how to enable the internal client crypto on WPA_supplicant

Jouni Malinen j at w1.fi
Thu Dec 3 14:03:32 PST 2015


On Thu, Dec 03, 2015 at 09:47:20AM +0000, Achuthan Paramanathan wrote:
> I am currently playing around with wpa_supplicant and as it is now, then the default crypto for an EAP-TLS connection, OPENSSL. 
> However, I would like to enable the internal  one, ie, CONFIG_TLS_INTERNAL_CLIENT
> 
> I am pretty new to this wpa_supplicant stuff .. And so far only  build the whole wpa_supplicant as it is, no changes to the make file or build config. 
> 
> 
> Any idea where to add this compiler flag ? or how to enable the internal crypto?  

Adding these to wpa_supplicant/.config is what I normally use for this:

CONFIG_TLS=internal
CONFIG_INTERNAL_LIBTOMMATH=y
CONFIG_INTERNAL_LIBTOMMATH_FAST=y

See wpa_supplicant/defconfig for more details on that.

> Ps.: I assume the internal crypto, is similar to OpenSSL.just that it is WPA_Supplicants own version of a TLS similar to OpenSSL and GNUSSL ? 

Correct.

-- 
Jouni Malinen                                            PGP id EFC895FA



More information about the Hostap mailing list