blob: 0e6357cd44f1b5720f3e2676f20c21c39ebf8257 [file] [log] [blame]
plugins {
id 'com.github.johnrengelman.shadow' version '7.1.2'
}
import aQute.bnd.gradle.BundleTaskConvention
import com.github.jengelman.gradle.plugins.shadow.tasks.ShadowJar
import org.codehaus.groovy.runtime.InvokerHelper
apply plugin: 'biz.aQute.bnd.builder'
description = 'Conscrypt: OpenJdk'
// Gradle mostly uses Java os.arch names for architectures which feeds into default
// targetPlatform names. Notable exception Gradle 6.9.x reports MacOS/ARM as
// arm-v8.
//
// The Maven osdetector plugin (which we recommend to developers) uses different
// arch names, so that's what we need for artifacts.
//
// This class encapsulates both naming schemes as well as other per-platform information
// about native builds, more of which will migrate in here over time.
enum NativeBuildInfo {
WINDOWS_X86_64("windows", "x86_64"),
LINUX_X86_64("linux", "x86_64"),
MAC_X86_64("osx", "x86_64") {
String libDir() {
"build.x86"
}
},
MAC_AARCH64("osx", "aarch_64") {
String libDir() {
"build.arm"
}
};
static String buildDir = "FIXME" // See below
public final String os
public final String arch
// Maps osdetector arch to Gradle equivalent.
private static final gradleArchMap = [
"aarch_64": "aarch64",
"x86_64" : "x86-64",
]
NativeBuildInfo(String os, String arch) {
this.os = os
this.arch = arch
}
// Classifier as generated by Maven osdetector.
String mavenClassifier() {
"${os}-${arch}"
}
// Gradle equivalent to Maven arch
String gradleArch() {
gradleArch(arch)
}
// Output directory for native resources
String nativeResourcesDir() {
"$buildDir/${mavenClassifier()}/native-resources"
}
// Directory for native resources inside final jar.
String jarNativeResourcesDir() {
nativeResourcesDir() + '/META-INF/native'
}
// Target platform identifier as used by Gradle
String targetPlatform() {
"${os}_${gradleArch()}"
}
String libDir() {
"build64"
}
static String gradleArch(String arch) {
gradleArchMap.get(arch)
}
static NativeBuildInfo findForGradle(String os, String arch) {
values().find {
it.os == os && it.gradleArch() == arch
}
}
static NativeBuildInfo find(String os, String arch) {
values().find {
it.os == os && it.arch == arch
}
}
static NativeBuildInfo find(NativePlatform targetPlatform) {
String targetOS = targetPlatform.operatingSystem.name
String targetArch = targetPlatform.architecture.name
def result = findForGradle(targetOS, targetArch)
assert result != null : "Unknown target platform: ${targetOS}-${targetArch}"
result
}
static findAll(String os) {
values().findAll {
it.os == os
}
}
}
// TODO: There has to be a better way of accessing Gradle properties from Groovy code than this
NativeBuildInfo.buildDir = "$buildDir"
ext {
jniSourceDir = "$rootDir/common/src/jni"
assert file("$jniSourceDir").exists()
// Decide which targets we should build and test
nativeBuilds = NativeBuildInfo.findAll("${osdetector.os}")
buildToTest = NativeBuildInfo.find("${osdetector.os}", "${osdetector.arch}")
assert !nativeBuilds.isEmpty() : "No native builds selected."
assert buildToTest != null : "No test build selected for os.arch = ${osdetector.arch}"
// Compatibility with other sub-projects
preferredSourceSet = buildToTest.mavenClassifier()
preferredNativeFileDir = buildToTest.nativeResourcesDir()
}
sourceSets {
main {
java {
srcDirs += "${rootDir}/common/src/main/java"
srcDirs += project(':conscrypt-constants').sourceSets.main.java.srcDirs
}
resources {
srcDirs += "build/generated/resources"
}
}
platform {
java {
srcDirs = [ "src/main/java" ]
includes = [ "org/conscrypt/Platform.java" ]
}
}
test {
java {
srcDirs += "${rootDir}/common/src/test/java"
}
resources {
srcDirs += "${rootDir}/common/src/test/resources"
// This shouldn't be needed but seems to help IntelliJ locate the native artifact.
// srcDirs += preferredNativeFileDir
srcDirs += buildToTest.nativeResourcesDir()
}
}
// Add the source sets for each of the native builds
nativeBuilds.each { nativeBuild ->
String sourceSetName = nativeBuild.mavenClassifier()
String nativeDir = nativeBuild.nativeResourcesDir()
// Main sources for the native build
"$sourceSetName" {
output.dir(nativeDir, builtBy: "copyNativeLib${sourceSetName}")
}
}
}
compileJava {
dependsOn generateProperties
}
processResources {
dependsOn generateProperties
}
tasks.register("platformJar", Jar) {
from sourceSets.platform.output
}
tasks.register("testJar", ShadowJar) {
classifier = 'tests'
configurations = [project.configurations.testRuntimeClasspath]
from sourceSets.test.output
}
if (isExecutableOnPath('cpplint')) {
def cpplint = tasks.register("cpplint", Exec) {
executable = 'cpplint'
// TODO(nmittler): Is there a better way of getting the JNI sources?
def pattern = ['**/*.cc', '**/*.h']
def sourceFiles = fileTree(dir: jniSourceDir, includes: pattern).asPath.tokenize(':')
// Adding roots so that class #ifdefs don't require full path from the project root.
args = sourceFiles
// Capture stderr from the process
errorOutput = new ByteArrayOutputStream();
// Need to ignore exit value so that doLast will execute.
ignoreExitValue = true
doLast {
// Create the report file.
def reportDir = file("${buildDir}/cpplint")
reportDir.mkdirs();
def reportFile = new File(reportDir, "report.txt")
def reportStream = new FileOutputStream(reportFile)
try {
// Check for failure
if (execResult != null) {
execResult.assertNormalExitValue()
}
} catch (Exception e) {
// The process failed - get the error report from the stderr.
String report = errorOutput.toString();
// Write the report to the console.
System.err.println(report)
// Also write the report file.
reportStream.write(report.bytes);
// Extension method cpplint.output() can be used to obtain the report
ext.output = {
return report
}
// Rethrow the exception to terminate the build.
throw e;
} finally {
reportStream.close();
}
}
}
check.dependsOn cpplint
}
configurations {
publicApiDocs
platform
}
artifacts {
platform platformJar
}
apply from: "$rootDir/gradle/publishing.gradle"
publishing.publications.maven {
artifact sourcesJar
artifact javadocJar
}
jar.manifest {
attributes ('BoringSSL-Version' : boringSslVersion,
'Automatic-Module-Name' : 'org.conscrypt',
'Bundle-SymbolicName': 'org.conscrypt',
'-exportcontents': 'org.conscrypt.*')
}
dependencies {
// This is used for the @Internal annotation processing in JavaDoc
publicApiDocs project(':conscrypt-api-doclet')
// This is listed as compile-only, but we absorb its contents.
compileOnly project(':conscrypt-constants')
testImplementation project(':conscrypt-constants'),
project(path: ':conscrypt-testing', configuration: 'shadow'),
libraries.junit,
libraries.mockito
testRuntimeOnly sourceSets["$preferredSourceSet"].output
platformCompileOnly sourceSets.main.output
}
nativeBuilds.each { nativeBuild ->
// Create the JAR task and add it's output to the published archives for this project
addNativeJar(nativeBuild)
// Build the classes as part of the standard build.
classes.dependsOn sourceSets[nativeBuild.mavenClassifier()].classesTaskName
}
// Adds a JAR task for the native library.
def addNativeJar(NativeBuildInfo nativeBuild) {
// Create a JAR for this configuration and add it to the output archives.
SourceSet sourceSet = sourceSets[nativeBuild.mavenClassifier()]
def jarTask = tasks.register(sourceSet.jarTaskName, Jar) { Jar t ->
// Depend on the regular classes task
dependsOn classes
manifest = jar.manifest
classifier = nativeBuild.mavenClassifier()
from sourceSet.output + sourceSets.main.output
// add OSGI headers
t.convention.plugins.bundle = new BundleTaskConvention(t)
t.doLast {
t.buildBundle()
}
}
// Add the jar task to the standard build.
jar.dependsOn jarTask
// Add it to the publishing archives list.
publishing.publications.maven.artifact jarTask.get()
}
// TODO(prb) Still provide a mechanism for testing on Java 7?
// Check which version
//def javaError = new ByteArrayOutputStream()
//exec {
// executable test.executable
// System.out.println("Running tests with java executable: " + test.executable + ".")
// args = ['-version']
// ignoreExitValue true
// errorOutput = javaError
//}
//
//def suiteClass = (javaError.toString() =~ /"1[.]7[.].*"/) ?
// "org/conscrypt/ConscryptJava7Suite.class" : "org/conscrypt/ConscryptSuite.class";
def suiteClass = "org/conscrypt/ConscryptSuite.class";
test {
include suiteClass, "org/conscrypt/ConscryptOpenJdkSuite.class"
}
def testFdSocket = tasks.register("testFdSocket", Test) {
include suiteClass, "org/conscrypt/ConscryptOpenJdkSuite.class"
InvokerHelper.setProperties(testLogging, test.testLogging.properties)
systemProperties = test.systemProperties
systemProperty "org.conscrypt.useEngineSocketByDefault", false
}
check.dependsOn testFdSocket
// Tests that involve interoperation with the OpenJDK TLS provider (generally to
// test renegotiation, since we don't support initiating renegotiation but do
// support peer-initiated renegotiation). The JDK TLS provider doesn't work
// if Conscrypt is installed as the default provider, so these need to live in
// a different task than the other tests, most of which need Conscrypt to be
// installed to function.
def testInterop = tasks.register("testInterop", Test) {
include "org/conscrypt/ConscryptEngineTest.class"
include "org/conscrypt/RenegotiationTest.class"
}
check.dependsOn testInterop
jacocoTestReport {
additionalSourceDirs.from files("$rootDir/openjdk/src/test/java", "$rootDir/common/src/main/java")
executionData tasks.withType(Test)
}
javadoc {
dependsOn(configurations.publicApiDocs)
// TODO(prb): Update doclet to Java 11.
// options.doclet = "org.conscrypt.doclet.FilterDoclet"
// options.docletpath = configurations.publicApiDocs.files as List
}
def jniIncludeDir() {
def result = ""
java {
def jdkHome = javaToolchains.compilerFor(toolchain).get().metadata.getInstallationPath()
result = jdkHome.file("include").toString()
}
result
}
model {
buildTypes {
release
}
components {
// Builds the JNI library.
conscrypt_openjdk_jni(NativeLibrarySpec) {
nativeBuilds.each { nativeBuild ->
targetPlatform nativeBuild.targetPlatform()
}
sources {
cpp {
source {
srcDirs "$jniSourceDir/main/cpp"
include "**/*.cc"
}
}
}
binaries {
// Build the JNI lib as a shared library.
withType (SharedLibraryBinarySpec) {
cppCompiler.define "CONSCRYPT_OPENJDK"
def jdkIncludeDir = jniIncludeDir()
def nativeBuild = NativeBuildInfo.find(targetPlatform)
String libPath = "$boringsslHome/${nativeBuild.libDir()}"
if (toolChain in Clang || toolChain in Gcc) {
cppCompiler.args "-Wall",
"-Werror",
"-fPIC",
"-O3",
"-std=c++17",
"-I$jniSourceDir/main/include",
"-I$jniSourceDir/unbundled/include",
"-I$boringsslIncludeDir",
"-I$jdkIncludeDir",
"-I$jdkIncludeDir/linux",
"-I$jdkIncludeDir/darwin",
"-I$jdkIncludeDir/win32"
if (rootProject.hasProperty('checkErrorQueue')) {
System.out.println("Compiling with error queue checking enabled")
cppCompiler.define "CONSCRYPT_CHECK_ERROR_QUEUE"
}
// Static link to BoringSSL
linker.args "-O3",
"-fvisibility=hidden",
"-lpthread",
libPath + "/ssl/libssl.a",
libPath + "/crypto/libcrypto.a"
if (targetPlatform.operatingSystem.isLinux()) {
// Static link libstdc++ and libgcc because
// they are not available in some restrictive Linux
// environments.
linker.args "-static-libstdc++",
"-static-libgcc"
} else {
linker.args "-lstdc++"
}
} else if (toolChain in VisualCpp) {
cppCompiler.define "DLL_EXPORT"
cppCompiler.define "WIN32_LEAN_AND_MEAN"
cppCompiler.define "NOMINMAX"
cppCompiler.define "WIN64"
cppCompiler.define "_WINDOWS"
cppCompiler.define "UNICODE"
cppCompiler.define "_UNICODE"
cppCompiler.define "NDEBUG"
cppCompiler.args "/nologo",
"/MT",
"/WX-",
"/Wall",
"/O2",
"/Oi",
"/Ot",
"/GL",
"/GS",
"/Gy",
"/fp:precise",
"/std:c++17",
"-wd4514", // Unreferenced inline function removed
"-wd4548", // Expression before comma has no effect
"-wd4625", // Copy constructor was implicitly defined as deleted
"-wd4626", // Assignment operator was implicitly defined as deleted
"-wd4710", // function not inlined
"-wd4711", // function inlined
"-wd4820", // Extra padding added to struct
"-wd4946", // reinterpret_cast used between related classes:
"-wd4996", // Thread safety for strerror
"-wd5027", // Move assignment operator was implicitly defined as deleted
"-I$jniSourceDir/main/include",
"-I$jniSourceDir/unbundled/include",
"-I$boringsslIncludeDir",
"-I$jdkIncludeDir",
"-I$jdkIncludeDir/win32"
// Static link to BoringSSL
linker.args "-WX",
"ws2_32.lib",
"advapi32.lib",
"${libPath}\\ssl\\ssl.lib",
"${libPath}\\crypto\\crypto.lib"
}
}
// Never build a static library.
withType(StaticLibraryBinarySpec) {
buildable = false
}
}
}
}
tasks { t ->
$.binaries.withType(SharedLibraryBinarySpec).each { binary ->
def nativeBuild = NativeBuildInfo.find(binary.targetPlatform)
def classifier = nativeBuild.mavenClassifier()
def source = binary.sharedLibraryFile
// Copies the native library to a resource location that will be included in the jar.
def copyTask = project.tasks.register("copyNativeLib${classifier}", Copy) {
dependsOn binary.tasks.link
from source
// Rename the artifact to include the generated classifier
rename '(.+)(\\.[^\\.]+)', "\$1-$classifier\$2"
// Everything under will be included in the native jar.
into nativeBuild.jarNativeResourcesDir()
}
processResources {
dependsOn copyTask
}
processTestResources {
dependsOn copyTask
}
// Now define a task to strip the release binary (linux only)
if (osdetector.os == 'linux' && (!rootProject.hasProperty('nostrip') ||
!rootProject.nostrip.toBoolean())) {
def stripTask = binary.tasks.taskName("strip")
project.tasks.register(stripTask as String, Exec) {
dependsOn binary.tasks.link
executable "strip"
args binary.tasks.link.linkedFile.asFile.get()
}
copyTask.configure {
dependsOn stripTask
}
}
}
}
}
boolean isExecutableOnPath(executable) {
FilenameFilter filter = new FilenameFilter() {
@Override
boolean accept(File dir, String name) {
return executable.equals(name);
}
}
for(String folder : System.getenv('PATH').split("" + File.pathSeparatorChar)) {
File[] files = file(folder).listFiles(filter)
if (files != null && files.size() > 0) {
return true;
}
}
return false;
}