Makefile revision 591
98N/A# Copyright 2007-2008 Sun Microsystems, Inc. All Rights Reserved. 98N/A# DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER. 606N/A# This code is free software; you can redistribute it and/or modify it 733N/A# under the terms of the GNU General Public License version 2 only, as 98N/A# published by the Free Software Foundation. Sun designates this 98N/A# particular file as subject to the "Classpath" exception as provided 98N/A# by Sun in the LICENSE file that accompanied this code. 98N/A# This code is distributed in the hope that it will be useful, but WITHOUT 98N/A# ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or 98N/A# FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License 98N/A# version 2 for more details (a copy is included in the LICENSE file that 98N/A# accompanied this code). 98N/A# You should have received a copy of the GNU General Public License version 98N/A# 2 along with this work; if not, write to the Free Software Foundation, 98N/A# Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. 98N/A# Please contact Sun Microsystems, Inc., 4150 Network Circle, Santa Clara, 98N/A# have any questions. 98N/A# Makefile for building jce.jar and the various cryptographic strength 98N/A# (The terms "OpenJDK" and "JDK" below refer to OpenJDK and Sun JDK builds 98N/A# JCE builds are very different between OpenJDK and JDK. The OpenJDK JCE 235N/A# jar files do not require signing, but those for JDK do. If an unsigned 156N/A# jar file is installed into JDK, things will break when the crypto 156N/A# This Makefile does the "real" build of the JCE files. There are some 98N/A# javac options currently specific to JCE, so we recompile now to make 98N/A# sure any implicit compilations didn't use any incorrect flags. 98N/A# For OpenJDK, the jar files built here are installed directly into the 98N/A# files stored in the closed workspace that are not shipped in the 235N/A# OpenJDK workspaces. We still build the JDK files here to verify the 493N/A# files compile, and in preparation for possible signing and 98N/A# obfuscation. Developers working on JCE in JDK must sign the JCE files 98N/A# before testing: obfuscation is optional during development. The JCE 98N/A# signing key is kept separate from the JDK workspace to prevent its 98N/A# disclosure. The obfuscation tool has not been licensed for general 98N/A# SPECIAL NOTE TO JCE/JDK developers: The source files must eventually 98N/A# be built, obfuscated, signed, and the resulting jar files *MUST BE 606N/A# CHECKED INTO THE CLOSED PART OF THE WORKSPACE*. This separate step 606N/A# *MUST NOT BE FORGOTTEN*, otherwise a bug fixed in the source code will 98N/A# not be reflected in the shipped binaries. The "release" target should 493N/A# be used to generate the required files. 493N/A# If JDK, installs prebuilt 493N/A# If OpenJDK, does not sign 493N/A# install-jar Alias for "jar" above 606N/A# If OpenJDK, does not sign 98N/A# If JDK, tries to sign 810N/A# If OpenJDK, does not sign 810N/A# Other targets (JDK only): 591N/A# sign Alias for sign-jar and sign-policy 98N/A# release Builds all targets in preparation 606N/A# for workspace integration. 606N/A# install-prebuilt Installs the pre-built jar files 591N/A# This makefile was written to support parallel target execution. 606N/A# The following is for when we need to do postprocessing 606N/A# isn't writable, the build currently crashes out. 733N/A # ===================================================== 733N/A # Where to place the output, in case we're building from a read-only 733N/A # build area. (e.g. a release engineering build.) 606N/A# Location for the newly built classfiles. 98N/A# Subdirectories of these are automatically included. # Some licensees do not get the security sources, but we still need to # be able to build "all" for them. Check here to see if the sources were # available. If not, then we don't need to continue this rule. endif # $(FILES_java)/policy files available # We use a variety of subdirectories in the $(TEMPDIR) depending on what # part of the build we're doing. Both OPENJDK/JDK builds are initially # done in the unsigned area. When files are signed or obfuscated in JDK, # they will be placed in the appropriate areas. # ===================================================== # JCE building is somewhat involved. # OpenJDK: Since we do not ship prebuilt JCE files, previous compiles # in the build may have needed JCE class signatures. There were then # implicitly built by javac (likely using the boot javac). While using # those class files was fine for signatures, we need to rebuild using # JDK: Even through the jce.jar was previously installed, since the # source files are accessible in the source directories, they will # always be "newer" than the prebuilt files inside the jar, and thus # make will always rebuild them. (We could "hide" the JCE source in a # separate directory, but that would make the build logic for JDK and # OpenJDK more complicated.) # Thus in either situation, we shouldn't use these files. # To make sure the classes were built with the right compiler options, # delete the existing files in $(CLASSBINDIR), rebuild the right way in a # directory under $(TEMPDIR), then copy the files back to # $(CLASSBINDIR). Building in $(TEMPDIR) allows us to use our make # infrastructure without modification: .classes.list, macros, etc. # The list of directories that will be remade from scratch, using the # Since the -C option to jar is used below, each directory entry must be # preceded with the appropriate directory to "cd" into. # Build jce.jar, then replace the previously built JCE files in the # classes directory with these. This ensures we have consistently built # files throughout the workspaces. # ===================================================== # Build the unsigned policy files. # these settings work for Sun's situation. This note is not # legal guidance, you must still resolve any export/import issues # counsel for more information. # Build the unsigned unlimited policy files. # Build the unsigned limited policy files. # NOTE: We currently do not place restrictions on our limited export # policy. This was not a typo. # ===================================================== # Sign the various jar files. Not needed for OpenJDK. # We have to remove the build dependency, otherwise, we'll try to rebuild it # which we can't do on a read-only filesystem. # ===================================================== # We have to remove the build dependency, otherwise, we'll try to rebuild it # which we can't do on a read-only filesystem. @
$(ECHO) ">>>Obfuscating JCE framework..." @
# due to an obfus problem. Manually copy them to the build directory @
# so that they are included in the jce.jar file.# The current obfuscator has a limitation in that it currently only # supports up to v49 class file format. Force v49 classfiles in our # ===================================================== # Create the Release Engineering files. Obfuscated builds, # unlimited policy file distribution, etc. # ===================================================== # Install jce.jar, depending on which type is requested. # Install the appropriate policy file, depending on the type of build. @
$(ECHO) "\n>>>Installing prebuilt JCE framework..."# =====================================================