf dbus
111 WPA_SUPPLICANT_MAKE_ENV = \
112         PKG_CONFIG_SYSROOT_DIR="$(STAGING_DIR)" \
113         PKG_CONFIG_PATH="$(STAGING_DIR)/usr/lib/pkgconfig"
114
115 ifeq ($(BR2_PACKAGE_WPA_SUPPLICANT_DBUS_OLD),y)
116 WPA_SUPPLICANT_CONFIG_ENABLE += CONFIG_CTRL_IFACE_DBUS=
117 define WPA_SUPPLICANT_INSTALL_DBUS_OLD
118         $(INSTALL) -m 0644 -D \
119                 $(@D)/wpa_supplicant/dbus/$(WPA_SUPPLICANT_DBUS_OLD_SERVICE).service \
120                 $(TARGET_DIR)/usr/share/dbus-1/system-services/$(WPA_SUPPLICANT_DBUS_OLD_SERVICE).service
121 endef
122 endif
123
124 ifeq ($(BR2_PACKAGE_WPA_SUPPLICANT_DBUS_NEW),y)
125 WPA_SUPPLICANT_CONFIG_ENABLE += CONFIG_CTRL_IFACE_DBUS_NEW
126 define WPA_SUPPLICANT_INSTALL_DBUS_NEW
127         $(INSTALL) -m 0644 -D \
128                 $(@D)/wpa_supplicant/dbus/$(WPA_SUPPLICANT_DBUS_NEW_SERVICE).service \
129                 $(TARGET_DIR)/usr/share/dbus-1/system-services/$(WPA_SUPPLICANT_DBUS_NEW_SERVICE).service
130 endef
131 endif
132
133 ifeq ($(BR2_PACKAGE_WPA_SUPPLICANT_DBUS_INTROSPECTION),y)
134 WPA_SUPPLICANT_CONFIG_ENABLE += CONFIG_CTRL_IFACE_DBUS_INTRO
135 endif
136
137 endif
138
139 ifeq ($(BR2_PACKAGE_WPA_SUPPLICANT_DEBUG_SYSLOG),y)
140 WPA_SUPPLICANT_CONFIG_ENABLE += CONFIG_DEBUG_SYSLOG
141 endif
142
143 ifeq ($(BR2_PACKAGE_READLINE),y)
144 WPA_SUPPLICANT_DEPENDENCIES += readline
145 WPA_SUPPLICANT_CONFIG_ENABLE += CONFIG_READLINE
146 endif
147
148 ifeq ($(BR2_PACKAGE_WPA_SUPPLICANT_WPA_CLIENT_SO),y)
149 WPA_SUPPLICANT_CONFIG_SET += CONFIG_BUILD_WPA_CLIENT_SO
150 define WPA_SUPPLICANT_INSTALL_WPA_CLIENT_SO
151         $(INSTALL) -m 0644 -D $(@D)/$(WPA_SUPPLICANT_SUBDIR)/libwpa_client.so \
152                 $(TARGET_DIR)/usr/lib/libwpa_client.so
153         $(INSTALL) -m 0644 -D $(@D)/src/common/wpa_ctrl.h \
154                 $(TARGET_DIR)/usr/include/wpa_ctrl.h
155 endef
156 define WPA_SUPPLICANT_INSTALL_STAGING_WPA_CLIENT_SO
157         $(INSTALL) -m 0644 -D $(@D)/$(WPA_SUPPLICANT_SUBDIR)/libwpa_client.so \
158                 $(STAGING_DIR)/usr/lib/libwpa_client.so
159         $(INSTALL) -m 0644 -D $(@D)/src/common/wpa_ctrl.h \
160                 $(STAGING_DIR)/usr/include/wpa_ctrl.h
161 endef
162 endif
163
164 define WPA_SUPPLICANT_CONFIGURE_CMDS
165         cp $(@D)/wpa_supplicant/defconfig $(WPA_SUPPLICANT_CONFIG)
166         sed -i $(patsubst %,-e 's/^#\(%\)/\1/',$(WPA_SUPPLICANT_CONFIG_ENABLE)) \
167                 $(patsubst %,-e 's/^\(%\)/#\1/',$(WPA_SUPPLICANT_CONFIG_DISABLE)) \
168                 $(patsubst %,-e '1i%=y',$(WPA_SUPPLICANT_CONFIG_SET)) \
169                 $(patsubst %,-e %,$(WPA_SUPPLICANT_CONFIG_EDITS)) \
170                 $(WPA_SUPPLICANT_CONFIG)
171 endef
172
173 # LIBS for wpa_supplicant, LIBS_c for wpa_cli, LIBS_p for wpa_passphrase
174 define WPA_SUPPLICANT_BUILD_CMDS
175         $(TARGET_MAKE_ENV) CFLAGS="$(WPA_SUPPLICANT_CFLAGS)" \
176                 LDFLAGS="$(TARGET_LDFLAGS)" BINDIR=/usr/sbin \
177                 LIBS="$(WPA_SUPPLICANT_LIBS)" LIBS_c="$(WPA_SUPPLICANT_LIBS)" \
178                 LIBS_p="$(WPA_SUPPLICANT_LIBS)" \
179                 $(MAKE) CC="$(TARGET_CC)" -C $(@D)/$(WPA_SUPPLICANT_SUBDIR)
180 endef
181
182 ifeq ($(BR2_PACKAGE_WPA_SUPPLICANT_CLI),y)
183 define WPA_SUPPLICANT_INSTALL_CLI
184         $(INSTALL) -m 0755 -D $(@D)/$(WPA_SUPPLICANT_SUBDIR)/wpa_cli \
185                 $(TARGET_DIR)/usr/sbin/wpa_cli
186 endef
187 endif
188
189 ifeq ($(BR2_PACKAGE_WPA_SUPPLICANT_PASSPHRASE),y)
190 define WPA_SUPPLICANT_INSTALL_PASSPHRASE
191         $(INSTALL) -m 0755 -D $(@D)/$(WPA_SUPPLICANT_SUBDIR)/wpa_passphrase \
192                 $(TARGET_DIR)/usr/sbin/wpa_passphrase
193 endef
194 endif
195
196 ifeq ($(BR2_PACKAGE_DBUS),y)
197 define WPA_SUPPLICANT_INSTALL_DBUS
198         $(INSTALL) -m 0644 -D \
199                 $(@D)/wpa_supplicant/dbus/dbus-wpa_supplicant.conf \
200                 $(TARGET_DIR)/etc/dbus-1/system.d/wpa_supplicant.conf
201         $(WPA_SUPPLICANT_INSTALL_DBUS_OLD)
202         $(WPA_SUPPLICANT_INSTALL_DBUS_NEW)
203 endef
204 endif
205
206 define WPA_SUPPLICANT_INSTALL_STAGING_CMDS
207         $(WPA_SUPPLICANT_INSTALL_STAGING_WPA_CLIENT_SO)
208 endef
209
210 define WPA_SUPPLICANT_INSTALL_TARGET_CMDS
211         $(INSTALL) -m 0755 -D $(@D)/$(WPA_SUPPLICANT_SUBDIR)/wpa_supplicant \
212                 $(TARGET_DIR)/usr/sbin/wpa_supplicant
213         $(INSTALL) -m 644 -D package/wpa_supplicant/wpa_supplicant.conf \
214                 $(TARGET_DIR)/etc/wpa_supplicant.conf
215         $(WPA_SUPPLICANT_INSTALL_CLI)
216         $(WPA_SUPPLICANT_INSTALL_PASSPHRASE)
217         $(WPA_SUPPLICANT_INSTALL_DBUS)
218         $(WPA_SUPPLICANT_INSTALL_WPA_CLIENT_SO)
219 endef
220
221 define WPA_SUPPLICANT_INSTALL_INIT_SYSTEMD
222         $(INSTALL) -m 0644 -D $(@D)/$(WPA_SUPPLICANT_SUBDIR)/systemd/wpa_supplicant.service \
223                 $(TARGET_DIR)/usr/lib/systemd/system/wpa_supplicant.service
224         $(INSTALL) -m 0644 -D $(@D)/$(WPA_SUPPLICANT_SUBDIR)/systemd/wpa_supplicant@.service \
225                 $(TARGET_DIR)/usr/lib/systemd/system/wpa_supplicant@.service
226         $(INSTALL) -m 0644 -D $(@D)/$(WPA_SUPPLICANT_SUBDIR)/systemd/wpa_supplicant-nl80211@.service \
227                 $(TARGET_DIR)/usr/lib/systemd/system/wpa_supplicant-nl80211@.service
228         $(INSTALL) -m 0644 -D $(@D)/$(WPA_SUPPLICANT_SUBDIR)/systemd/wpa_supplicant-wired@.service \
229                 $(TARGET_DIR)/usr/lib/systemd/system/wpa_supplicant-wired@.service
230 endef
231
232 $(eval $(generic-package))