aboutsummaryrefslogtreecommitdiffstats
path: root/hostapd/Makefile
diff options
context:
space:
mode:
authorJouni Malinen <j@w1.fi>2014-11-29 19:28:24 (GMT)
committerJouni Malinen <j@w1.fi>2014-12-04 10:16:27 (GMT)
commitd3bddd8b84dc345f7aa0c20536f45a68e0a5ba85 (patch)
treef0c4554d3333a842697020f28d1b0c98929f2bec /hostapd/Makefile
parente2ee327b191d2c64c31f3f535cc42e955fb084a4 (diff)
downloadhostap-d3bddd8b84dc345f7aa0c20536f45a68e0a5ba85.zip
hostap-d3bddd8b84dc345f7aa0c20536f45a68e0a5ba85.tar.gz
hostap-d3bddd8b84dc345f7aa0c20536f45a68e0a5ba85.tar.bz2
ERP: Add support for ERP on EAP server and authenticator
Derive rRK and rIK on EAP server if ERP is enabled and use these keys to allow EAP re-authentication to be used and to derive rMSK. The new hostapd configuration parameter eap_server_erp=1 can now be used to configure the integrated EAP server to derive EMSK, rRK, and rIK at the successful completion of an EAP authentication method. This functionality is not included in the default build and can be enabled with CONFIG_ERP=y. Signed-off-by: Jouni Malinen <j@w1.fi>
Diffstat (limited to 'hostapd/Makefile')
-rw-r--r--hostapd/Makefile9
1 files changed, 9 insertions, 0 deletions
diff --git a/hostapd/Makefile b/hostapd/Makefile
index 74cd9fa..dea4c15 100644
--- a/hostapd/Makefile
+++ b/hostapd/Makefile
@@ -258,6 +258,12 @@ OBJS += ../src/l2_packet/l2_packet_none.o
endif
+ifdef CONFIG_ERP
+CFLAGS += -DCONFIG_ERP
+NEED_SHA256=y
+NEED_HMAC_SHA256_KDF=y
+endif
+
ifdef CONFIG_EAP_MD5
CFLAGS += -DEAP_SERVER_MD5
OBJS += ../src/eap_server/eap_server_md5.o
@@ -767,6 +773,9 @@ endif
ifdef NEED_TLS_PRF_SHA256
OBJS += ../src/crypto/sha256-tlsprf.o
endif
+ifdef NEED_HMAC_SHA256_KDF
+OBJS += ../src/crypto/sha256-kdf.o
+endif
endif
ifdef NEED_DH_GROUPS