1# 2# Copyright (C) 2010 The Android Open Source Project 3# 4# Licensed under the Apache License, Version 2.0 (the "License"); 5# you may not use this file except in compliance with the License. 6# You may obtain a copy of the License at 7# 8# http://www.apache.org/licenses/LICENSE-2.0 9# 10# Unless required by applicable law or agreed to in writing, software 11# distributed under the License is distributed on an "AS IS" BASIS, 12# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 13# See the License for the specific language governing permissions and 14# limitations under the License. 15# 16LOCAL_PATH := $(call my-dir) 17 18# All the files needed for OCSP testing 19all_bc_ocsp_files := $(call all-java-files-under,bcpkix/src/main/java/org/bouncycastle/cert/ocsp) \ 20 $(call all-java-files-under,bcprov/src/main/java/org/bouncycastle/asn1/ocsp) 21 22# used for bouncycastle-hostdex where we want everything for testing 23all_bcprov_src_files := $(filter-out \ 24 $(all_bc_ocsp_files), \ 25 $(call all-java-files-under,bcprov/src/main/java)) 26 27# used for bouncycastle for target where we want to be sure to use OpenSSLDigest 28android_bcprov_src_files := $(filter-out \ 29 bcprov/src/main/java/org/bouncycastle/crypto/digests/AndroidDigestFactoryBouncyCastle.java, \ 30 $(all_bcprov_src_files)) 31 32# used for bouncycastle-host where we can't use OpenSSLDigest 33ri_bcprov_src_files := $(filter-out \ 34 bcprov/src/main/java/org/bouncycastle/crypto/digests/AndroidDigestFactoryOpenSSL.java \ 35 bcprov/src/main/java/org/bouncycastle/crypto/digests/OpenSSLDigest.java, \ 36 $(all_bcprov_src_files)) 37 38# used for host tools, but OCSP is only for testing 39all_bcpkix_src_files := $(filter-out \ 40 $(all_bc_ocsp_files), \ 41 $(call all-java-files-under,bcpkix/src/main/java)) 42 43# These cannot build in the PDK, because the PDK requires all libraries 44# compile against SDK versions. LOCAL_NO_STANDARD_LIBRARIES conflicts with 45# this requirement. 46ifneq ($(TARGET_BUILD_PDK),true) 47 48 # non-jarjar version to build okhttp-tests 49 include $(CLEAR_VARS) 50 LOCAL_MODULE := bouncycastle-nojarjar 51 LOCAL_MODULE_TAGS := optional 52 LOCAL_SRC_FILES := $(android_bcprov_src_files) 53 LOCAL_JAVA_LIBRARIES := core-oj core-libart conscrypt 54 LOCAL_NO_STANDARD_LIBRARIES := true 55 LOCAL_JAVA_LANGUAGE_VERSION := 1.7 56 include $(BUILD_STATIC_JAVA_LIBRARY) 57 58 include $(CLEAR_VARS) 59 LOCAL_MODULE := bouncycastle 60 LOCAL_MODULE_TAGS := optional 61 LOCAL_STATIC_JAVA_LIBRARIES := bouncycastle-nojarjar 62 LOCAL_JAVA_LIBRARIES := core-oj core-libart conscrypt 63 LOCAL_NO_STANDARD_LIBRARIES := true 64 LOCAL_JARJAR_RULES := $(LOCAL_PATH)/jarjar-rules.txt 65 LOCAL_JAVA_LANGUAGE_VERSION := 1.7 66 include $(BUILD_JAVA_LIBRARY) 67 68 # unbundled bouncycastle jar 69 include $(CLEAR_VARS) 70 LOCAL_MODULE := bouncycastle-unbundled 71 LOCAL_MODULE_TAGS := optional 72 LOCAL_SDK_VERSION := 9 73 LOCAL_SRC_FILES := $(ri_bcprov_src_files) 74 include $(BUILD_STATIC_JAVA_LIBRARY) 75 76 # PKIX classes used for testing 77 include $(CLEAR_VARS) 78 LOCAL_MODULE := bouncycastle-bcpkix-nojarjar 79 LOCAL_MODULE_TAGS := optional 80 LOCAL_SRC_FILES := $(all_bcpkix_src_files) 81 LOCAL_JAVA_LIBRARIES := bouncycastle-nojarjar 82 include $(BUILD_STATIC_JAVA_LIBRARY) 83 84 include $(CLEAR_VARS) 85 LOCAL_MODULE := bouncycastle-bcpkix 86 LOCAL_MODULE_TAGS := optional 87 LOCAL_STATIC_JAVA_LIBRARIES := bouncycastle-bcpkix-nojarjar 88 LOCAL_JARJAR_RULES := $(LOCAL_PATH)/jarjar-rules.txt 89 include $(BUILD_STATIC_JAVA_LIBRARY) 90 91 # OCSP classes used for testing 92 include $(CLEAR_VARS) 93 LOCAL_MODULE := bouncycastle-ocsp 94 LOCAL_MODULE_TAGS := optional 95 LOCAL_SRC_FILES := $(all_bc_ocsp_files) 96 LOCAL_JAVA_LIBRARIES := bouncycastle-nojarjar bouncycastle-bcpkix-nojarjar 97 LOCAL_JARJAR_RULES := $(LOCAL_PATH)/jarjar-rules.txt 98 LOCAL_JAVA_LANGUAGE_VERSION := 1.7 99 include $(BUILD_STATIC_JAVA_LIBRARY) 100endif # TARGET_BUILD_PDK != true 101 102# This is used to generate a list of what is unused so it can be removed when bouncycastle is updated. 103# Based on "Finding dead code" example in ProGuard manual at http://proguard.sourceforge.net/ 104.PHONY: bouncycastle-proguard-deadcode 105bouncycastle-proguard-deadcode: $(full_classes_compiled_jar) $(full_java_libs) 106 $(PROGUARD) \ 107 -injars $(full_classes_compiled_jar) \ 108 -libraryjars "$(call normalize-path-list,$(addsuffix (!org/bouncycastle/**.class,!com/android/org/conscrypt/OpenSSLMessageDigest.class),$(full_java_libs)))" \ 109 -dontoptimize \ 110 -dontobfuscate \ 111 -dontpreverify \ 112 -ignorewarnings \ 113 -printusage \ 114 -keep class org.bouncycastle.jce.provider.BouncyCastleProvider "{ public protected *; }" \ 115 -keep class org.bouncycastle.jce.provider.symmetric.AESMappings "{ public protected *; }" \ 116 -keep class org.bouncycastle.asn1.ASN1TaggedObject "{ public protected *; }" \ 117 -keep class org.bouncycastle.asn1.x509.CertificateList "{ public protected *; }" \ 118 -keep class org.bouncycastle.crypto.AsymmetricBlockCipher "{ public protected *; }" \ 119 -keep class org.bouncycastle.x509.ExtendedPKIXBuilderParameters "{ public protected *; }" \ 120 `(find $(LOCAL_PATH) -name '*.java' | xargs grep '"org.bouncycastle' | egrep ' (put|add)' | sed -e 's/");//' -e 's/.*"//'; \ 121 find $(LOCAL_PATH) -name '*.java' | xargs grep ' addHMACAlgorithm' | sed 's/"org.bouncycastle/\norg.bouncycastle/g' | grep ^org.bouncycastle | sed 's/".*//'; \ 122 find . -name '*.java' | xargs grep 'import org.bouncycastle' | grep -v /bouncycastle/ | sed -e 's/.*:import //' -e 's/;//') \ 123 | sed -e 's/^/-keep class /' -e 's/$$/ { public protected \*; } /' | sort | uniq` \ 124 -keepclassmembers "class * { \ 125 static final % *; \ 126 static final java.lang.String *; \ 127 }" \ 128 -keepclassmembers "class * implements java.io.Serializable { \ 129 private static final java.io.ObjectStreamField[] serialPersistentFields; \ 130 private void writeObject(java.io.ObjectOutputStream); \ 131 private void readObject(java.io.ObjectInputStream); \ 132 java.lang.Object writeReplace(); \ 133 java.lang.Object readResolve(); \ 134 }" \ 135 -keepclassmembers "interface org.bouncycastle.crypto.paddings.BlockCipherPadding { \ 136 abstract public java.lang.String getPaddingName(); \ 137 }" \ 138 -keepclassmembers "class * implements org.bouncycastle.crypto.paddings.BlockCipherPadding { \ 139 public java.lang.String getPaddingName(); \ 140 }" 141 142# Conscrypt isn't built in the PDK or on non-linux OSes, so this cannot be built 143# because it has a dependency on conscrypt-hostdex. 144ifneq ($(TARGET_BUILD_PDK),true) 145 ifeq ($(HOST_OS),linux) 146 include $(CLEAR_VARS) 147 LOCAL_MODULE := bouncycastle-hostdex-nojarjar 148 LOCAL_MODULE_TAGS := optional 149 LOCAL_SRC_FILES := $(all_bcprov_src_files) 150 LOCAL_JAVA_LIBRARIES := conscrypt-hostdex 151 include $(BUILD_HOST_DALVIK_JAVA_LIBRARY) 152 153 include $(CLEAR_VARS) 154 LOCAL_MODULE := bouncycastle-hostdex 155 LOCAL_MODULE_TAGS := optional 156 LOCAL_STATIC_JAVA_LIBRARIES := bouncycastle-hostdex-nojarjar 157 LOCAL_JAVA_LIBRARIES := conscrypt-hostdex 158 LOCAL_JARJAR_RULES := $(LOCAL_PATH)/jarjar-rules.txt 159 LOCAL_JAVA_LANGUAGE_VERSION := 1.7 160 include $(BUILD_HOST_DALVIK_JAVA_LIBRARY) 161 162 include $(CLEAR_VARS) 163 LOCAL_MODULE := bouncycastle-bcpkix-hostdex-nojarjar 164 LOCAL_MODULE_TAGS := optional 165 LOCAL_SRC_FILES := $(all_bcpkix_src_files) 166 LOCAL_JAVA_LIBRARIES := bouncycastle-hostdex-nojarjar 167 include $(BUILD_HOST_DALVIK_JAVA_LIBRARY) 168 169 include $(CLEAR_VARS) 170 LOCAL_MODULE := bouncycastle-bcpkix-hostdex 171 LOCAL_MODULE_TAGS := optional 172 LOCAL_STATIC_JAVA_LIBRARIES := bouncycastle-bcpkix-hostdex-nojarjar 173 LOCAL_JAVA_LIBRARIES := bouncycastle-hostdex-nojarjar 174 LOCAL_JARJAR_RULES := $(LOCAL_PATH)/jarjar-rules.txt 175 include $(BUILD_HOST_DALVIK_JAVA_LIBRARY) 176 177 # OCSP classes used for testing 178 include $(CLEAR_VARS) 179 LOCAL_MODULE := bouncycastle-ocsp-hostdex 180 LOCAL_MODULE_TAGS := optional 181 LOCAL_SRC_FILES := $(all_bc_ocsp_files) 182 LOCAL_JAVA_LIBRARIES := bouncycastle-hostdex-nojarjar bouncycastle-bcpkix-hostdex-nojarjar 183 LOCAL_JARJAR_RULES := $(LOCAL_PATH)/jarjar-rules.txt 184 include $(BUILD_HOST_DALVIK_JAVA_LIBRARY) 185 endif # ($(HOST_OS),linux) 186endif 187 188include $(CLEAR_VARS) 189LOCAL_MODULE := bouncycastle-host 190LOCAL_MODULE_TAGS := optional 191LOCAL_SRC_FILES := $(ri_bcprov_src_files) 192LOCAL_JAVA_LANGUAGE_VERSION := 1.7 193include $(BUILD_HOST_JAVA_LIBRARY) 194 195include $(CLEAR_VARS) 196LOCAL_MODULE := bouncycastle-bcpkix-host 197LOCAL_MODULE_TAGS := optional 198LOCAL_SRC_FILES := $(all_bcpkix_src_files) 199LOCAL_JAVA_LIBRARIES := bouncycastle-host 200LOCAL_JAVA_LANGUAGE_VERSION := 1.7 201include $(BUILD_HOST_JAVA_LIBRARY) 202 203# OCSP classes used for testing 204include $(CLEAR_VARS) 205LOCAL_MODULE := bouncycastle-ocsp-host 206LOCAL_MODULE_TAGS := optional 207LOCAL_SRC_FILES := $(all_bc_ocsp_files) 208LOCAL_JAVA_LIBRARIES := bouncycastle-host bouncycastle-bcpkix-host 209include $(BUILD_HOST_JAVA_LIBRARY) 210 211# Unset these so they don't linger in the next makefile 212all_bcprov_src_files := 213android_bcprov_src_files := 214ri_bcprov_src_files := 215all_bcpkix_src_files := 216all_bc_ocsp_files := 217