1 #
2 # Copyright (c) 2003, 2010, Oracle and/or its affiliates. All rights reserved.
3 # DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
4 #
5 # This code is free software; you can redistribute it and/or modify it
6 # under the terms of the GNU General Public License version 2 only, as
7 # published by the Free Software Foundation. Oracle designates this
8 # particular file as subject to the "Classpath" exception as provided
9 # by Oracle in the LICENSE file that accompanied this code.
10 #
11 # This code is distributed in the hope that it will be useful, but WITHOUT
12 # ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
13 # FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
14 # version 2 for more details (a copy is included in the LICENSE file that
15 # accompanied this code).
16 #
17 # You should have received a copy of the GNU General Public License version
18 # 2 along with this work; if not, write to the Free Software Foundation,
19 # Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
20 #
21 # Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
22 # or visit www.oracle.com if you need additional information or have any
23 # questions.
24 #
25
26 #
27 # Makefile for building sunpkcs11.jar and native libraries.
28 #
29 # This file was derived from make/com/sun/crypto/provider/Makefile.
30 #
31
32 #
33 # (The terms "OpenJDK" and "JDK" below refer to OpenJDK and Sun JDK builds
34 # respectively.)
35 #
36 # JCE builds are very different between OpenJDK and JDK. The OpenJDK JCE
37 # jar files do not require signing, but those for JDK do. If an unsigned
38 # jar file is installed into JDK, things will break when the crypto
39 # routines are called.
40 #
41 # This Makefile does the "real" build of the JCE files. For OpenJDK,
42 # the jar files built here are installed directly into the OpenJDK.
43 #
44 # For JDK, the binaries use pre-built/pre-signed binary files stored in
45 # the closed workspace that are not shipped in the OpenJDK workspaces.
46 # We still build the JDK files here to verify the files compile, and in
47 # preparation for possible signing. Developers working on JCE in JDK
48 # must sign the JCE files before testing. The JCE signing key is kept
49 # separate from the JDK workspace to prevent its disclosure.
50 #
51 # SPECIAL NOTE TO JCE/JDK developers: The source files must eventually
52 # be built, signed, and then the resulting jar files MUST BE CHECKED
53 # INTO THE CLOSED PART OF THE WORKSPACE*. This separate step *MUST NOT
54 # BE FORGOTTEN*, otherwise a bug fixed in the source code will not be
55 # reflected in the shipped binaries. The "release" target should be
56 # used to generate the required files.
57 #
58 # There are a number of targets to help both JDK/OpenJDK developers.
59 #
60 # Main Targets (JDK/OPENJDK):
61 #
62 # all/clobber/clean The usual, plus the native libraries.
63 # If OpenJDK, installs sunpkcs11.jar.
64 # If JDK, installs prebuilt
65 # sunpkcs11.jar.
66 #
67 # jar Builds/installs sunpkcs11.jar
68 # If OpenJDK, does not sign.
69 # If JDK, tries to sign.
70 #
71 # Other lesser-used Targets (JDK/OPENJDK):
72 #
73 # build-jar Builds sunpkcs11.jar
74 # (does not sign/install)
75 #
76 # install-jar Alias for "jar" above.
77 #
78 # Other targets (JDK only):
79 #
80 # sign Alias for sign-jar
81 # sign-jar Builds/signs sunpkcs11.jar (no install)
82 #
83 # release Builds all targets in preparation
84 # for workspace integration.
85 #
86 # install-prebuilt Installs the pre-built jar files
87 #
88 # This makefile was written to support parallel target execution.
89 #
90
91 BUILDDIR = ../../..
92 MODULE = security-sunpkcs11
93 PACKAGE = sun.security.pkcs11
94 LIBRARY = j2pkcs11
95 PRODUCT = sun
96
97 #
98 # The following is for when we need to do postprocessing
99 # (signing/obfuscation) against a read-only build. If the OUTPUTDIR
100 # isn't writable, the build currently crashes out.
101 #
102 ifndef OPENJDK
103 ifdef ALT_JCE_BUILD_DIR
104 # =====================================================
105 # Where to place the output, in case we're building from a read-only
106 # build area. (e.g. a release engineering build.)
107 JCE_BUILD_DIR=${ALT_JCE_BUILD_DIR}
108 IGNORE_WRITABLE_OUTPUTDIR_TEST=true
109 else
110 JCE_BUILD_DIR=${TEMPDIR}
111 endif
112 endif
113
114 include $(BUILDDIR)/common/Defs.gmk
115
116 #
117 # C and Java Files
118 #
119 include FILES_c.gmk
120
121 #
122 # Subdirectories of these are automatically included.
123 #
124 AUTO_FILES_JAVA_DIRS = sun/security/pkcs11
125
126 #
127 # Java files that define native methods
128 #
129 FILES_export = \
130 sun/security/pkcs11/wrapper/PKCS11.java \
131 sun/security/pkcs11/Secmod.java
132
133 #
134 # Find native code
135 #
136 vpath %.c \
137 $(SHARE_SRC)/native/sun/security/pkcs11/wrapper \
138 $(PLATFORM_SRC)/native/sun/security/pkcs11/wrapper \
139
140 #
141 # Find include files
142 #
143 OTHER_INCLUDES += \
144 -I$(SHARE_SRC)/native/sun/security/pkcs11/wrapper \
145 -I$(PLATFORM_SRC)/native/sun/security/pkcs11/wrapper
146
147 #
148 # Rules
149 #
150 CLASSDESTDIR = $(TEMPDIR)/classes
151 JAVAHFLAGS += -classpath $(CLASSDESTDIR)
152
153 include $(BUILDDIR)/common/Mapfile-vers.gmk
154
155 include $(BUILDDIR)/common/Library.gmk
156
157 #
158 # Libraries to link
159 #
160 ifeq ($(PLATFORM), windows)
161 OTHER_LDLIBS = $(JVMLIB)
162 else
163 OTHER_LDLIBS = -ldl $(JVMLIB)
164 endif
165
166 # Other config files
167 SUNPKCS11_CFG =
168
169 ifeq ($(PLATFORM), solaris)
170 SUNPKCS11_CFG = sunpkcs11-cfg
171 endif # PLATFORM
172
173 SUNPKCS11_CFG_SRC = $(TOPDIR)/src/share/lib/security/sunpkcs11-solaris.cfg
174 SUNPKCS11_CFG_BUILD = $(LIBDIR)/security/sunpkcs11-solaris.cfg
175
176 #
177 # We use a variety of subdirectories in the $(TEMPDIR) depending on what
178 # part of the build we're doing. Both OPENJDK/JDK builds are initially
179 # done in the unsigned area. When files are signed in JDK,
180 # they will be placed in the appropriate area.
181 #
182 UNSIGNED_DIR = $(TEMPDIR)/unsigned
183
184 #
185 # Rules
186 #
187
188 ifdef OPENJDK
189 all: $(SUNPKCS11_CFG) build-jar install-jar
190 else
191 all: $(SUNPKCS11_CFG) build-jar install-prebuilt
192 $(build-warning)
193 endif
194
195 sunpkcs11-cfg: $(SUNPKCS11_CFG_BUILD)
196
197 $(SUNPKCS11_CFG_BUILD): $(SUNPKCS11_CFG_SRC)
198 $(install-file)
199
200 include $(BUILDDIR)/javax/crypto/Defs-jce.gmk
201
202
203 # =====================================================
204 # Build the unsigned sunpkcs11.jar file.
205 #
206
207 JAR_DESTFILE = $(EXTDIR)/sunpkcs11.jar
208
209 #
210 # The sunpkcs11.jar needs to be in the extension class directory,
211 # therefore none of its classes can appear in $(CLASSBINDIR).
212 # Currently no one is using any of the PKCS11 internals, so these files
213 # should not have been built.
214 #
215
216 #
217 # Since the -C option to jar is used below, each directory entry must be
218 # preceded with the appropriate directory to "cd" into.
219 #
220 JAR_DIRS = $(patsubst %, -C $(CLASSDESTDIR) %, $(AUTO_FILES_JAVA_DIRS))
221
222 build-jar: $(UNSIGNED_DIR)/sunpkcs11.jar
223
224 #
225 # Build sunpkcs11.jar.
226 #
227 $(UNSIGNED_DIR)/sunpkcs11.jar: build
228 $(prep-target)
229 $(BOOT_JAR_CMD) cf $@ $(JAR_DIRS) \
230 $(BOOT_JAR_JFLAGS)
231 @$(java-vm-cleanup)
232
233
234 ifndef OPENJDK
235 # =====================================================
236 # Sign the provider jar file. Not needed for OpenJDK.
237 #
238
239 SIGNED_DIR = $(JCE_BUILD_DIR)/signed
240
241 sign: sign-jar
242
243 sign-jar: $(SIGNED_DIR)/sunpkcs11.jar
244
245 ifndef ALT_JCE_BUILD_DIR
246 $(SIGNED_DIR)/sunpkcs11.jar: $(UNSIGNED_DIR)/sunpkcs11.jar
247 else
248 #
249 # We have to remove the build dependency, otherwise, we'll try to rebuild it
250 # which we can't do on a read-only filesystem.
251 #
252 $(SIGNED_DIR)/sunpkcs11.jar:
253 @if [ ! -r $(UNSIGNED_DIR)/sunpkcs11.jar ] ; then \
254 $(ECHO) "Couldn't find $(UNSIGNED_DIR)/sunpkcs11.jar"; \
255 exit 1; \
256 fi
257 endif
258 $(call sign-file, $(UNSIGNED_DIR)/sunpkcs11.jar)
259
260
261 # =====================================================
262 # Create the Release Engineering files. Signed builds, etc.
263 #
264
265 release: $(SIGNED_DIR)/sunpkcs11.jar
266 $(RM) $(JCE_BUILD_DIR)/release/sunpkcs11.jar
267 $(MKDIR) -p $(JCE_BUILD_DIR)/release
268 $(CP) $(SIGNED_DIR)/sunpkcs11.jar $(JCE_BUILD_DIR)/release
269 $(release-warning)
270
271 endif # OPENJDK
272
273
274 # =====================================================
275 # Install routines.
276 #
277
278 #
279 # Install sunpkcs11.jar, depending on which type is requested.
280 #
281 install-jar jar: $(JAR_DESTFILE)
282 ifndef OPENJDK
283 $(release-warning)
284 endif
285
286 ifdef OPENJDK
287 $(JAR_DESTFILE): $(UNSIGNED_DIR)/sunpkcs11.jar
288 else
289 $(JAR_DESTFILE): $(SIGNED_DIR)/sunpkcs11.jar
290 endif
291 $(install-non-module-file)
292
293 ifndef OPENJDK
294 install-prebuilt:
295 @$(ECHO) "\n>>>Installing prebuilt SunPKCS11 provider..."
296 $(RM) $(JAR_DESTFILE)
297 $(CP) $(PREBUILT_DIR)/pkcs11/sunpkcs11.jar $(JAR_DESTFILE)
298 endif
299
300
301 # =====================================================
302 # Support routines.
303 #
304
305 clobber clean::
306 $(RM) -r $(JAR_DESTFILE) $(TEMPDIR) $(JCE_BUILD_DIR)
307 $(RM) $(SUNPKCS11_CFG_BUILD)
308
309 .PHONY: build-jar jar install-jar
310 ifndef OPENJDK
311 .PHONY: sign sign-jar release install-prebuilt
312 endif