You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
701 lines
19 KiB
701 lines
19 KiB
//
|
|
// Copyright (C) 2016 The Android Open Source Project
|
|
//
|
|
// Licensed under the Apache License, Version 2.0 (the "License");
|
|
// you may not use this file except in compliance with the License.
|
|
// You may obtain a copy of the License at
|
|
//
|
|
// http://www.apache.org/licenses/LICENSE-2.0
|
|
//
|
|
// Unless required by applicable law or agreed to in writing, software
|
|
// distributed under the License is distributed on an "AS IS" BASIS,
|
|
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
// See the License for the specific language governing permissions and
|
|
// limitations under the License.
|
|
//
|
|
|
|
package {
|
|
default_visibility: [
|
|
":__subpackages__",
|
|
],
|
|
default_applicable_licenses: ["external_conscrypt_license"],
|
|
}
|
|
|
|
// Added automatically by a large-scale-change that took the approach of
|
|
// 'apply every license found to every target'. While this makes sure we respect
|
|
// every license restriction, it may not be entirely correct.
|
|
//
|
|
// e.g. GPL in an MIT project might only apply to the contrib/ directory.
|
|
//
|
|
// Please consider splitting the single license below into multiple licenses,
|
|
// taking care not to lose any license_kind information, and overriding the
|
|
// default license using the 'licenses: [...]' property on targets as needed.
|
|
//
|
|
// For unused files, consider creating a 'fileGroup' with "//visibility:private"
|
|
// to attach the license to, and including a comment whether the files may be
|
|
// used in the current project.
|
|
//
|
|
// large-scale-change included anything that looked like it might be a license
|
|
// text as a license_text. e.g. LICENSE, NOTICE, COPYING etc.
|
|
//
|
|
// Please consider removing redundant or irrelevant files from 'license_text:'.
|
|
// See: http://go/android-license-faq
|
|
license {
|
|
name: "external_conscrypt_license",
|
|
visibility: [":__subpackages__"],
|
|
license_kinds: [
|
|
"SPDX-license-identifier-Apache-2.0",
|
|
"legacy_unencumbered",
|
|
],
|
|
license_text: [
|
|
"LICENSE",
|
|
"NOTICE",
|
|
"licenses/**/*",
|
|
],
|
|
}
|
|
|
|
//
|
|
// Definitions for building the Conscrypt Java library, native code,
|
|
// and associated tests.
|
|
//
|
|
|
|
// Conscrypt is divided into subdirectories.
|
|
//
|
|
// The structure is:
|
|
//
|
|
// constants/
|
|
// src/gen # Generates NativeConstants.java.
|
|
// common/
|
|
// src/main/java # Common Java source for all platforms.
|
|
// src/jni/
|
|
// main # Common C++ source for all platforms.
|
|
// unbundled # C++ source used for OpenJDK and unbundled Android.
|
|
// src/test/java # Common test files for all platforms.
|
|
// android/
|
|
// src/main/java # Java source for unbundled Android.
|
|
// openjdk/
|
|
// src/main/java # Java source for OpenJDK.
|
|
// src/test
|
|
// java/ # Java source for common tests.
|
|
// resources/ # Support files for tests
|
|
// platform/
|
|
// src/main/java # Java source for bundled Android.
|
|
// src/test
|
|
// java/ # Java source for bundled tests.
|
|
//
|
|
|
|
cc_defaults {
|
|
name: "conscrypt_global",
|
|
|
|
cflags: [
|
|
"-Wall",
|
|
"-Wextra",
|
|
"-Werror",
|
|
"-Wunused",
|
|
],
|
|
|
|
srcs: [
|
|
"common/src/jni/main/cpp/conscrypt/compatibility_close_monitor.cc",
|
|
"common/src/jni/main/cpp/conscrypt/jniload.cc",
|
|
"common/src/jni/main/cpp/conscrypt/jniutil.cc",
|
|
"common/src/jni/main/cpp/conscrypt/native_crypto.cc",
|
|
"common/src/jni/main/cpp/conscrypt/netutil.cc",
|
|
"common/src/jni/main/cpp/conscrypt/trace.cc",
|
|
],
|
|
|
|
header_libs: ["jni_headers"],
|
|
|
|
local_include_dirs: [
|
|
"common/src/jni/main/include",
|
|
],
|
|
|
|
compile_multilib: "both",
|
|
stl: "c++_static",
|
|
}
|
|
|
|
cc_defaults {
|
|
name: "conscrypt_unbundled-jni-defaults",
|
|
|
|
local_include_dirs: [
|
|
"common/src/jni/unbundled/include",
|
|
],
|
|
|
|
header_libs: ["jni_headers"],
|
|
|
|
shared_libs: [
|
|
"liblog",
|
|
],
|
|
|
|
static_libs: [
|
|
"libssl",
|
|
"libcrypto_static",
|
|
],
|
|
|
|
sdk_version: "9",
|
|
}
|
|
|
|
cc_library {
|
|
name: "libconscrypt_jni",
|
|
defaults: [
|
|
"conscrypt_global",
|
|
"conscrypt_unbundled-jni-defaults",
|
|
],
|
|
}
|
|
|
|
cc_library_host_shared {
|
|
name: "libconscrypt_openjdk_jni",
|
|
visibility: [
|
|
"//build/make/tools/signapk",
|
|
"//tools/apksig",
|
|
"//vendor:__subpackages__",
|
|
],
|
|
defaults: ["conscrypt_global"],
|
|
|
|
cflags: [
|
|
"-DCONSCRYPT_OPENJDK",
|
|
],
|
|
|
|
local_include_dirs: [
|
|
"common/src/jni/unbundled/include",
|
|
],
|
|
|
|
static_libs: [
|
|
"libssl",
|
|
"libcrypto_static",
|
|
],
|
|
|
|
// TODO: b/26097626. ASAN breaks use of this library in JVM.
|
|
// Re-enable sanitization when the issue with making clients of this library
|
|
// preload ASAN runtime is resolved. Without that, clients are getting runtime
|
|
// errors due to unresolved ASAN symbols, such as
|
|
// __asan_option_detect_stack_use_after_return.
|
|
sanitize: {
|
|
never: true,
|
|
},
|
|
|
|
stl: "libc++_static",
|
|
|
|
// The post-build signing tools need signapk.jar and its shared libs
|
|
multilib: {
|
|
lib64: {
|
|
dist: {
|
|
targets: ["droidcore"],
|
|
},
|
|
},
|
|
},
|
|
}
|
|
|
|
cc_binary_host {
|
|
name: "conscrypt_generate_constants",
|
|
srcs: ["constants/src/gen/cpp/generate_constants.cc"],
|
|
cflags: [
|
|
"-Wall",
|
|
"-Werror",
|
|
],
|
|
shared_libs: [
|
|
"libcrypto",
|
|
"libssl",
|
|
],
|
|
}
|
|
|
|
genrule {
|
|
name: "conscrypt-unbundled_generated_constants",
|
|
out: ["org/conscrypt/NativeConstants.java"],
|
|
cmd: "$(location conscrypt_generate_constants) > $(out)",
|
|
tools: ["conscrypt_generate_constants"],
|
|
}
|
|
|
|
genrule {
|
|
name: "conscrypt_generated_constants",
|
|
out: ["com/android/org/conscrypt/NativeConstants.java"],
|
|
cmd: "$(location conscrypt_generate_constants) com.android.org.conscrypt > $(out)",
|
|
tools: ["conscrypt_generate_constants"],
|
|
}
|
|
|
|
filegroup {
|
|
name: "conscrypt_java_files",
|
|
srcs: [
|
|
"repackaged/common/src/main/java/**/*.java",
|
|
"repackaged/platform/src/main/java/**/*.java",
|
|
":conscrypt_generated_constants",
|
|
],
|
|
}
|
|
|
|
filegroup {
|
|
name: "conscrypt_public_api_files",
|
|
srcs: ["publicapi/src/main/java/**/*.java"],
|
|
path: "publicapi/src/main/java",
|
|
}
|
|
|
|
// Create the conscrypt library from the source produced by the srcgen/generate_android_src.sh
|
|
// script.
|
|
java_library {
|
|
name: "conscrypt",
|
|
visibility: [
|
|
"//device:__subpackages__",
|
|
"//system/apex/tests",
|
|
":__subpackages__",
|
|
],
|
|
apex_available: [
|
|
"com.android.conscrypt",
|
|
"test_com.android.conscrypt",
|
|
],
|
|
// Conscrypt should support Q
|
|
min_sdk_version: "29",
|
|
|
|
installable: true,
|
|
// Hostdex is only for ART testing on host: ART build file has its
|
|
// own hostdex support for conscrypt.
|
|
hostdex: false,
|
|
|
|
srcs: [
|
|
":conscrypt_java_files",
|
|
":conscrypt_public_api_files",
|
|
],
|
|
|
|
libs: ["unsupportedappusage"],
|
|
|
|
// Conscrypt can be updated independently from the other core libraries so it must only depend
|
|
// on public SDK and intra-core APIs.
|
|
sdk_version: "none",
|
|
system_modules: "art-module-intra-core-api-stubs-system-modules",
|
|
patch_module: "java.base",
|
|
|
|
target: {
|
|
// boringssl_self_test needed in both /system/bin and /apex/com.android.conscrypt/bin
|
|
android: {
|
|
required: ["boringssl_self_test"],
|
|
},
|
|
},
|
|
|
|
permitted_packages: [
|
|
"android.net.ssl",
|
|
"com.android.org.conscrypt",
|
|
],
|
|
|
|
plugins: ["java_api_finder"],
|
|
}
|
|
|
|
// Java library for use on host, e.g. by robolectric.
|
|
java_library {
|
|
name: "conscrypt-for-host",
|
|
visibility: [
|
|
"//art/build",
|
|
"//external/robolectric-shadows",
|
|
],
|
|
static_libs: [
|
|
"conscrypt",
|
|
],
|
|
sdk_version: "none",
|
|
system_modules: "none",
|
|
}
|
|
|
|
// Referenced implicitly from conscrypt.module.platform.api.
|
|
filegroup {
|
|
name: "conscrypt.module.platform.api.api.public.latest",
|
|
srcs: [
|
|
"api/platform/last-api.txt",
|
|
],
|
|
}
|
|
|
|
// Referenced implicitly from conscrypt.module.platform.api.
|
|
filegroup {
|
|
name: "conscrypt.module.platform.api-removed.api.public.latest",
|
|
srcs: [
|
|
"api/platform/last-removed.txt",
|
|
],
|
|
}
|
|
|
|
// Referenced implicitly from conscrypt.module.platform.api.
|
|
filegroup {
|
|
name: "conscrypt.module.platform.api-incompatibilities.api.public.latest",
|
|
srcs: [
|
|
"api/platform/last-incompatibilities.txt",
|
|
],
|
|
}
|
|
|
|
// A library containing the core platform API stubs of the Conscrypt module.
|
|
//
|
|
// Core platform APIs are only intended for use of other parts of the platform, not the
|
|
// core library modules.
|
|
//
|
|
// The API specification .txt files managed by this only contain the additional
|
|
// classes/members that are in the platform API but which are not in the public
|
|
// API.
|
|
//
|
|
// Note that this entire API surface is considered stable in the sense described in
|
|
// libcore/mmodules/core_platform_api/Android.bp.
|
|
java_sdk_library {
|
|
name: "conscrypt.module.platform.api",
|
|
visibility: [
|
|
"//external/wycheproof",
|
|
"//libcore:__subpackages__",
|
|
// Visibility for prebuilt conscrypt-module-sdk from the prebuilt of
|
|
// this module.
|
|
// TODO(b/155921753): Restrict this when prebuilts are in their proper
|
|
// locations.
|
|
"//prebuilts:__subpackages__",
|
|
],
|
|
srcs: [
|
|
":conscrypt_java_files",
|
|
],
|
|
api_dir: "api/platform",
|
|
api_only: true,
|
|
api_lint: {
|
|
enabled: true,
|
|
},
|
|
droiddoc_options: [
|
|
"--hide-annotation libcore.api.Hide",
|
|
"--show-single-annotation libcore.api.CorePlatformApi\\(status=libcore.api.CorePlatformApi.Status.STABLE\\)",
|
|
"--skip-annotation-instance-methods=false",
|
|
],
|
|
hostdex: true,
|
|
|
|
sdk_version: "none",
|
|
system_modules: "art-module-lib-api-stubs-system-modules",
|
|
|
|
dist_group: "android",
|
|
dist_stem: "conscrypt-coreplatform",
|
|
// TODO: remove this when Conscrypt's @CorePlatformApi has been migrated to @SystemApi
|
|
unsafe_ignore_missing_latest_api: true,
|
|
}
|
|
|
|
// A library containing the public API stubs of the Conscrypt module.
|
|
java_sdk_library {
|
|
name: "conscrypt.module.public.api",
|
|
visibility: [
|
|
"//packages/modules/common/sdk",
|
|
"//frameworks/base",
|
|
"//frameworks/base/api",
|
|
"//libcore",
|
|
// TODO(b/165823103): Remove visiblity for IPsec once CorePlatformApi is available
|
|
"//packages/modules/IPsec",
|
|
// Visibility for prebuilt art-module-host-exports from the prebuilt of
|
|
// this module.
|
|
// TODO(b/155921753): Restrict this when prebuilts are in their proper
|
|
// locations.
|
|
"//prebuilts:__subpackages__",
|
|
],
|
|
srcs: [
|
|
":conscrypt_public_api_files",
|
|
],
|
|
|
|
// The base name for the artifacts that are automatically published to the
|
|
// dist and which end up in one of the sub-directories of prebuilts/sdk.
|
|
// As long as this matches the name of the artifacts in prebuilts/sdk then
|
|
// the API will be checked for compatibility against the latest released
|
|
// version of the API.
|
|
dist_stem: "conscrypt",
|
|
|
|
api_dir: "api/public",
|
|
api_only: true,
|
|
droiddoc_options: [
|
|
// Emit nullability annotations from the source to the stub files.
|
|
"--include-annotations",
|
|
],
|
|
|
|
java_version: "1.9",
|
|
|
|
sdk_version: "none",
|
|
system_modules: "art-module-public-api-stubs-system-modules",
|
|
dist_group: "android",
|
|
}
|
|
|
|
// Referenced implicitly from conscrypt.module.intra.core.api.
|
|
filegroup {
|
|
name: "conscrypt.module.intra.core.api.api.public.latest",
|
|
srcs: [
|
|
"api/intra/last-api.txt",
|
|
],
|
|
}
|
|
|
|
// Referenced implicitly from conscrypt.module.intra.core.api.
|
|
filegroup {
|
|
name: "conscrypt.module.intra.core.api-removed.api.public.latest",
|
|
srcs: [
|
|
"api/intra/last-removed.txt",
|
|
],
|
|
}
|
|
|
|
// Referenced implicitly from conscrypt.module.intra.core.api.
|
|
filegroup {
|
|
name: "conscrypt.module.intra.core.api-incompatibilities.api.public.latest",
|
|
srcs: [
|
|
"api/intra/last-incompatibilities.txt",
|
|
],
|
|
}
|
|
|
|
// A library containing the intra-core API stubs of the Conscrypt module.
|
|
//
|
|
// Intra-core APIs are only intended for the use of other core library modules.
|
|
//
|
|
// The API specification .txt files managed by this only contain the additional
|
|
// classes/members that are in the intra-core API but which are not the public API.
|
|
java_sdk_library {
|
|
name: "conscrypt.module.intra.core.api",
|
|
visibility: [
|
|
"//external/okhttp",
|
|
"//libcore:__subpackages__",
|
|
// Visibility for prebuilt conscrypt-module-sdk from the prebuilt of
|
|
// this module.
|
|
// TODO(b/155921753): Restrict this when prebuilts are in their proper
|
|
// locations.
|
|
"//prebuilts:__subpackages__",
|
|
],
|
|
srcs: [
|
|
":conscrypt_java_files",
|
|
":conscrypt_public_api_files",
|
|
],
|
|
api_dir: "api/intra",
|
|
api_only: true,
|
|
droiddoc_options: [
|
|
"--hide-annotation libcore.api.Hide",
|
|
"--show-single-annotation libcore.api.IntraCoreApi",
|
|
"--skip-annotation-instance-methods=false",
|
|
],
|
|
|
|
sdk_version: "none",
|
|
system_modules: "art-module-intra-core-api-stubs-system-modules",
|
|
|
|
// Don't copy any output files to the dist.
|
|
no_dist: true,
|
|
}
|
|
|
|
// Platform conscrypt crypto JNI library
|
|
cc_defaults {
|
|
name: "libjavacrypto-defaults",
|
|
|
|
cflags: [
|
|
"-Wall",
|
|
"-Wextra",
|
|
"-Werror",
|
|
"-Wunused",
|
|
"-fvisibility=hidden",
|
|
],
|
|
|
|
srcs: ["common/src/jni/main/cpp/**/*.cc"],
|
|
header_libs: ["jni_headers"],
|
|
local_include_dirs: ["common/src/jni/main/include"],
|
|
}
|
|
|
|
// Platform conscrypt crypto JNI library
|
|
cc_library_shared {
|
|
name: "libjavacrypto",
|
|
host_supported: true,
|
|
defaults: ["libjavacrypto-defaults"],
|
|
|
|
cflags: ["-DJNI_JARJAR_PREFIX=com/android/"],
|
|
header_libs: ["libnativehelper_header_only"],
|
|
shared_libs: [
|
|
"libcrypto",
|
|
"liblog",
|
|
"libssl",
|
|
],
|
|
|
|
target: {
|
|
darwin: {
|
|
enabled: false,
|
|
},
|
|
android: {
|
|
runtime_libs: ["libandroidio"],
|
|
},
|
|
not_windows: {
|
|
runtime_libs: ["libandroidio"],
|
|
},
|
|
},
|
|
apex_available: [
|
|
"com.android.conscrypt",
|
|
"test_com.android.conscrypt",
|
|
],
|
|
min_sdk_version: "29",
|
|
}
|
|
|
|
// Unbundled Conscrypt jar for use by signapk and apksigner tool
|
|
//
|
|
// Builds against standard host libraries.
|
|
java_library_host {
|
|
name: "conscrypt-unbundled",
|
|
visibility: [
|
|
"//build/make/tools/signapk",
|
|
"//tools/apksig",
|
|
],
|
|
srcs: [
|
|
"common/src/main/java/**/*.java",
|
|
"openjdk/src/main/java/**/*.java",
|
|
":conscrypt-unbundled_generated_constants",
|
|
],
|
|
javacflags: ["-XDignore.symbol.file"],
|
|
java_version: "1.7",
|
|
}
|
|
|
|
// Static unbundled Conscrypt crypto JNI library
|
|
cc_library_static {
|
|
name: "libconscrypt_static",
|
|
defaults: ["libjavacrypto-defaults"],
|
|
|
|
cflags: [
|
|
"-DJNI_JARJAR_PREFIX=com/google/android/gms/",
|
|
"-DCONSCRYPT_UNBUNDLED",
|
|
"-DSTATIC_LIB",
|
|
],
|
|
|
|
local_include_dirs: ["common/src/jni/unbundled/include"],
|
|
|
|
static_libs: [
|
|
"libssl",
|
|
"libcrypto_static",
|
|
],
|
|
sdk_version: "9",
|
|
stl: "c++_shared",
|
|
}
|
|
|
|
// Make the conscrypt-tests library.
|
|
java_test {
|
|
name: "conscrypt-tests",
|
|
visibility: [
|
|
"//cts/tests/libcore/luni",
|
|
"//external/conscrypt/apex/tests",
|
|
],
|
|
hostdex: true,
|
|
srcs: [
|
|
"repackaged/platform/src/test/java/**/*.java",
|
|
"repackaged/common/src/test/java/**/*.java",
|
|
"repackaged/testing/src/main/java/**/*.java",
|
|
"publicapi/src/test/java/**/*.java",
|
|
],
|
|
java_resource_dirs: [
|
|
// Resource directories do not need repackaging.
|
|
"openjdk/src/test/resources",
|
|
"common/src/test/resources",
|
|
],
|
|
|
|
sdk_version: "none",
|
|
system_modules: "art-module-intra-core-api-stubs-system-modules",
|
|
libs: [
|
|
"conscrypt",
|
|
"core-test-rules",
|
|
"junit",
|
|
"mockito-target-minus-junit4",
|
|
"framework-statsd.stubs.module_lib",
|
|
],
|
|
|
|
static_libs: [
|
|
"bouncycastle-unbundled",
|
|
"bouncycastle-bcpkix-unbundled",
|
|
"bouncycastle-ocsp-unbundled",
|
|
],
|
|
javacflags: [
|
|
"-Xmaxwarns 9999999",
|
|
//"-Xlint:all",
|
|
//"-Xlint:-serial,-deprecation,-unchecked",
|
|
],
|
|
|
|
target: {
|
|
host: {
|
|
required: ["libjavacrypto"],
|
|
},
|
|
darwin: {
|
|
// required module "libjavacrypto" is disabled on darwin
|
|
enabled: false,
|
|
},
|
|
},
|
|
java_version: "1.7",
|
|
}
|
|
|
|
// Make the conscrypt-benchmarks library.
|
|
java_test {
|
|
name: "conscrypt-benchmarks",
|
|
srcs: [
|
|
"repackaged/testing/src/main/java/**/*.java",
|
|
"repackaged/benchmark-base/src/main/java/**/*.java",
|
|
"repackaged/benchmark-android/src/main/java/**/*.java",
|
|
],
|
|
sdk_version: "none",
|
|
system_modules: "art-module-intra-core-api-stubs-system-modules",
|
|
libs: [
|
|
"conscrypt",
|
|
"junit",
|
|
"bouncycastle-unbundled",
|
|
"bouncycastle-bcpkix-unbundled",
|
|
"bouncycastle-ocsp-unbundled",
|
|
"caliper-api-target",
|
|
],
|
|
|
|
javacflags: [
|
|
"-Xmaxwarns 9999999",
|
|
//"-Xlint:all",
|
|
//"-Xlint:-serial,-deprecation,-unchecked",
|
|
],
|
|
|
|
target: {
|
|
host: {
|
|
required: ["libjavacrypto"],
|
|
},
|
|
darwin: {
|
|
// required module "libjavacrypto" is disabled on darwin
|
|
enabled: false,
|
|
},
|
|
},
|
|
java_version: "1.7",
|
|
}
|
|
|
|
// Device SDK exposed by the Conscrypt module.
|
|
sdk {
|
|
name: "conscrypt-module-sdk",
|
|
bootclasspath_fragments: [
|
|
"com.android.conscrypt-bootclasspath-fragment",
|
|
],
|
|
java_sdk_libs: [
|
|
"conscrypt.module.public.api",
|
|
"conscrypt.module.intra.core.api",
|
|
"conscrypt.module.platform.api",
|
|
],
|
|
native_shared_libs: [
|
|
"libconscrypt_jni",
|
|
],
|
|
}
|
|
|
|
// Host tools exported by the Conscrypt module.
|
|
module_exports {
|
|
name: "conscrypt-module-host-exports",
|
|
host_supported: true,
|
|
device_supported: false,
|
|
java_libs: [
|
|
"conscrypt-unbundled",
|
|
],
|
|
native_shared_libs: [
|
|
"libconscrypt_openjdk_jni",
|
|
],
|
|
}
|
|
|
|
// Test libraries exposed by the Conscrypt module.
|
|
module_exports {
|
|
name: "conscrypt-module-test-exports",
|
|
host_supported: true,
|
|
target: {
|
|
android: {
|
|
java_libs: [
|
|
// For use by robolectric and ART tests.
|
|
"conscrypt-for-host",
|
|
],
|
|
java_tests: [
|
|
// For use by CTS
|
|
"conscrypt-tests",
|
|
],
|
|
// TODO: Remove this when we resolve b/151303681.
|
|
native_shared_libs: [
|
|
"libjavacrypto",
|
|
],
|
|
},
|
|
darwin: {
|
|
enabled: false,
|
|
},
|
|
// For use by ART tests on host.
|
|
not_windows: {
|
|
native_shared_libs: [
|
|
"libjavacrypto",
|
|
],
|
|
},
|
|
},
|
|
}
|