Makefile revision 0
0N/A#
2362N/A# Copyright 2007 Sun Microsystems, Inc. All Rights Reserved.
0N/A# DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
0N/A#
0N/A# This code is free software; you can redistribute it and/or modify it
0N/A# under the terms of the GNU General Public License version 2 only, as
2362N/A# published by the Free Software Foundation. Sun designates this
0N/A# particular file as subject to the "Classpath" exception as provided
2362N/A# by Sun in the LICENSE file that accompanied this code.
0N/A#
0N/A# This code is distributed in the hope that it will be useful, but WITHOUT
0N/A# ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
0N/A# FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
0N/A# version 2 for more details (a copy is included in the LICENSE file that
0N/A# accompanied this code).
0N/A#
0N/A# You should have received a copy of the GNU General Public License version
0N/A# 2 along with this work; if not, write to the Free Software Foundation,
0N/A# Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
0N/A#
2362N/A# Please contact Sun Microsystems, Inc., 4150 Network Circle, Santa Clara,
2362N/A# CA 95054 USA or visit www.sun.com if you need additional information or
2362N/A# have any questions.
0N/A#
0N/A
0N/A#
0N/A# Makefile for building jce.jar and the various cryptographic strength
0N/A# policy jar files.
0N/A#
0N/A
0N/A#
0N/A# (The terms "OpenJDK" and "JDK" below refer to OpenJDK and Sun JDK builds
0N/A# respectively.)
0N/A#
0N/A# JCE builds are very different between OpenJDK and JDK. The OpenJDK JCE
0N/A# jar files do not require signing, but those for JDK do. If an unsigned
0N/A# jar file is installed into JDK, things will break when the crypto
0N/A# routines are called.
0N/A#
0N/A# This Makefile does the "real" build of the JCE files. There are some
0N/A# javac options currently specific to JCE, so we recompile now to make
0N/A# sure any implicit compilations didn't use any incorrect flags.
0N/A#
0N/A# For OpenJDK, the jar files built here are installed directly into the
0N/A# OpenJDK.
0N/A#
0N/A# For JDK, the binaries use pre-built/pre-signed/pre-obfuscated binary
0N/A# files stored in the closed workspace that are not shipped in the
0N/A# OpenJDK workspaces. We still build the JDK files here to verify the
0N/A# files compile, and in preparation for possible signing and
0N/A# obfuscation. Developers working on JCE in JDK must sign the JCE files
0N/A# before testing: obfuscation is optional during development. The JCE
0N/A# signing key is kept separate from the JDK workspace to prevent its
0N/A# disclosure. The obfuscation tool has not been licensed for general
0N/A# usage.
0N/A#
0N/A# SPECIAL NOTE TO JCE/JDK developers: The source files must eventually
0N/A# be built, obfuscated, signed, and the resulting jar files *MUST BE
0N/A# CHECKED INTO THE CLOSED PART OF THE WORKSPACE*. This separate step
0N/A# *MUST NOT BE FORGOTTEN*, otherwise a bug fixed in the source code will
0N/A# not be reflected in the shipped binaries. The "release" target should
0N/A# be used to generate the required files.
0N/A#
0N/A# There are a number of targets to help both JDK/OpenJDK developers.
0N/A#
0N/A# Main Targets (JDK/OPENJDK):
0N/A#
0N/A# all/clobber/clean The usual.
0N/A# If OpenJDK, installs
0N/A# jce.jar/limited policy files.
0N/A# If JDK, installs prebuilt
0N/A# jce.jar/limited policy files.
0N/A#
0N/A# jar Builds/installs jce.jar
0N/A# If OpenJDK, does not sign
0N/A# If JDK, tries to sign
0N/A#
0N/A# Other lesser-used Targets (JDK/OPENJDK):
0N/A#
0N/A# build-jar Builds jce.jar (does not sign/install)
0N/A#
0N/A# build-policy Builds policy files (does not sign/install)
0N/A#
0N/A# install-jar Alias for "jar" above
0N/A#
0N/A# install-limited Builds/installs limited policy files
0N/A# If OpenJDK, does not sign
0N/A# If JDK, tries to sign
0N/A# install-unlimited Builds/nstalls unlimited policy files
0N/A# If OpenJDK, does not sign
0N/A# If JDK, tries to sign
0N/A#
0N/A# Other targets (JDK only):
0N/A#
0N/A# sign Alias for sign-jar and sign-policy
0N/A# sign-jar Builds/signs jce.jar file (no install)
0N/A# sign-policy Builds/signs policy files (no install)
0N/A#
0N/A# obfus Builds/obfuscates/signs/installs jce.jar
0N/A#
0N/A# release Builds all targets in preparation
0N/A# for workspace integration.
0N/A#
0N/A# install-prebuilt Installs the pre-built jar files
0N/A#
0N/A# This makefile was written to support parallel target execution.
0N/A#
0N/A
0N/ABUILDDIR = ../..
0N/APACKAGE = javax.crypto
0N/APRODUCT = sun
0N/A
0N/Ainclude $(BUILDDIR)/common/Defs.gmk
0N/Ainclude Defs-jce.gmk
0N/A
0N/A#
0N/A# Location for the newly built classfiles.
0N/A#
0N/ACLASSDESTDIR = $(TEMPDIR)/classes
0N/A
0N/A#
0N/A# Subdirectories of these are automatically included.
0N/A#
0N/AAUTO_FILES_JAVA_DIRS = \
0N/A javax/crypto \
0N/A sun/security/internal/interfaces \
0N/A sun/security/internal/spec
0N/A
0N/Ainclude $(BUILDDIR)/common/Classes.gmk
0N/A
0N/A#
0N/A# Rules
0N/A#
0N/A
0N/A#
0N/A# Some licensees do not get the security sources, but we still need to
0N/A# be able to build "all" for them. Check here to see if the sources were
0N/A# available. If not, then we don't need to continue this rule.
0N/A#
0N/A
0N/Aifdef OPENJDK
0N/Aall: build-jar install-jar build-policy install-limited
0N/Aelse # OPENJDK
0N/Aifeq ($(strip $(FILES_java)),)
0N/Aall:
0N/A $(no-source-warning)
0N/Aelse # FILES_java/policy files available
0N/Aall: build-jar build-policy
0N/A $(build-warning)
0N/Aendif # $(FILES_java)/policy files available
0N/Aendif # OPENJDK
0N/A
0N/A#
0N/A# We use a variety of subdirectories in the $(TEMPDIR) depending on what
0N/A# part of the build we're doing. Both OPENJDK/JDK builds are initially
0N/A# done in the unsigned area. When files are signed or obfuscated in JDK,
0N/A# they will be placed in the appropriate areas.
0N/A#
0N/AUNSIGNED_DIR = $(TEMPDIR)/unsigned
0N/A
0N/A
0N/A# =====================================================
0N/A# Build the unsigned jce.jar file. Signing/obfuscation comes later.
0N/A#
0N/A
0N/AJAR_DESTFILE = $(LIBDIR)/jce.jar
0N/A
0N/A#
0N/A# JCE building is somewhat involved.
0N/A#
0N/A# OpenJDK: Since we do not ship prebuilt JCE files, previous compiles
0N/A# in the build may have needed JCE class signatures. There were then
0N/A# implicitly built by javac (likely using the boot javac). While using
0N/A# those class files was fine for signatures, we need to rebuild using
0N/A# the right compiler.
0N/A#
0N/A# JDK: Even through the jce.jar was previously installed, since the
0N/A# source files are accessible in the source directories, they will
0N/A# always be "newer" than the prebuilt files inside the jar, and thus
0N/A# make will always rebuild them. (We could "hide" the JCE source in a
0N/A# separate directory, but that would make the build logic for JDK and
0N/A# OpenJDK more complicated.)
0N/A#
0N/A# Thus in either situation, we shouldn't use these files.
0N/A#
0N/A# To make sure the classes were built with the right compiler options,
0N/A# delete the existing files in $(CLASSBINDIR), rebuild the right way in a
0N/A# directory under $(TEMPDIR), then copy the files back to
0N/A# $(CLASSBINDIR). Building in $(TEMPDIR) allows us to use our make
0N/A# infrastructure without modification: .classes.list, macros, etc.
0N/A#
0N/A
0N/A#
0N/A# The list of directories that will be remade from scratch, using the
0N/A# right compilers/options.
0N/A#
0N/ADELETE_DIRS = $(patsubst %, $(CLASSBINDIR)/%, $(AUTO_FILES_JAVA_DIRS))
0N/A
0N/A#
0N/A# Since the -C option to jar is used below, each directory entry must be
0N/A# preceded with the appropriate directory to "cd" into.
0N/A#
0N/AJAR_DIRS = $(patsubst %, -C $(CLASSDESTDIR) %, $(AUTO_FILES_JAVA_DIRS))
0N/A
0N/Abuild-jar: $(UNSIGNED_DIR)/jce.jar
0N/A
0N/A#
0N/A# Build jce.jar, then replace the previously built JCE files in the
0N/A# classes directory with these. This ensures we have consistently built
0N/A# files throughout the workspaces.
0N/A#
0N/A$(UNSIGNED_DIR)/jce.jar: prebuild build $(JCE_MANIFEST_FILE)
0N/A $(prep-target)
0N/A $(BOOT_JAR_CMD) cmf $(JCE_MANIFEST_FILE) $@ $(JAR_DIRS) \
0N/A $(JAR_JFLAGS)
0N/A $(CP) -r $(CLASSDESTDIR)/* $(CLASSBINDIR)
0N/A @$(java-vm-cleanup)
0N/A
0N/Abuild: prebuild
0N/A
0N/Aprebuild:
0N/A $(RM) -r $(DELETE_DIRS)
0N/A
0N/A
0N/A# =====================================================
0N/A# Build the unsigned policy files.
0N/A#
0N/A# Given the current state of world export/import policies,
0N/A# these settings work for Sun's situation. This note is not
0N/A# legal guidance, you must still resolve any export/import issues
0N/A# applicable for your situation. Contact your export/import
0N/A# counsel for more information.
0N/A#
0N/A
0N/APOLICY_DESTDIR = $(LIBDIR)/security
0N/AUNSIGNED_POLICY_BUILDDIR = $(UNSIGNED_DIR)/policy
0N/A
0N/Abuild-policy: unlimited limited
0N/A
0N/A#
0N/A# Build the unsigned unlimited policy files.
0N/A#
0N/Aunlimited: \
0N/A $(UNSIGNED_POLICY_BUILDDIR)/unlimited/US_export_policy.jar \
0N/A $(UNSIGNED_POLICY_BUILDDIR)/unlimited/local_policy.jar
0N/A
0N/A$(UNSIGNED_POLICY_BUILDDIR)/unlimited/US_export_policy.jar: \
0N/A policy/unlimited/default_US_export.policy \
0N/A policy/unlimited/UNLIMITED
0N/A $(prep-target)
0N/A $(BOOT_JAR_CMD) cmf policy/unlimited/UNLIMITED $@ \
0N/A -C policy/unlimited default_US_export.policy \
0N/A $(JAR_JFLAGS)
0N/A @$(java-vm-cleanup)
0N/A
0N/A$(UNSIGNED_POLICY_BUILDDIR)/unlimited/local_policy.jar: \
0N/A policy/unlimited/default_local.policy \
0N/A policy/unlimited/UNLIMITED
0N/A $(prep-target)
0N/A $(BOOT_JAR_CMD) cmf policy/unlimited/UNLIMITED $@ \
0N/A -C policy/unlimited default_local.policy \
$(JAR_JFLAGS)
@$(java-vm-cleanup)
#
# Build the unsigned limited policy files.
#
# NOTE: We currently do not place restrictions on our limited export
# policy. This was not a typo.
#
limited: \
$(UNSIGNED_POLICY_BUILDDIR)/limited/US_export_policy.jar \
$(UNSIGNED_POLICY_BUILDDIR)/limited/local_policy.jar
$(UNSIGNED_POLICY_BUILDDIR)/limited/US_export_policy.jar: \
$(UNSIGNED_POLICY_BUILDDIR)/unlimited/US_export_policy.jar
$(install-file)
$(UNSIGNED_POLICY_BUILDDIR)/limited/local_policy.jar: \
policy/limited/default_local.policy \
policy/limited/exempt_local.policy \
policy/limited/LIMITED
$(prep-target)
$(BOOT_JAR_CMD) cmf policy/limited/LIMITED $@ \
-C policy/limited default_local.policy \
-C policy/limited exempt_local.policy \
$(JAR_JFLAGS)
@$(java-vm-cleanup)
UNSIGNED_POLICY_FILES = \
$(UNSIGNED_POLICY_BUILDDIR)/unlimited/US_export_policy.jar \
$(UNSIGNED_POLICY_BUILDDIR)/unlimited/local_policy.jar \
$(UNSIGNED_POLICY_BUILDDIR)/limited/US_export_policy.jar \
$(UNSIGNED_POLICY_BUILDDIR)/limited/local_policy.jar \
ifndef OPENJDK
# =====================================================
# Sign the various jar files. Not needed for OpenJDK.
#
SIGNED_DIR = $(TEMPDIR)/signed
SIGNED_POLICY_BUILDDIR = $(SIGNED_DIR)/policy
SIGNED_POLICY_FILES = \
$(patsubst $(UNSIGNED_POLICY_BUILDDIR)/%,$(SIGNED_POLICY_BUILDDIR)/%, \
$(UNSIGNED_POLICY_FILES))
sign: sign-jar sign-policy
sign-jar: $(SIGNED_DIR)/jce.jar
sign-policy: $(SIGNED_POLICY_FILES)
$(SIGNED_DIR)/jce.jar: $(UNSIGNED_DIR)/jce.jar
$(sign-file)
$(SIGNED_POLICY_BUILDDIR)/unlimited/US_export_policy.jar: \
$(UNSIGNED_POLICY_BUILDDIR)/unlimited/US_export_policy.jar
$(sign-file)
$(SIGNED_POLICY_BUILDDIR)/unlimited/local_policy.jar: \
$(UNSIGNED_POLICY_BUILDDIR)/unlimited/local_policy.jar
$(sign-file)
$(SIGNED_POLICY_BUILDDIR)/limited/US_export_policy.jar: \
$(UNSIGNED_POLICY_BUILDDIR)/limited/US_export_policy.jar
$(sign-file)
$(SIGNED_POLICY_BUILDDIR)/limited/local_policy.jar: \
$(UNSIGNED_POLICY_BUILDDIR)/limited/local_policy.jar
$(sign-file)
# =====================================================
# Obfuscate/sign/install the JDK build. Not needed for OpenJDK.
#
OBFUS_DIR = $(TEMPDIR)/obfus
CLOSED_DIR = $(BUILDDIR)/closed/javax/crypto
obfus: $(OBFUS_DIR)/jce.jar
$(release-warning)
$(OBFUS_DIR)/jce.jar: build-jar $(JCE_MANIFEST_FILE)
$(presign)
$(preobfus)
@$(ECHO) ">>>Obfuscating JCE framework..."
$(prep-target)
$(CD) $(OBFUS_DIR); \
$(OBFUSCATOR) -fv \
$(CURRENT_DIRECTORY)/$(CLOSED_DIR)/obfus/framework.dox
@$(CD) $(OBFUS_DIR); $(java-vm-cleanup)
@# The sun.security.internal classes are currently not obfuscated
@# due to an obfus problem. Manually copy them to the build directory
@# so that they are included in the jce.jar file.
$(CP) -r $(CLASSDESTDIR)/sun $(OBFUS_DIR)/build
$(RM) $(UNSIGNED_DIR)/jce.jar
$(BOOT_JAR_CMD) cmf $(JCE_MANIFEST_FILE) $@ \
-C $(OBFUS_DIR)/build javax \
-C $(OBFUS_DIR)/build sun \
$(JAR_JFLAGS)
$(sign-target)
$(MKDIR) -p $(dir $(JAR_DESTFILE))
$(RM) $(JAR_DESTFILE)
$(CP) $@ $(JAR_DESTFILE)
@$(java-vm-cleanup)
#
# The current obfuscator has a limitation in that it currently only
# supports up to v49 class file format. Force v49 classfiles in our
# builds for now.
#
TARGET_CLASS_VERSION = 5
# =====================================================
# Create the Release Engineering files. Obfuscated builds,
# unlimited policy file distribution, etc.
#
release: $(OBFUS_DIR)/jce.jar sign-policy
$(RM) -r \
$(RELEASE_DIR)/UnlimitedJCEPolicy \
$(RELEASE_DIR)/jce.jar \
$(RELEASE_DIR)/US_export_policy.jar \
$(RELEASE_DIR)/local_policy.jar \
$(RELEASE_DIR)/UnlimitedJCEPolicy.zip
$(MKDIR) -p $(RELEASE_DIR)/UnlimitedJCEPolicy
$(CP) $(OBFUS_DIR)/jce.jar $(RELEASE_DIR)
$(CP) -r \
$(SIGNED_POLICY_BUILDDIR)/limited/US_export_policy.jar \
$(SIGNED_POLICY_BUILDDIR)/limited/local_policy.jar \
$(RELEASE_DIR)
$(CP) \
$(SIGNED_POLICY_BUILDDIR)/unlimited/US_export_policy.jar \
$(SIGNED_POLICY_BUILDDIR)/unlimited/local_policy.jar \
$(RELEASE_DIR)/UnlimitedJCEPolicy
$(CP) $(CLOSED_DIR)/doc/COPYRIGHT.html \
$(CLOSED_DIR)/doc/README.txt $(RELEASE_DIR)/UnlimitedJCEPolicy
cd $(RELEASE_DIR) ; \
$(ZIPEXE) -qr UnlimitedJCEPolicy.zip UnlimitedJCEPolicy
$(release-warning)
endif # OPENJDK
# =====================================================
# Install routines.
#
#
# Install jce.jar, depending on which type is requested.
#
install-jar jar: $(JAR_DESTFILE)
ifndef OPENJDK
$(release-warning)
endif
ifdef OPENJDK
$(JAR_DESTFILE): $(UNSIGNED_DIR)/jce.jar
else
$(JAR_DESTFILE): $(SIGNED_DIR)/jce.jar
endif
$(install-file)
#
# Install the appropriate policy file, depending on the type of build.
#
ifdef OPENJDK
INSTALL_POLICYDIR = $(UNSIGNED_POLICY_BUILDDIR)
else
INSTALL_POLICYDIR = $(SIGNED_POLICY_BUILDDIR)
endif
install-limited: \
$(INSTALL_POLICYDIR)/limited/US_export_policy.jar \
$(INSTALL_POLICYDIR)/limited/local_policy.jar
$(MKDIR) -p $(POLICY_DESTDIR)
$(RM) \
$(POLICY_DESTDIR)/US_export_policy.jar \
$(POLICY_DESTDIR)/local_policy.jar
$(CP) $^ $(POLICY_DESTDIR)
ifndef OPENJDK
$(release-warning)
endif
install-unlimited: \
$(INSTALL_POLICYDIR)/unlimited/US_export_policy.jar \
$(INSTALL_POLICYDIR)/unlimited/local_policy.jar
$(MKDIR) -p $(POLICY_DESTDIR)
$(RM) \
$(POLICY_DESTDIR)/US_export_policy.jar \
$(POLICY_DESTDIR)/local_policy.jar
$(CP) $^ $(POLICY_DESTDIR)
ifndef OPENJDK
$(release-warning)
endif
ifndef OPENJDK
install-prebuilt:
@$(ECHO) "\n>>>Installing prebuilt JCE framework..."
$(RM) $(JAR_DESTFILE) \
$(POLICY_DESTDIR)/US_export_policy.jar \
$(POLICY_DESTDIR)/local_policy.jar
$(CP) $(PREBUILT_DIR)/jce/jce.jar $(JAR_DESTFILE)
$(CP) \
$(PREBUILT_DIR)/jce/US_export_policy.jar \
$(PREBUILT_DIR)/jce/local_policy.jar \
$(POLICY_DESTDIR)
endif
# =====================================================
# Support routines.
#
clobber clean::
$(RM) -r $(JAR_DESTFILE) $(POLICY_DESTDIR)/US_export_policy.jar \
$(POLICY_DESTDIR)/local_policy.jar $(DELETE_DIRS) $(TEMPDIR)
.PHONY: build-jar jar build-policy unlimited limited install-jar \
install-limited install-unlimited
ifndef OPENJDK
.PHONY: sign sign-jar sign-policy obfus release install-prebuilt
endif