# # Copyright (c) 2013, 2016, Oracle and/or its affiliates. All rights reserved. # DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER. # # This code is free software; you can redistribute it and/or modify it # under the terms of the GNU General Public License version 2 only, as # published by the Free Software Foundation. Oracle designates this # particular file as subject to the "Classpath" exception as provided # by Oracle in the LICENSE file that accompanied this code. # # This code is distributed in the hope that it will be useful, but WITHOUT # ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or # FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License # version 2 for more details (a copy is included in the LICENSE file that # accompanied this code). # # You should have received a copy of the GNU General Public License version # 2 along with this work; if not, write to the Free Software Foundation, # Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. # # Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA # or visit www.oracle.com if you need additional information or have any # questions. # default: all include $(SPEC) include MakeBase.gmk include JavaCompilation.gmk include Setup.gmk # The jars created in this file are required for the exploded jdk image to function and # cannot wait to be built in the images target. ########################################################################################## # Create manifest for security jars # # Include these extra attributes for now, should probably take out. # MAINMANIFEST := $(JDK_TOPDIR)/make/data/mainmanifest/manifest.mf JCE_MANIFEST := $(JDK_OUTPUTDIR)/lib/_the.security.manifest.mf $(JCE_MANIFEST): $(MAINMANIFEST) $(MKDIR) -p $(@D) $(RM) $@ $@.tmp $(SED) -e "s#@@RELEASE@@#$(JDK_VERSION)#" \ -e "s#@@COMPANY_NAME@@#$(COMPANY_NAME)#" \ $(MAINMANIFEST) >> $@.tmp $(ECHO) "Extension-Name: javax.crypto" >> $@.tmp $(ECHO) "Implementation-Vendor-Id: com.sun" >> $@.tmp $(MV) $@.tmp $@ ########################################################################################## # For security and crypto jars, always build the jar, but for closed, install the prebuilt # signed version instead of the newly built jar. Unsigned jars are treated as intermediate # targets and explicitly added to the TARGETS list. For open, signing is not needed. See # SignJars.gmk for more information. # # The source for the crypto jars is not available for all licensees. The BUILD_CRYPTO # variable is set to no if these jars can't be built to skip that step of the build. # Note that for OPENJDK, the build will fail if BUILD_CRYPTO=no since then there is no # other way to get the jars than to build them. SUNPKCS11_JAR_DST := $(JDK_OUTPUTDIR)/lib/ext/sunpkcs11.jar SUNPKCS11_JAR_UNSIGNED := $(JDK_OUTPUTDIR)/jce/unsigned/sunpkcs11.jar $(eval $(call SetupArchive,BUILD_SUNPKCS11_JAR, , \ SRCS := $(JDK_OUTPUTDIR)/classes_security, \ SUFFIXES := .class, \ INCLUDES := sun/security/pkcs11, \ JAR := $(SUNPKCS11_JAR_UNSIGNED), \ MANIFEST := $(JCE_MANIFEST), \ SKIP_METAINF := true)) $(SUNPKCS11_JAR_UNSIGNED): $(JCE_MANIFEST) ifndef OPENJDK SUNPKCS11_JAR_SRC := $(JDK_TOPDIR)/make/closed/tools/crypto/pkcs11/sunpkcs11.jar $(SUNPKCS11_JAR_DST): $(SUNPKCS11_JAR_SRC) @$(ECHO) $(LOG_INFO) Copying prebuilt $(@F) $(install-file) else $(SUNPKCS11_JAR_DST): $(SUNPKCS11_JAR_UNSIGNED) $(install-file) endif TARGETS += $(SUNPKCS11_JAR_UNSIGNED) $(SUNPKCS11_JAR_DST) ########################################################################################## SUNEC_JAR_DST := $(JDK_OUTPUTDIR)/lib/ext/sunec.jar SUNEC_JAR_UNSIGNED := $(JDK_OUTPUTDIR)/jce/unsigned/sunec.jar $(eval $(call SetupArchive,BUILD_SUNEC_JAR, , \ SRCS := $(JDK_OUTPUTDIR)/classes_security, \ SUFFIXES := .class, \ INCLUDES := sun/security/ec, \ JAR := $(SUNEC_JAR_UNSIGNED), \ MANIFEST := $(JCE_MANIFEST), \ SKIP_METAINF := true)) $(SUNEC_JAR_UNSIGNED): $(JCE_MANIFEST) ifndef OPENJDK SUNEC_JAR_SRC := $(JDK_TOPDIR)/make/closed/tools/crypto/ec/sunec.jar $(SUNEC_JAR_DST): $(SUNEC_JAR_SRC) @$(ECHO) $(LOG_INFO) Copying prebuilt $(@F) $(install-file) else $(SUNEC_JAR_DST): $(SUNEC_JAR_UNSIGNED) $(install-file) endif TARGETS += $(SUNEC_JAR_UNSIGNED) $(SUNEC_JAR_DST) ########################################################################################## SUNJCE_PROVIDER_JAR_DST := $(JDK_OUTPUTDIR)/lib/ext/sunjce_provider.jar SUNJCE_PROVIDER_JAR_UNSIGNED := $(JDK_OUTPUTDIR)/jce/unsigned/sunjce_provider.jar ifneq ($(BUILD_CRYPTO), no) $(eval $(call SetupArchive,BUILD_SUNJCE_PROVIDER_JAR, , \ SRCS := $(JDK_OUTPUTDIR)/classes_security, \ SUFFIXES := .class, \ INCLUDES := com/sun/crypto/provider, \ JAR := $(SUNJCE_PROVIDER_JAR_UNSIGNED), \ MANIFEST := $(JCE_MANIFEST), \ SKIP_METAINF := true)) $(SUNJCE_PROVIDER_JAR_UNSIGNED): $(JCE_MANIFEST) TARGETS += $(SUNJCE_PROVIDER_JAR_UNSIGNED) endif ifndef OPENJDK SUNJCE_PROVIDER_JAR_SRC := $(JDK_TOPDIR)/make/closed/tools/crypto/jce/sunjce_provider.jar $(SUNJCE_PROVIDER_JAR_DST): $(SUNJCE_PROVIDER_JAR_SRC) @$(ECHO) $(LOG_INFO) Copying prebuilt $(@F) $(install-file) else $(SUNJCE_PROVIDER_JAR_DST): $(SUNJCE_PROVIDER_JAR_UNSIGNED) $(install-file) endif TARGETS += $(SUNJCE_PROVIDER_JAR_DST) ########################################################################################## JCE_JAR_DST := $(JDK_OUTPUTDIR)/lib/jce.jar JCE_JAR_UNSIGNED := $(JDK_OUTPUTDIR)/jce/unsigned/jce.jar ifneq ($(BUILD_CRYPTO), no) $(eval $(call SetupArchive,BUILD_JCE_JAR, , \ SRCS := $(JDK_OUTPUTDIR)/classes_security, \ SUFFIXES := .class, \ INCLUDES := javax/crypto sun/security/internal, \ JAR := $(JCE_JAR_UNSIGNED), \ MANIFEST := $(JCE_MANIFEST), \ SKIP_METAINF := true)) $(JCE_JAR_UNSIGNED): $(JCE_MANIFEST) TARGETS += $(JCE_JAR_UNSIGNED) endif ifndef OPENJDK JCE_JAR_SRC := $(JDK_TOPDIR)/make/closed/tools/crypto/jce/jce.jar $(JCE_JAR_DST): $(JCE_JAR_SRC) @$(ECHO) $(LOG_INFO) Copying prebuilt $(@F) $(install-file) else $(JCE_JAR_DST): $(JCE_JAR_UNSIGNED) $(install-file) endif TARGETS += $(JCE_JAR_DST) ########################################################################################## US_EXPORT_POLICY_JAR_UNLIMITED_DST := \ $(JDK_OUTPUTDIR)/lib/security/policy/unlimited/US_export_policy.jar US_EXPORT_POLICY_JAR_LIMITED_DST := \ $(JDK_OUTPUTDIR)/lib/security/policy/limited/US_export_policy.jar ifneq ($(BUILD_CRYPTO), no) US_EXPORT_POLICY_JAR_LIMITED_UNSIGNED := \ $(JDK_OUTPUTDIR)/jce/unsigned/policy/limited/US_export_policy.jar US_EXPORT_POLICY_JAR_UNLIMITED_UNSIGNED := \ $(JDK_OUTPUTDIR)/jce/unsigned/policy/unlimited/US_export_policy.jar # # TODO fix so that SetupArchive does not write files into SRCS # then we don't need this extra copying # # NOTE: We currently do not place restrictions on our limited export # policy. This was not a typo. This means we are shipping the same file # for both limimted and unlimited US_export_policy.jar. # US_EXPORT_POLICY_JAR_SRC_DIR := $(JDK_TOPDIR)/make/data/cryptopolicy/unlimited US_EXPORT_POLICY_JAR_TMP := \ $(JDK_OUTPUTDIR)/jce/unsigned/policy/unlimited/US_export_policy_jar.tmp $(US_EXPORT_POLICY_JAR_TMP)/%: $(US_EXPORT_POLICY_JAR_SRC_DIR)/% $(install-file) US_EXPORT_POLICY_JAR_DEPS := $(US_EXPORT_POLICY_JAR_TMP)/default_US_export.policy $(eval $(call SetupArchive,BUILD_US_EXPORT_POLICY_JAR, $(US_EXPORT_POLICY_JAR_DEPS), \ SRCS := $(US_EXPORT_POLICY_JAR_TMP), \ SUFFIXES := .policy, \ JAR := $(US_EXPORT_POLICY_JAR_UNLIMITED_UNSIGNED), \ EXTRA_MANIFEST_ATTR := Crypto-Strength: unlimited, \ SKIP_METAINF := true)) $(US_EXPORT_POLICY_JAR_LIMITED_UNSIGNED): $(US_EXPORT_POLICY_JAR_UNLIMITED_UNSIGNED) $(ECHO) $(LOG_INFO) Copying unlimited $(patsubst $(OUTPUT_ROOT)/%,%,$@) $(install-file) TARGETS += $(US_EXPORT_POLICY_JAR_LIMITED_UNSIGNED) \ $(US_EXPORT_POLICY_JAR_UNLIMITED_UNSIGNED) endif ifndef OPENJDK $(US_EXPORT_POLICY_JAR_UNLIMITED_DST): \ $(JDK_TOPDIR)/make/closed/tools/crypto/jce/unlimited/US_export_policy.jar $(ECHO) $(LOG_INFO) Copying prebuilt $(@F) $(install-file) $(US_EXPORT_POLICY_JAR_LIMITED_DST): \ $(JDK_TOPDIR)/make/closed/tools/crypto/jce/limited/US_export_policy.jar $(ECHO) $(LOG_INFO) Copying prebuilt $(@F) $(install-file) else $(US_EXPORT_POLICY_JAR_UNLIMITED_DST): $(US_EXPORT_POLICY_JAR_UNLIMITED_UNSIGNED) $(install-file) $(US_EXPORT_POLICY_JAR_LIMITED_DST): $(US_EXPORT_POLICY_JAR_LIMITED_UNSIGNED) $(install-file) endif TARGETS += $(US_EXPORT_POLICY_JAR_UNLIMITED_DST) $(US_EXPORT_POLICY_JAR_LIMITED_DST) ########################################################################################## LOCAL_POLICY_JAR_LIMITED_DST := \ $(JDK_OUTPUTDIR)/lib/security/policy/limited/local_policy.jar LOCAL_POLICY_JAR_UNLIMITED_DST := \ $(JDK_OUTPUTDIR)/lib/security/policy/unlimited/local_policy.jar ifneq ($(BUILD_CRYPTO), no) LOCAL_POLICY_JAR_LIMITED_UNSIGNED := \ $(JDK_OUTPUTDIR)/jce/unsigned/policy/limited/local_policy.jar LOCAL_POLICY_JAR_UNLIMITED_UNSIGNED := \ $(JDK_OUTPUTDIR)/jce/unsigned/policy/unlimited/local_policy.jar # # TODO fix so that SetupArchive does not write files into SRCS # then we don't need this extra copying # LOCAL_POLICY_JAR_LIMITED_TMP := \ $(JDK_OUTPUTDIR)/jce/unsigned/policy/limited/local_policy_jar.tmp LOCAL_POLICY_JAR_UNLIMITED_TMP := \ $(JDK_OUTPUTDIR)/jce/unsigned/policy/unlimited/local_policy_jar.tmp $(LOCAL_POLICY_JAR_LIMITED_TMP)/%: $(JDK_TOPDIR)/make/data/cryptopolicy/limited/% $(install-file) $(LOCAL_POLICY_JAR_UNLIMITED_TMP)/%: $(JDK_TOPDIR)/make/data/cryptopolicy/unlimited/% $(install-file) $(eval $(call SetupArchive,BUILD_LOCAL_POLICY_JAR_LIMITED, \ $(LOCAL_POLICY_JAR_LIMITED_TMP)/exempt_local.policy \ $(LOCAL_POLICY_JAR_LIMITED_TMP)/default_local.policy, \ SRCS := $(LOCAL_POLICY_JAR_LIMITED_TMP), \ SUFFIXES := .policy, \ JAR := $(LOCAL_POLICY_JAR_LIMITED_UNSIGNED), \ EXTRA_MANIFEST_ATTR := Crypto-Strength: limited, \ SKIP_METAINF := true)) $(eval $(call SetupArchive,BUILD_LOCAL_POLICY_JAR_UNLIMITED, \ $(LOCAL_POLICY_JAR_UNLIMITED_TMP)/default_local.policy, \ SRCS := $(LOCAL_POLICY_JAR_UNLIMITED_TMP), \ SUFFIXES := .policy, \ JAR := $(LOCAL_POLICY_JAR_UNLIMITED_UNSIGNED), \ EXTRA_MANIFEST_ATTR := Crypto-Strength: unlimited, \ SKIP_METAINF := true)) TARGETS += $(LOCAL_POLICY_JAR_LIMITED_UNSIGNED) $(LOCAL_POLICY_JAR_UNLIMITED_UNSIGNED) ifndef OPENJDK $(JDK_OUTPUTDIR)/jce/unsigned/policy/unlimited/README.txt: \ $(JDK_TOPDIR)/make/closed/javax/crypto/doc/README.txt $(install-file) TARGETS += $(JDK_OUTPUTDIR)/jce/unsigned/policy/unlimited/README.txt endif endif ifndef OPENJDK $(LOCAL_POLICY_JAR_UNLIMITED_DST): $(JDK_TOPDIR)/make/closed/tools/crypto/jce/unlimited/local_policy.jar $(ECHO) $(LOG_INFO) Copying prebuilt $(@F) $(install-file) $(LOCAL_POLICY_JAR_LIMITED_DST): $(JDK_TOPDIR)/make/closed/tools/crypto/jce/limited/local_policy.jar $(ECHO) $(LOG_INFO) Copying prebuilt $(@F) $(install-file) else $(LOCAL_POLICY_JAR_UNLIMITED_DST): $(LOCAL_POLICY_JAR_UNLIMITED_UNSIGNED) $(install-file) $(LOCAL_POLICY_JAR_LIMITED_DST): $(LOCAL_POLICY_JAR_LIMITED_UNSIGNED) $(install-file) endif TARGETS += $(LOCAL_POLICY_JAR_UNLIMITED_DST) $(LOCAL_POLICY_JAR_LIMITED_DST) ########################################################################################## ifeq ($(OPENJDK_TARGET_OS), windows) SUNMSCAPI_JAR_DST := $(JDK_OUTPUTDIR)/lib/ext/sunmscapi.jar SUNMSCAPI_JAR_UNSIGNED := $(JDK_OUTPUTDIR)/jce/unsigned/sunmscapi.jar $(eval $(call SetupArchive,BUILD_SUNMSCAPI_JAR, , \ SRCS := $(JDK_OUTPUTDIR)/classes_security, \ SUFFIXES := .class, \ INCLUDES := sun/security/mscapi, \ JAR := $(SUNMSCAPI_JAR_UNSIGNED), \ MANIFEST := $(JCE_MANIFEST), \ SKIP_METAINF := true)) $(SUNMSCAPI_JAR_UNSIGNED): $(JCE_MANIFEST) ifndef OPENJDK SUNMSCAPI_JAR_SRC := $(JDK_TOPDIR)/make/closed/tools/crypto/mscapi/sunmscapi.jar $(SUNMSCAPI_JAR_DST): $(SUNMSCAPI_JAR_SRC) @$(ECHO) $(LOG_INFO) Copying prebuilt $(@F) $(install-file) else $(SUNMSCAPI_JAR_DST): $(SUNMSCAPI_JAR_UNSIGNED) $(install-file) endif TARGETS += $(SUNMSCAPI_JAR_UNSIGNED) $(SUNMSCAPI_JAR_DST) endif ########################################################################################## ifeq ($(OPENJDK_TARGET_OS), solaris) ifndef OPENJDK UCRYPTO_JAR_DST := $(JDK_OUTPUTDIR)/lib/ext/ucrypto.jar UCRYPTO_JAR_UNSIGNED := $(JDK_OUTPUTDIR)/jce/unsigned/ucrypto.jar UCRYPTO_JAR_SRC := $(JDK_TOPDIR)/make/closed/tools/crypto/ucrypto/ucrypto.jar $(eval $(call SetupArchive,BUILD_UCRYPTO_JAR, , \ SRCS := $(JDK_OUTPUTDIR)/classes_security, \ SUFFIXES := .class, \ INCLUDES := com/oracle/security/ucrypto, \ JAR := $(UCRYPTO_JAR_UNSIGNED), \ MANIFEST := $(JCE_MANIFEST), \ SKIP_METAINF := true)) $(UCRYPTO_JAR_UNSIGNED): $(JCE_MANIFEST) $(UCRYPTO_JAR_DST): $(UCRYPTO_JAR_SRC) @$(ECHO) $(LOG_INFO) Copying prebuilt $(@F) $(install-file) TARGETS += $(UCRYPTO_JAR_UNSIGNED) $(UCRYPTO_JAR_DST) endif endif all: $(TARGETS) .PHONY: default all