aboutsummaryrefslogtreecommitdiffstats
path: root/wpa_supplicant/defconfig
diff options
context:
space:
mode:
authorJouni Malinen <j@w1.fi>2011-11-27 19:45:07 (GMT)
committerJouni Malinen <j@w1.fi>2011-11-27 19:45:07 (GMT)
commitca84eed7ad13dc23bd5363aaa1fd5ed34b3bb5e3 (patch)
tree3f0d4132c27e57830805da0d12f7a4323eb3599d /wpa_supplicant/defconfig
parentbcf03f52099e0b306e4c8f747958b0f929861b49 (diff)
downloadhostap-ca84eed7ad13dc23bd5363aaa1fd5ed34b3bb5e3.zip
hostap-ca84eed7ad13dc23bd5363aaa1fd5ed34b3bb5e3.tar.gz
hostap-ca84eed7ad13dc23bd5363aaa1fd5ed34b3bb5e3.tar.bz2
TLS: Add build configuration for TLS v1.2 support
This allows the internal TLS implementation to be built for TLS v1.2 support. In addition to the build option, this changes the TLS PRF based on the negotiated version number. Though, this commit does not yet complete support for TLS v1.2. Signed-hostap: Jouni Malinen <j@w1.fi>
Diffstat (limited to 'wpa_supplicant/defconfig')
-rw-r--r--wpa_supplicant/defconfig7
1 files changed, 7 insertions, 0 deletions
diff --git a/wpa_supplicant/defconfig b/wpa_supplicant/defconfig
index 03a4223..cff25d6 100644
--- a/wpa_supplicant/defconfig
+++ b/wpa_supplicant/defconfig
@@ -332,6 +332,13 @@ CONFIG_PEERKEY=y
# sent prior to negotiating which version will be used)
#CONFIG_TLSV11=y
+# TLS-based EAP methods require at least TLS v1.0. Newer version of TLS (v1.2)
+# can be enabled to enable use of stronger crypto algorithms. It should be
+# noted that some existing TLS v1.0 -based implementation may not be compatible
+# with TLS v1.2 message (ClientHello is sent prior to negotiating which version
+# will be used)
+#CONFIG_TLSV12=y
+
# If CONFIG_TLS=internal is used, additional library and include paths are
# needed for LibTomMath. Alternatively, an integrated, minimal version of
# LibTomMath can be used. See beginning of libtommath.c for details on benefits