1 #
2 # Copyright (c) 2003, 2010, Oracle and/or its affiliates. All rights reserved.
3 # DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
4 #
5 # This code is free software; you can redistribute it and/or modify it
6 # under the terms of the GNU General Public License version 2 only, as
7 # published by the Free Software Foundation. Oracle designates this
8 # particular file as subject to the "Classpath" exception as provided
9 # by Oracle in the LICENSE file that accompanied this code.
10 #
11 # This code is distributed in the hope that it will be useful, but WITHOUT
12 # ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
13 # FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
14 # version 2 for more details (a copy is included in the LICENSE file that
15 # accompanied this code).
16 #
17 # You should have received a copy of the GNU General Public License version
18 # 2 along with this work; if not, write to the Free Software Foundation,
19 # Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
20 #
21 # Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
22 # or visit www.oracle.com if you need additional information or have any
23 # questions.
24 #
25
26 #
27 # Makefile for building sunpkcs11.jar and native libraries.
28 #
29 # This file was derived from make/com/sun/crypto/provider/Makefile.
30 #
31
32 #
33 # (The terms "OpenJDK" and "JDK" below refer to OpenJDK and Sun JDK builds
34 # respectively.)
35 #
36 # JCE builds are very different between OpenJDK and JDK. The OpenJDK JCE
37 # jar files do not require signing, but those for JDK do. If an unsigned
38 # jar file is installed into JDK, things will break when the crypto
39 # routines are called.
40 #
41 # This Makefile does the "real" build of the JCE files. For OpenJDK,
42 # the jar files built here are installed directly into the OpenJDK.
43 #
44 # For JDK, the binaries use pre-built/pre-signed binary files stored in
45 # the closed workspace that are not shipped in the OpenJDK workspaces.
46 # We still build the JDK files here to verify the files compile, and in
47 # preparation for possible signing. Developers working on JCE in JDK
48 # must sign the JCE files before testing. The JCE signing key is kept
49 # separate from the JDK workspace to prevent its disclosure.
50 #
51 # SPECIAL NOTE TO JCE/JDK developers: The source files must eventually
52 # be built, signed, and then the resulting jar files MUST BE CHECKED
53 # INTO THE CLOSED PART OF THE WORKSPACE*. This separate step *MUST NOT
54 # BE FORGOTTEN*, otherwise a bug fixed in the source code will not be
55 # reflected in the shipped binaries. The "release" target should be
56 # used to generate the required files.
57 #
58 # There are a number of targets to help both JDK/OpenJDK developers.
59 #
60 # Main Targets (JDK/OPENJDK):
61 #
62 # all/clobber/clean The usual, plus the native libraries.
63 # If OpenJDK, installs sunpkcs11.jar.
64 # If JDK, installs prebuilt
65 # sunpkcs11.jar.
66 #
67 # jar Builds/installs sunpkcs11.jar
68 # If OpenJDK, does not sign.
69 # If JDK, tries to sign.
70 #
71 # Other lesser-used Targets (JDK/OPENJDK):
72 #
73 # build-jar Builds sunpkcs11.jar
74 # (does not sign/install)
75 #
76 # install-jar Alias for "jar" above.
77 #
78 # Other targets (JDK only):
79 #
80 # sign Alias for sign-jar
81 # sign-jar Builds/signs sunpkcs11.jar (no install)
82 #
83 # release Builds all targets in preparation
84 # for workspace integration.
85 #
86 # install-prebuilt Installs the pre-built jar files
87 #
88 # This makefile was written to support parallel target execution.
89 #
90
91 BUILDDIR = ../../..
92 PACKAGE = sun.security.pkcs11
93 LIBRARY = j2pkcs11
94 PRODUCT = sun
95
96 #
97 # The following is for when we need to do postprocessing
98 # (signing/obfuscation) against a read-only build. If the OUTPUTDIR
99 # isn't writable, the build currently crashes out.
100 #
101 ifndef OPENJDK
102 ifdef ALT_JCE_BUILD_DIR
103 # =====================================================
104 # Where to place the output, in case we're building from a read-only
105 # build area. (e.g. a release engineering build.)
106 JCE_BUILD_DIR=${ALT_JCE_BUILD_DIR}
107 IGNORE_WRITABLE_OUTPUTDIR_TEST=true
108 else
109 JCE_BUILD_DIR=${TEMPDIR}
110 endif
111 endif
112
113 include $(BUILDDIR)/common/Defs.gmk
114
115 #
116 # C and Java Files
117 #
118 include FILES_c.gmk
119
120 #
121 # Subdirectories of these are automatically included.
122 #
123 AUTO_FILES_JAVA_DIRS = sun/security/pkcs11
124
125 #
126 # Java files that define native methods
127 #
128 FILES_export = \
129 sun/security/pkcs11/wrapper/PKCS11.java \
130 sun/security/pkcs11/Secmod.java
131
132 #
133 # Find native code
134 #
135 vpath %.c \
136 $(SHARE_SRC)/native/sun/security/pkcs11/wrapper \
137 $(PLATFORM_SRC)/native/sun/security/pkcs11/wrapper \
138
139 #
140 # Find include files
141 #
142 OTHER_INCLUDES += \
143 -I$(SHARE_SRC)/native/sun/security/pkcs11/wrapper \
144 -I$(PLATFORM_SRC)/native/sun/security/pkcs11/wrapper
145
146 #
147 # Rules
148 #
149 CLASSDESTDIR = $(TEMPDIR)/classes
150 JAVAHFLAGS += -classpath $(CLASSDESTDIR)
151
152 include $(BUILDDIR)/common/Mapfile-vers.gmk
153
154 include $(BUILDDIR)/common/Library.gmk
155
156 #
157 # Libraries to link
158 #
159 ifeq ($(PLATFORM), windows)
160 OTHER_LDLIBS = $(JVMLIB)
161 else
162 OTHER_LDLIBS = -ldl $(JVMLIB)
163 endif
164
165 # Other config files
166 SUNPKCS11_CFG =
167
168 ifeq ($(PLATFORM), solaris)
169 SUNPKCS11_CFG = sunpkcs11-cfg
170 endif # PLATFORM
171
172 SUNPKCS11_CFG_SRC = $(TOPDIR)/src/share/lib/security/sunpkcs11-solaris.cfg
173 SUNPKCS11_CFG_BUILD = $(LIBDIR)/security/sunpkcs11-solaris.cfg
174
175 #
176 # We use a variety of subdirectories in the $(TEMPDIR) depending on what
177 # part of the build we're doing. Both OPENJDK/JDK builds are initially
178 # done in the unsigned area. When files are signed in JDK,
179 # they will be placed in the appropriate area.
180 #
181 UNSIGNED_DIR = $(TEMPDIR)/unsigned
182
183 #
184 # Rules
185 #
186
187 ifdef OPENJDK
188 all: $(SUNPKCS11_CFG) build-jar install-jar
189 else
190 all: $(SUNPKCS11_CFG) build-jar install-prebuilt
191 $(build-warning)
192 endif
193
194 sunpkcs11-cfg: $(SUNPKCS11_CFG_BUILD)
195
196 $(SUNPKCS11_CFG_BUILD): $(SUNPKCS11_CFG_SRC)
197 $(install-file)
198
199 include $(BUILDDIR)/javax/crypto/Defs-jce.gmk
200
201
202 # =====================================================
203 # Build the unsigned sunpkcs11.jar file.
204 #
205
206 JAR_DESTFILE = $(EXTDIR)/sunpkcs11.jar
207
208 #
209 # The sunpkcs11.jar needs to be in the extension class directory,
210 # therefore none of its classes can appear in $(CLASSBINDIR).
211 # Currently no one is using any of the PKCS11 internals, so these files
212 # should not have been built.
213 #
214
215 #
216 # Since the -C option to jar is used below, each directory entry must be
217 # preceded with the appropriate directory to "cd" into.
218 #
219 JAR_DIRS = $(patsubst %, -C $(CLASSDESTDIR) %, $(AUTO_FILES_JAVA_DIRS))
220
221 build-jar: $(UNSIGNED_DIR)/sunpkcs11.jar
222
223 #
224 # Build sunpkcs11.jar.
225 #
226 $(UNSIGNED_DIR)/sunpkcs11.jar: build
227 $(prep-target)
228 $(BOOT_JAR_CMD) cf $@ $(JAR_DIRS) \
229 $(BOOT_JAR_JFLAGS)
230 @$(java-vm-cleanup)
231
232
233 ifndef OPENJDK
234 # =====================================================
235 # Sign the provider jar file. Not needed for OpenJDK.
236 #
237
238 SIGNED_DIR = $(JCE_BUILD_DIR)/signed
239
240 sign: sign-jar
241
242 sign-jar: $(SIGNED_DIR)/sunpkcs11.jar
243
244 ifndef ALT_JCE_BUILD_DIR
245 $(SIGNED_DIR)/sunpkcs11.jar: $(UNSIGNED_DIR)/sunpkcs11.jar
246 else
247 #
248 # We have to remove the build dependency, otherwise, we'll try to rebuild it
249 # which we can't do on a read-only filesystem.
250 #
251 $(SIGNED_DIR)/sunpkcs11.jar:
252 @if [ ! -r $(UNSIGNED_DIR)/sunpkcs11.jar ] ; then \
253 $(ECHO) "Couldn't find $(UNSIGNED_DIR)/sunpkcs11.jar"; \
254 exit 1; \
255 fi
256 endif
257 $(call sign-file, $(UNSIGNED_DIR)/sunpkcs11.jar)
258
259
260 # =====================================================
261 # Create the Release Engineering files. Signed builds, etc.
262 #
263
264 release: $(SIGNED_DIR)/sunpkcs11.jar
265 $(RM) $(JCE_BUILD_DIR)/release/sunpkcs11.jar
266 $(MKDIR) -p $(JCE_BUILD_DIR)/release
267 $(CP) $(SIGNED_DIR)/sunpkcs11.jar $(JCE_BUILD_DIR)/release
268 $(release-warning)
269
270 endif # OPENJDK
271
272
273 # =====================================================
274 # Install routines.
275 #
276
277 #
278 # Install sunpkcs11.jar, depending on which type is requested.
279 #
280 install-jar jar: $(JAR_DESTFILE)
281 ifndef OPENJDK
282 $(release-warning)
283 endif
284
285 ifdef OPENJDK
286 $(JAR_DESTFILE): $(UNSIGNED_DIR)/sunpkcs11.jar
287 else
288 $(JAR_DESTFILE): $(SIGNED_DIR)/sunpkcs11.jar
289 endif
290 $(install-file)
291
292 ifndef OPENJDK
293 install-prebuilt:
294 @$(ECHO) "\n>>>Installing prebuilt SunPKCS11 provider..."
295 $(RM) $(JAR_DESTFILE)
296 $(CP) $(PREBUILT_DIR)/pkcs11/sunpkcs11.jar $(JAR_DESTFILE)
297 endif
298
299
300 # =====================================================
301 # Support routines.
302 #
303
304 clobber clean::
305 $(RM) -r $(JAR_DESTFILE) $(TEMPDIR) $(JCE_BUILD_DIR)
306 $(RM) $(SUNPKCS11_CFG_BUILD)
307
308 .PHONY: build-jar jar install-jar
309 ifndef OPENJDK
310 .PHONY: sign sign-jar release install-prebuilt
311 endif