config_query_list CONFIG_TLS "Select TLS library to use:" \
                             openssl \
                             gnutls \
                             nss \
                             internal \
                             none &&

config_query CONFIG_TLSV11 "Enable TLS v1.1 to get a stronger construction of messages when block ciphers are used?" n &&

#
# Drivers
#
config_query CONFIG_DRIVER_HOSTAP "Build driver interface for Host AP driver?" y &&
config_query CONFIG_DRIVER_WIRED "Build driver interface for wired authenticator?" n &&
config_query CONFIG_DRIVER_NL80211 "Build driver interface for drivers using the nl80211 kernel interface?" y &&
config_query CONFIG_DRIVER_NONE "Build driver interface for no driver (e.g., RADIUS server only)?" n &&
# untested
#config_query CONFIG_DRIVER_MADWIFI "Build driver interface for madwifi driver?" n &&

#
# IEEE 802.11 options
#
config_query CONFIG_IAPP "Enable IEEE 802.11F/IAPP support?" y &&
config_query CONFIG_RSN_PREAUTH "Enable WPA2/IEEE 802.11i RSN pre-authentication support?" y &&
config_query CONFIG_PEERKEY "Enable PeerKey handshake for Station to Station Link (IEEE 802.11e DLS) support?" y &&
config_query CONFIG_IEEE80211W "Enable IEEE 802.11w (management frame protection) support (experimental)?" n &&

#
# EAP server
#
config_query CONFIG_EAP "Build integrated EAP server?" y &&

if [[ $CONFIG_EAP == y ]]; then
  config_query CONFIG_EAP_MD5 "Enable EAP-MD5 support for the integrated EAP server?" y &&
  config_query CONFIG_EAP_TLS "Enable EAP-TLS support for the integrated EAP server?" y &&
  config_query CONFIG_EAP_MSCHAPV2 "Enable EAP-MSCHAPv2 support for the integrated EAP server" y &&
  config_query CONFIG_EAP_PEAP "Enable EAP-PEAP support for the integrated EAP server?" y &&
  config_query CONFIG_EAP_GTC "Enable EAP-GTC support for the integrated EAP server?" y &&
  config_query CONFIG_EAP_TTLS "Enable EAP-TTLS support for the integrated EAP server?" y &&
  config_query CONFIG_EAP_SIM "Enable EAP-SIM support for the integrated EAP server?" n &&
  config_query CONFIG_EAP_AKA "Enable EAP-AKA support for the integrated EAP server?" n &&

  if [[ $CONFIG_EAP_AKA == y ]]; then
    config_query CONFIG_EAP_AKA_PRIME "Enable EAP-AKA' support for the integrated EAP server?" n
  fi &&

  config_query CONFIG_EAP_PAX "Enable EAP-PAX support for the integrated EAP server?" n &&
  config_query CONFIG_EAP_PSK "Enable EAP-PSK support for the integrated EAP server?" n &&
  config_query CONFIG_EAP_PWD "Enable EAP-pwd support for the integrated EAP server (secure authentication with a password)?" n &&
  config_query CONFIG_EAP_SAKE "Enable EAP-SAKE support for the integrated EAP server?" n &&
  config_query CONFIG_EAP_GPSK "Enable EAP-GPSK support for the integrated EAP server?" n &&

  if [[ $CONFIG_EAP_GPSK == y ]]; then
    config_query CONFIG_EAP_GPSK_SHA256 "Include support for optional SHA256 cipher suite in EAP-GPSK?" n
  fi &&

  config_query CONFIG_EAP_IKEV2 "Enable EAP-IKEv2 support?" n &&
  config_query CONFIG_EAP_TNC "Enable Trusted Network Connect (EAP-TNC) support?" n

  config_query CONFIG_WPS "Enable Wi-Fi Protected Setup (WPS)?" n &&

  if [[ $CONFIG_WPS == y ]]; then
    config_query CONFIG_WPS2 "Enable WSC 2.0 support?" n &&
    config_query CONFIG_WPS_UPNP "Enable UPnP support for external WPS Registrars?" n
  fi &&

  config_query CONFIG_PKCS12 "Enable PKCS#12 (PFX) support?" y &&

  config_query CONFIG_NO_RADIUS "Remove support for RADIUS?" n &&

  if [[ $CONFIG_NO_RADIUS == n ]]; then
    config_query CONFIG_RADIUS_SERVER "Enable RADIUS authentication server (provides access to the integrated EAP server from external hosts using RADIUS)?" n &&

    if [[ $CONFIG_RADIUS_SERVER == y ]]; then
      config_query CONFIG_IPV6 "Build IPv6 support for RADIUS operations?" y
    fi &&

    config_query CONFIG_DRIVER_RADIUS_ACL "Use the hostapd's IEEE 802.11 authentication (ACL), but without the IEEE 802.11 Management capability?" n
    config_query CONFIG_NO_ACCOUNTING "Remove support for RADIUS accounting?" n
  fi &&

  config_query CONFIG_IEEE80211R "Enable IEEE Std 802.11r-2008 (Fast BSS Transition)?" n &&
  config_query CONFIG_IEEE80211N "Enable IEEE 802.11n (High Throughput) support?" n &&

  config_query CONFIG_NO_VLAN "Remove support for VLANs?" n &&

  if [[ $CONFIG_NO_VLAN == n ]]; then
    config_query CONFIG_FULL_DYNAMIC_VLAN "Enable support for fully dynamic VLANs (enables hostapd to automatically create bridge and VLAN interfaces if necessary)?" n
  fi
fi &&

#
# Debugging/OS options
#
config_query CONFIG_NO_STDOUT_DEBUG "Remove debugging code that is printing out debug messages to stdout?" n &&
config_query CONFIG_DEBUG_FILE "Add support for writing debug log to a file?" n &&
config_query CONFIG_NO_DUMP_STATE "Remove support for dumping state into a file on SIGUSR1 signal?" n &&
config_query CONFIG_WPA_TRACE "Enable tracing code for developer debugging?" n &&
config_query CONFIG_NO_RANDOM_POOL "Disable internal hostapd random pool in favour of /dev/urandom?" n &&
config_query CONFIG_INTERWORKING "Enable Interworking (IEEE 802.11u) support?" n
