build.xml

<project name="ejbca" default="build" basedir=".">

	<!-- Import build specific info, like version number -->
    <property file="src/internal.properties" />
	
	<dirname property="ejbca.home" file="${ant.file.ejbca}"/>
    <property environment="env" />
	
    <!-- set global properties for this build -->
    <property name="tmp" value="${ejbca.home}/tmp" />
    <property name="lib" value="${ejbca.home}/lib" />
    <property name="dist.dir" location="${ejbca.home}/dist" />
	
    <property name="apidoc" value="${ejbca.home}/doc/api" />

	<!-- include the standard properties and paths
    <import file="propertyDefaults.xml"/>
    -->
    <!-- this import is used by the modules scheme-->
    <import file="${ejbca.home}/modules/build-properties.xml"/>

	<import file="bin/${appserver.type}.xml" optional="true"/><!-- We might just want to build the clientToolBox with an appserver. -->
	<property name="reports.base.dir" location="${ejbca.home}/reports/"/>
	<property name="reports.dir" location="${reports.base.dir}/test"/>		
	<import file="./test.xmli" />
	<import file="./docs.xmli" />
        <!-- Include the build file which takes care of removed features detection (for options etc). -->
        <import file="./removed.xml" />
        <!-- Include the build file which takes care of deprecation detection (for options etc). -->
        <import file="./deprecated.xml" />

    <!-- =================================================================== -->
    <!-- Clean ALL                                                           -->
    <!-- =================================================================== -->
    <target name="clean" depends="deprecated:check">
        <delete dir="${dist.dir}" />
    	<delete dir="${reports.base.dir}" />
        <delete dir="${apidoc}" />
        <delete dir="${tmp}"/>
        <ant antfile="modules/build.xml" target="clean" inheritall="true" inheritrefs="true"/>
    </target>
	
	<!-- =================================================================== -->
	<!-- Clean Dist dirs                                                           -->
	<!-- =================================================================== -->
	<target name="cleanDistDir" depends="deprecated:check">
		 <delete dir="${dist.dir}" />
		 <ant antfile="modules/build.xml" target="clean" inheritall="false"/>
	</target>


	<!-- =================================================================== -->
	<!-- Clean Reports and Screenshots                                                           -->
	<!-- =================================================================== -->
	<target name="cleanReports" description="Clean up this module">
		<delete dir="${reports.base.dir}/images"/>
		<delete file="${reports.base.dir}/QaEjbcaTestReport.html" />

	</target>
	
    <!-- =================================================================== -->
    <!-- Build ALL                                                           -->
    <!-- =================================================================== -->
    <target name="build" depends="deprecated:check, fail-unless-appserver-detected, testforgnujava, ejbca.ear" description="Builds EJBCA"/>
    
	<!--
	  Installs EJBCA by creating an initial CA and generating certs for
	  SSL and the super administrator.
	  -->
    <target name="runinstall">
        <ant dir="${ejbca.home}/bin" antfile="cli.xml" target="ejbca:install" />
    </target>

    <target name="javatruststore" depends="testforgnujava, deprecated:check" description="Install RootCA certificate in Java trust store (can be run wih -Dca.name=FooCA -Dtrust.keystore=trust.jks -Dtrust.password=foo123). Use alphanumeric password to avoid potential escaping issues.">
        <ant dir="${ejbca.home}/bin" antfile="cli.xml" target="ejbca:javatruststore" />
        <antcall target="jee:deploytruststore" />
    </target>

    <!-- =================================================================== -->
	<!-- Make sure the user isn't using the GNU version of java              -->
    <!-- =================================================================== -->
	<target name="testforgnujava">
		<exec executable="java" outputproperty="testforgnujava.temp">
			<arg value="-version" />
		</exec>

		<fail>
			<condition>
				<contains string="${testforgnujava.temp}" substring="gij" />
			</condition>
			..
			You are currently using the GNU version of JAVA. Please install the version from Sun
			or make sure that the Sun version of java is in the path. If this was run using 'sudo'
			or 'su', make sure that the superuser has the correct path too.
		</fail>
	</target>
	
    <!-- =================================================================== -->
	<!-- Dont allow deploy of the wrong thing in production                  -->
    <!-- =================================================================== -->
    <target name="failinproduction-deprecation">
		<fail message="ejbca.productionmode no longer supports 'va' or 'ocsp' options. Use 'true' instead.">
			<condition>
				<or>
				    <equals arg1="${ejbca.productionmode}" arg2="va" casesensitive="false"/>
				    <equals arg1="${ejbca.productionmode}" arg2="ocsp" casesensitive="false"/>
				</or>
			</condition>
		</fail>
    </target>
    <target name="failinproduction">
		<fail message="ejbca.productionmode must be set to false for this operation.">
			<condition>
				<or>
					<not>
				    	<equals arg1="${ejbca.productionmode}" arg2="false" casesensitive="false"/>
					</not>
				</or>
			</condition>
		</fail>
    </target>

    <!-- =================================================================== -->
    <!-- Build ca ejb part                                                    -->
    <!-- =================================================================== -->
    <target name="ejbca-ejb.jar">
    	<ant antfile="build.xml" dir="modules" target="ejbca-ejb" />
    </target>
	
    <!-- =================================================================== -->
    <!-- Build ejbca common part                                                    -->
    <!-- =================================================================== -->
    <target name="ejbca-common.jar" depends="deprecated:check" description="Creates ejbca util classes for use in other projects.jar">
        <ant antfile="build.xml" dir="modules" target="ejbca-common" />
    </target>    	

	<macrodef name="jar-replacement-in-module" description="Optionally enable and configure a EJB module in the EAR">
		<attribute name="replacement-tag"/>
		<attribute name="replacement-file"/>
		<attribute name="replacement-enabled"/>
		<attribute name="replacement-ejb"/>
		<sequential>
			<condition property="replacement-string-@{replacement-ejb}" else="@{replacement-tag}" value="module>&lt;ejb>@{replacement-ejb}&lt;/ejb>&lt;/module>">
				<istrue value="@{replacement-enabled}"/>
			</condition>
			<replace file="@{replacement-file}" token="@{replacement-tag}" value="${replacement-string-@{replacement-ejb}}"/>
            <condition property="didwhat-@{replacement-ejb}" else="Disabled" value="Enabled">
                <istrue value="@{replacement-enabled}"/>
            </condition>
		    <echo message="${didwhat-@{replacement-ejb}} module @{replacement-ejb}"/>
		</sequential>
	</macrodef>
	<macrodef name="connector-replacement-in-module" description="Optionally enable and configure a EJB connector in the EAR">
		<attribute name="replacement-tag"/>
		<attribute name="replacement-file"/>
		<attribute name="replacement-enabled"/>
		<attribute name="replacement-connector"/>
		<sequential>
			<condition property="replacement-string-@{replacement-connector}" else="@{replacement-tag}" value="module>&lt;connector>@{replacement-connector}&lt;/connector>&lt;/module>">
				<istrue value="@{replacement-enabled}"/>
			</condition>
			<replace file="@{replacement-file}" token="@{replacement-tag}" value="${replacement-string-@{replacement-connector}}"/>
            <condition property="didwhat-@{replacement-connector}" else="Disabled" value="Enabled">
                <istrue value="@{replacement-enabled}"/>
            </condition>
		    <echo message="${didwhat-@{replacement-connector}} module @{replacement-connector}"/>
		</sequential>
	</macrodef>
	<macrodef name="war-replacement-in-module" description="Optionally enable and configure a WAR module in the EAR">
		<attribute name="replacement-tag"/>
		<attribute name="replacement-file"/>
		<attribute name="replacement-enabled"/>
		<attribute name="replacement-web-uri"/>
		<attribute name="replacement-context-root"/>
		<sequential>
			<condition property="replacement-string-@{replacement-web-uri}" else="@{replacement-tag}" value="module>&lt;web>&lt;web-uri>@{replacement-web-uri}&lt;/web-uri>&lt;context-root>@{replacement-context-root}&lt;/context-root>&lt;/web>&lt;/module>">
				<istrue value="@{replacement-enabled}"/>
			</condition>
			<condition property="replacement-echo-@{replacement-web-uri}" value="true">
				<istrue value="@{replacement-enabled}"/>
			</condition>
			<replace file="@{replacement-file}" token="@{replacement-tag}" value="${replacement-string-@{replacement-web-uri}}"/>
            <condition property="didwhat-@{replacement-web-uri}" else="Disabled" value="Enabled">
                <istrue value="@{replacement-enabled}"/>
            </condition>
            <echo message="${didwhat-@{replacement-web-uri}} module @{replacement-web-uri}"/>
		</sequential>
	</macrodef>

    <target name="condition.pluginIsJarBased">
		<property file="${ejbca.plugin.property.file}"/>
        <condition property="pluginIsJarBased">
            <not>
				<isset property="plugin.ejbca.ant.file"/>
			</not>
        </condition>
    </target>

    <target name="build-one-plugin" depends="condition.pluginIsJarBased, include-plugin-from-jar, build-one-plugin-from-source" />

  <target name="include-plugin-from-jar" if="pluginIsJarBased">
	<property file="${ejbca.plugin.property.file}"/>
	<fail message="File '${ejbca.plugin.property.file}' lacks a property setting for 'plugin.ejbca.lib.dir'!">
            <condition>
                <not>
                    <isset property="plugin.ejbca.lib.dir"/>
                </not>
            </condition>
        </fail>
    <copy todir="${ejbca.plugin.gen.path}/lib">
    	<fileset dir="${plugin.ejbca.lib.dir}">
        	<include name="*.jar" />
     	</fileset>
     </copy>
  </target>

  <target name="build-one-plugin-from-source" unless="pluginIsJarBased">
        <echo message="Processing plugin file: '${ejbca.plugin.property.file}'"/>
        <property file="${ejbca.plugin.property.file}"/>
        <fail message="File '${ejbca.plugin.property.file}' lacks a property setting for 'plugin.ejbca.ant.file'!">
            <condition>
                <not>
                    <isset property="plugin.ejbca.ant.file"/>
                </not>
            </condition>
        </fail>
        <path id="ejbca.plugin.classpath">
            <fileset dir="${lib}">
                <include name="*.jar"/>
            </fileset>
            <fileset dir="${ejbca.home}/modules/dist">
                <include name="*.jar"/>
            </fileset>
            <fileset dir="${dist.dir}">
                <include name="*.jar"/>
            </fileset>
            <path refid="lib.ejbca-common-web.classpath"/>
            <path refid="lib.log4j.classpath"/>
            <path refid="lib.servlet.classpath"/>
            <path refid="lib.commons-lang.classpath"/>
            <path refid="lib.commons-fileupload.classpath"/>
            <path refid="lib.jee.classpath"/>
            <path refid="lib.bouncycastle.classpath"/>
            <path refid="lib.ldap.classpath"/>
        </path>
    	<delete dir="${ejbca.plugin.tmp.path}"/>
    	<mkdir dir="${ejbca.plugin.tmp.path}"/>
	    <script language="javascript"> <![CDATA[
	        var antcall = project.createTask ("ant");

	        // The minimum configuration: a path to an "ant" build file
	        antcall.setAntfile (project.getProperty ("plugin.ejbca.ant.file"));

	        // Check for possible non-default "ant" target
	        var build_target = project.getProperty ("plugin.ejbca.ant.target");
	        if (build_target != null) {
	            antcall.setTarget (build_target);
	        }

	        // Check for possible custom properties
			var properties = project.getProperties ();
		    var keys = properties.keys ();
		    while (keys.hasMoreElements ()) {
	        var key = keys.nextElement ();
		        if (key.startsWith ("plugin.ejbca.ant.custom.")) {
		            var custom_prop = antcall.createProperty ();
		            custom_prop.setName (key);
		            custom_prop.setValue (properties.get (key));
		        }
		    }
	    	
            // The class-path to it all
		    var myref = new org.apache.tools.ant.taskdefs.Ant.Reference ();
		    myref.setRefId ("ejbca.plugin.classpath");
	        var prop = antcall.createProperty ();
	        prop.setName ("ejbca.classpath");
	        prop.setRefid (myref);

           // The full path to "application.xml"
	        prop = antcall.createProperty ();
	        prop.setName ("ejbca.app.xml");
	        prop.setValue (project.getProperty ("eardd.src") + "/META-INF/application.xml");

			// The database type in case the plugin wants to extend etc.
	    	prop = antcall.createProperty ();
		    prop.setName ("ejbca.dbtype");
		    prop.setValue (project.getProperty ("database.name"));
	    	
			// The datasource for using with persistence.xml (hibernate)
	    	prop = antcall.createProperty ();
		    prop.setName ("ejbca.datasource");
		    prop.setValue (project.getProperty ("datasource.jndi-name-prefix") + project.getProperty ("datasource.jndi-name"));

			// The hibernate dialect in case the plugin wants to use hibernate.
			prop = antcall.createProperty ();
		    prop.setName ("ejbca.hibernate");
		    prop.setValue (project.getProperty ("hibernate.dialect"));

			// The path to generate code to
			prop = antcall.createProperty ();
		    prop.setName ("ejbca.gen.path");
		    prop.setValue (project.getProperty ("ejbca.plugin.gen.path"));

	    	// A path to use as you like
			prop = antcall.createProperty ();
		    prop.setName ("ejbca.tmp.path");
		    prop.setValue (project.getProperty ("ejbca.plugin.tmp.path"));

			// The path to the EJBCA install directory
			prop = antcall.createProperty ();
		    prop.setName ("ejbca.home");
    		prop.setValue (project.getProperty ("ejbca.home"));


	    	// Remove all properties the plugin doesn't need...
			antcall.setInheritAll (false);
	        antcall.setInheritRefs (false);
		    antcall.perform ();
	]]> </script>
    </target>

    <target name="plugin-bootstrap-build" if="ejbca.plugin.collection">
	    <!-- Called once immediately before "ejbca.ear" creation if there are any plugins to build -->
		<echo message="Plugins found!"/>
    	<mkdir dir="${ejbca.plugin.gen.path}/lib"/>
        <script language="javascript"> <![CDATA[
		    var path = project.getProperty ("ejbca.plugin.collection");

        	// Build one plugin at a time
        	while (path != null) {
		        var i = path.indexOf (java.io.File.pathSeparatorChar);
		        var plugin_file = path;
		        if (i > 0) {
		            plugin_file = path.substring (0, i);
		            path = path.substring (i + 1);
		        } else {
		            path = null;
		        }
		        var antcall = project.createTask ("antcall");
		        antcall.setTarget ("build-one-plugin");
		        var prop = antcall.createParam ();
		        prop.setName ("ejbca.plugin.property.file");
		        prop.setValue (plugin_file);
		        antcall.perform ();
		    }
    ]]> </script>
    </target>
    
	<target name="va_replacings_in_application.xml">
		<war-replacement-in-module
			replacement-tag="!--@status.war@-->"
			replacement-file="${application.xml}"
			replacement-enabled="${status.war.enabled}"
			replacement-web-uri="status.war"
			replacement-context-root="${ocsp.contextroot}"
		/>
		<war-replacement-in-module
			replacement-tag="!--@certstore.war@-->"
			replacement-file="${application.xml}"
			replacement-enabled="${certstore.enabled}"
			replacement-web-uri="certstore.war"
			replacement-context-root="${certstore.contextroot}"
		/>
		<war-replacement-in-module
			replacement-tag="!--@crlstore.war@-->"
			replacement-file="${application.xml}"
			replacement-enabled="${crlstore.enabled}"
			replacement-web-uri="crlstore.war"
			replacement-context-root="${crlstore.contextroot}"
		/>
	</target>

    <!-- =================================================================== -->
    <!-- Build CA-ear                                                        -->
    <!-- =================================================================== -->
	<target name="ejbca.ear" depends="display-properties, ejbca.ear.module-dependencies, create-log4config-bundle">
		<antcall target="doc.war" inheritall="true" inheritrefs="true"><param name="docs.external-deps-satfisfied" value="isset"/></antcall>
		<!-- This is quite ugly, we use two variables in order to decide if the systemtest files will be
		     included in the ear file or not. In ant 1.8 we could us an "if" to the "include" directive,
		     and only need one variable, but that does not work in ant 1.7 so... --> 
        <condition property="in-test-mode" else="false">
            <equals arg1="${ejbca.productionmode}" arg2="false" casesensitive="false"/>
        </condition>
        <condition property="in-test-mode-include" value="" else="dontinclude/">
            <equals arg1="${ejbca.productionmode}" arg2="false" casesensitive="false"/>
        </condition>
        <echo message="in-test-mode: ${in-test-mode}"/>
	    <property name="caear" value="${dist.dir}/ejbca.ear" />
		<property name="eardd.src" value="${tmp}/ear" />
		<!-- Make sure we have an application.xml since we want to specify base URLs. Configure enabled modules. -->
		<mkdir dir="${eardd.src}/META-INF"/>
		<copy todir="${eardd.src}/META-INF" file="src/deploy/ear/META-INF/application.xml" overwrite="true" flatten="true" failonerror="true"/>
		<!-- Currently (2013-08) for JBoss 6, include a user defined log4j.xml in META-INF for per-deployment log configuration, re-usable for other appservers using the appserver.subtype var. -->
		<copy overwrite="true" todir="${eardd.src}/META-INF" failonerror="false">
    		<fileset dir="${ejbca.home}/conf">
    		      <include name="log4j-${appserver.subtype}.xml"/>
   		    </fileset>
   		    <mapper type="regexp" from="log4j-.*" to="log4j.xml"/>
		</copy>
		<war-replacement-in-module
			replacement-tag="!--@doc.war@-->"
			replacement-file="${eardd.src}/META-INF/application.xml"
			replacement-enabled="${doc.war.enabled}"
			replacement-web-uri="doc.war"
			replacement-context-root="/ejbca/doc"
		/>
		<jar-replacement-in-module
			replacement-tag="!--@ejbca-ws-ejb.jar@-->"
			replacement-file="${eardd.src}/META-INF/application.xml"
			replacement-enabled="${ejbcaws.enabled}"
			replacement-ejb="ejbca-ws-ejb.jar"
		/>
		<jar-replacement-in-module
			replacement-tag="!--@ejbca-systemtest-ejb.jar@-->"
			replacement-file="${eardd.src}/META-INF/application.xml"
			replacement-enabled="${in-test-mode}"
			replacement-ejb="systemtests-ejb.jar"
		/>
		<jar-replacement-in-module
            replacement-tag="!--@statedump-ejb.jar@-->"
            replacement-file="${eardd.src}/META-INF/application.xml"
            replacement-enabled="${mod.statedump.exists}"
            replacement-ejb="statedump-ejb.jar"
        />
		<jar-replacement-in-module
            replacement-tag="!--@configdump-ejb.jar@-->"
            replacement-file="${eardd.src}/META-INF/application.xml"
            replacement-enabled="${mod.configdump.exists}"
            replacement-ejb="configdump-ejb.jar"
        />
		<jar-replacement-in-module
			replacement-tag="!--@peerconnector-ejb.jar@-->"
			replacement-file="${eardd.src}/META-INF/application.xml"
			replacement-enabled="${mod.peerconnector.exists}"
			replacement-ejb="peerconnector-ejb.jar"
		/>
        <jar-replacement-in-module
            replacement-tag="!--@cesecore-cvcca.jar@-->"
            replacement-file="${eardd.src}/META-INF/application.xml"
            replacement-enabled="${mod.cesecore-cvcca.exists}"
            replacement-ejb="cesecore-cvcca.jar"
        />
        <jar-replacement-in-module
            replacement-tag="!--@cesecore-x509ca.jar@-->"
            replacement-file="${eardd.src}/META-INF/application.xml"
            replacement-enabled="${mod.cesecore-x509ca.exists}"
            replacement-ejb="cesecore-x509ca.jar"
        />
		<jar-replacement-in-module
				replacement-tag="!--@proxy-ca.jar@-->"
				replacement-file="${eardd.src}/META-INF/application.xml"
				replacement-enabled="${mod.proxy-ca.exists}"
				replacement-ejb="proxy-ca.jar"
		/>
		<jar-replacement-in-module
			replacement-tag="!--@unidfnr-ejb.jar@-->"
			replacement-file="${eardd.src}/META-INF/application.xml"
			replacement-enabled="${mod.unidfnr.enabled}"
			replacement-ejb="unidfnr-ejb.jar"
		/>

		<connector-replacement-in-module
			replacement-tag="!--@peerconnector.rar@-->"
			replacement-file="${eardd.src}/META-INF/application.xml"
			replacement-enabled="${mod.peerconnector-rar.exists}"
			replacement-connector="peerconnector.rar"
		/>
		<war-replacement-in-module
			replacement-tag="!--@peerconnector.war@-->"
			replacement-file="${eardd.src}/META-INF/application.xml"
			replacement-enabled="${mod.peerconnector.exists}"
			replacement-web-uri="peerconnector.war"
			replacement-context-root="/ejbca/peer"
		/>
		<war-replacement-in-module
			replacement-tag="!--@ra-gui.war@-->"
			replacement-file="${eardd.src}/META-INF/application.xml"
			replacement-enabled="${variant.ra.enabled}"
			replacement-web-uri="ra-gui.war"
			replacement-context-root="/ejbca/ra"
		/>
		<war-replacement-in-module
				replacement-tag="!--@acme.war@-->"
				replacement-file="${eardd.src}/META-INF/application.xml"
				replacement-enabled="${mod.acme.exists}"
				replacement-web-uri="acme.war"
				replacement-context-root="/ejbca/acme"
		/>
		<war-replacement-in-module
               	replacement-tag="!--@msae.war@-->"
              	replacement-file="${eardd.src}/META-INF/application.xml"
                replacement-enabled="${mod.msae.exists}"
       	        replacement-web-uri="msae.war"
				replacement-context-root="/ejbca/msae"
		/>
		<war-replacement-in-module
               	replacement-tag="!--@cits.war@-->"
              	replacement-file="${eardd.src}/META-INF/application.xml"
                replacement-enabled="${mod.cits.exists}"
       	        replacement-web-uri="cits.war"
				replacement-context-root="/ejbca/its"
		/>
		<war-replacement-in-module
                	replacement-tag="!--@est.war@-->"
                	replacement-file="${eardd.src}/META-INF/application.xml"
	                replacement-enabled="${mod.est.exists}"
        	        replacement-web-uri="est.war"
			replacement-context-root="/.well-known/est"
		/>
		<war-replacement-in-module
				replacement-tag="!--@ejbca-rest-api.war@-->"
				replacement-file="${eardd.src}/META-INF/application.xml"
			    replacement-enabled="${mod.ejbca-rest-api.exists}"
				replacement-web-uri="ejbca-rest-api.war"
				replacement-context-root="/ejbca/ejbca-rest-api"
		/>
		
		<war-replacement-in-module
                replacement-tag="!--@swagger-ui.war@-->"
                replacement-file="${eardd.src}/META-INF/application.xml"
                replacement-enabled="${swagger-ui.exists}"
                replacement-web-uri="swagger-ui.war"
                replacement-context-root="/ejbca/swagger-ui"
		/>
		
		<war-replacement-in-module
		                	replacement-tag="!--@ssh.war@-->"
		                	replacement-file="${eardd.src}/META-INF/application.xml"
			                replacement-enabled="${mod.ssh.exists}"
		        	        replacement-web-uri="ssh.war"
					replacement-context-root="/ejbca/ssh"
				/>
		
		<antcall target="va_replacings_in_application.xml" inheritall="true" inheritrefs="true">
			<param name="application.xml" value="${eardd.src}/META-INF/application.xml"/>
		</antcall>
		<!-- Include Xerces library if it don't exist in the current application server (jboss6 won't start with it). -->
		<condition property="bundle-xerces-exclude" value="xerces*.jar" else="">
			<isset property="exclude-xerces"/>
		</condition>
		<!-- Remove possible "leftovers" from previous plugin runs! -->
	    <delete dir="${ejbca.plugin.gen.path}"/>
        <!-- Plugin build starts here... -->
	    <antcall target="plugin-bootstrap-build" inheritall="true" inheritrefs="true"/>
		<!-- Build the EAR -->
        <ear destfile="${caear}" appxml="${eardd.src}/META-INF/application.xml">
    		<!-- Add other specific files we need in META-INF -->
            <zipfileset prefix="META-INF" dir="${eardd.src}/META-INF" includes="log4j.xml"/>
    		<!-- Specify that we will use a specific WS implementation -->
            <zipfileset prefix="META-INF/services" dir="${ejbca.home}/src/deploy/ear/META-INF/services/" includes="javax.xml.soap.MetaFactory"/>
        	<!-- Add application server specific XML files -->
            <zipfileset prefix="META-INF" dir="${ejbca.home}/src/deploy/ear/META-INF" includes="jboss-deployment-structure.xml"/>
        	<!-- The place where to find plugins -->
		    <zipfileset dir="${ejbca.plugin.gen.path}" erroronmissingdir="false"/>
            <zipfileset prefix="lib" dir="${lib}">
                <include name="bcpkix-jdk18on-*.jar"/>
                <include name="bcprov-jdk18on-*.jar"/>
                <include name="bctls-jdk18on-*.jar"/>
				<include name="bcutil-jdk18on-*.jar"/>
                <include name="cert-cvc-*.jar" />
                <include name="log4j-*.jar"/>
                <include name="jldap-*.jar" />
            	<include name="adsddl-*.jar"/>
                <include name="commons-*.jar" />
				<include name="nimbus-jose-jwt-*.jar"/>
				<include name="httpclient-*.jar" />
                <include name="httpcore-*.jar" />
                <include name="httpmime-*.jar" />
                <include name="json-simple-*.jar" />
                <include name="jcip-annotations-*.jar" />
            	<include name="snakeyaml-*.jar" />
            	<include name="dns*.jar" />
                <include name="guava-*.jar" />
                <include name="caffeine-*.jar" />
            	<include name="jsch-*.jar" />
            	<include name="jna-*.jar"/>
				<include name="kerb4j-server-common-*.jar"/>
				<include name="kerb-core-*.jar"/>
				<include name="kerby-asn1-*.jar"/>
            	<include name="kerb-crypto-*.jar"/>
        		<include name="x509-common-util*.jar" />
            	<include name="cryptotokens-*.jar" />
        		<include name="p11ng-*.jar" />
            	<!-- Internally generated WS server and client files. -->
            	<include name="ejbca-ws-client-gen.jar"/>
            </zipfileset>
            <zipfileset prefix="lib" dir="${lib}/ct" erroronmissingdir="false">
                <!-- Certificate Transparency -->
                <include name="ctlog-*.jar" />
                <include name="protobuf-java-*.jar" />
            </zipfileset>
        	<!-- Swagger is included in each module.war/WEB-INF/lib/ instead,
        	     since it is not designed for multiple APIs in the same class loader.
			<zipfileset prefix="lib" dir="${lib}/ext/swagger" erroronmissingdir="false" includes="*.jar"/>
			-->
			<zipfileset prefix="lib" dir="${lib}/ext/jackson2" erroronmissingdir="false">
				<include name="jackson-annotations-2.*.jar"/>
				<include name="jackson-core-2.*.jar"/>
				<include name="jackson-databind-2.*.jar"/>
				<include name="jackson-dataformat-yaml-2.*.jar"/>
			</zipfileset>
        	
            <fileset dir="${dist.dir}" includes="doc*.war"/>
            <fileset dir="${ejbca.home}/modules/dist">
                <include name="cesecore-ejb.jar" />
                <include name="ejbca-ejb.jar" />
            	<include name="edition-specific-ejb.jar" />
                <include name="ejbca-ws-ejb.jar" />
                <include name="adminweb.war" />
                <include name="cmp.war" />
                <include name="scep.war" />
                <include name="est.war" />
                <include name="healthcheck.war" />
                <include name="clearcache.war" />
                <include name="webdist.war" />
                <include name="status.war" />
                <include name="certstore.war" />
                <include name="crlstore.war" />
				<include name="${in-test-mode-include}systemtests-ejb.jar"/>
            	<include name="statedump-ejb.jar" />
            	<include name="configdump-ejb.jar" />
            	<include name="peerconnector.rar" />
                <include name="peerconnector.war" />
                <include name="peerconnector-ejb.jar" />
                <include name="unidfnr-ejb.jar" />
                <include name="ra-gui.war" />
                <include name="ejbca-rest-api.war"/>
            	<include name="acme.war" />
        		<include name="${in-test-mode-include}systemtests-common.jar"/>
            	<include name="ssh.war" />
            	<include name="msae.war" />
            	<include name="cits.war" />
            </fileset>
        	
        	<fileset dir="${ejbca.home}/lib/swagger">
        		<include name="swagger-ui.war" />
    		</fileset>
        	
        	<zipfileset prefix="lib" dir="${ejbca.home}/modules/dist">
                <include name="ejbca-common-web.jar" />
                <include name="ejbca-interface.jar" />
                <include name="ejbca-entity.jar" />
                <include name="ejbca-ws.jar" />
                <include name="cesecore-ejb-interface.jar" />
                <include name="cesecore-common.jar" />
                <include name="cesecore-entity.jar" />
        		<include name="cesecore-x509ca.jar" />
        		<include name="cesecore-cvcca.jar" />
        		<include name="ejbca-extensions.jar" />
                <include name="ejbca-properties.jar" />
                <include name="log4jconfig.jar" />
        		<include name="${in-test-mode-include}systemtests-interfaces.jar"/>
        		<include name="${in-test-mode-include}systemtests-common.jar"/>
        	    <include name="ct.jar" />
        		<include name="edition-specific-interface.jar" />
        		<include name="edition-specific-ejb.jar" />
        		<include name="statedump-common.jar" />
        		<include name="configdump-common.jar" />
        		<include name="peerconnector-ra.jar" />
                <include name="peerconnector-publ.jar" />
                <include name="peerconnector-interface.jar" />
                <include name="peerconnector-common.jar" />
        		<include name="peerconnector-entity.jar" />
        		<include name="plugins.jar" />
        		<include name="plugins-ee.jar" />
        		<include name="caa.jar" />
	            <include name="unidfnr-ejb.jar" />
	            <include name="ejbca-ejb.jar" />
				<include name="acme-common.jar" />
        		<include name="ejbca-ssh.jar" />
        		<include name="ejbca-cits.jar" />
        		<include name="proxy-ca.jar" />
        	</zipfileset>
            <!-- Include XStream for the use from statedump-ejb.jar -->
            <zipfileset prefix="lib" dir="${lib}/xstream" erroronmissingdir="false">
                <include name="*.jar"/>
            </zipfileset>
        	<!-- Include JackNji11 for use from P11NG -->
        	<zipfileset prefix="lib" dir="${lib}" includes="jacknji11-*.jar"/>
        	<zipfileset prefix="lib" dir="${mod.dist.path}">
        		<!-- ejbca-ws-client is needed for automatic OCSP Renewal via WS
        		     There are classpath issues using the ejbca-ws-cli.jar though, since this jar contain class-patch in META-INF/MANIFEST 
        		     and the appserver wants to manage the classpath when running in an ear, therefore we have a ejbca-ws-client.jar, that is the 
        		     same as the ejbca-ws-cli.jar, except there is no classpath and mainclass in the META-INF/MANIFEST file. -->
        		<include name="${mod.ejbca-ws-client.libname}" />
        	</zipfileset>
        	<zipfileset prefix="lib" dir="${dist.dir}" includes="ejbca-common.jar"/>
		</ear>
    	<antcall target="signjar" inheritall="true" inheritrefs="true">
        	<param name="signjar.file" value="${caear}"/>
    	</antcall>
    </target>	

	<target name="create-log4config-bundle">
		<mkdir dir="tmp"/>
		<!-- For appservers that don't come with Log4J we need to bundle a configuration file in the classpath (in the EARs lib/ directory in a JAR) -->
		<copy overwrite="true" todir="tmp" failonerror="false">
    		<fileset dir="${ejbca.home}/conf">
    		      <include name="log4j-${appserver.type}.xml.sample"/>
   		    </fileset>
   		    <mapper type="regexp" from="log4j-.*" to="log4j.xml"/>
		</copy>
		<copy overwrite="true" todir="tmp" failonerror="false">
			<fileset dir="${ejbca.home}/conf">
		      <include name="log4j-${appserver.type}.xml"/>
		    </fileset>
   		    <mapper type="regexp" from="log4j-.*" to="log4j.xml"/>
		</copy>
		<!-- If we don't have a specific file for an appserver, perhaps we have one for the subtype (i.e. jboss and jboss6) -->
		<copy overwrite="true" todir="tmp" failonerror="false">
    		<fileset dir="${ejbca.home}/conf">
    		      <include name="log4j-${appserver.subtype}.xml.sample"/>
   		    </fileset>
   		    <mapper type="regexp" from="log4j-.*" to="log4j.xml"/>
		</copy>
		<copy overwrite="true" todir="tmp" failonerror="false">
    		<fileset dir="${ejbca.home}/conf">
    		      <include name="log4j-${appserver.subtype}.xml"/>
   		    </fileset>
   		    <mapper type="regexp" from="log4j-.*" to="log4j.xml"/>
		</copy>
		<jar destfile="modules/dist/log4jconfig.jar" whenempty="skip" basedir="tmp" includes="log4j.xml"/>
		<delete file="tmp/log4j.xml"/>
	</target>

    <!-- =================================================================== -->
    <!-- Build Javadoc part                                                  -->
    <!-- =================================================================== -->
    <target name="javadoc" description="Build JavaDoc for all modules" depends="deprecated:check">
        <mkdir dir="${apidoc}" />
    	<path id="javadoc-dependencies.classpath">
    		<fileset dir="${lib}" includes="**/*.jar"/>
    		<fileset dir="${ant.home}/lib/" includes="ant.jar"/>
    	</path>
    	<!-- extdirs="${lib}" -->
        <javadoc packagenames="org.ejbca.*,org.cesecore.*,com.keyfactor.*" maxmemory="256m" destdir="${apidoc}" classpathref="javadoc-dependencies.classpath" 
        	author="true" version="true" use="true" windowtitle="EJBCA API" bottom="Copyright &#169; PrimeKey Solutions AB." >
            <sourcepath location="${ejbca.home}/modules/cesecore-common/src"/>
        	<sourcepath location="${ejbca.home}/modules/cesecore-cvcca/src"/>
            <sourcepath location="${ejbca.home}/modules/cesecore-ejb/src"/>
            <sourcepath location="${ejbca.home}/modules/cesecore-ejb-interface/src"/>
            <sourcepath location="${ejbca.home}/modules/cesecore-entity/src"/>
        	<sourcepath location="${ejbca.home}/modules/cesecore-x509ca/src"/>
           	<sourcepath location="${ejbca.home}/modules/clientToolBox/src"/>
        	<sourcepath location="${ejbca.home}/modules/edition-specific/src-ejb/"/>
        	<sourcepath location="${ejbca.home}/modules/edition-specific/src-interface/"/>
           	<sourcepath location="${ejbca.home}/modules/edition-specific-ee/src-ejb/"/>
        	<sourcepath location="${ejbca.home}/modules/ejbca-common/src/"/>
        	<sourcepath location="${ejbca.home}/modules/ejbca-common-web/src/"/>
        	<sourcepath location="${ejbca.home}/modules/ejbca-ejb/src/"/>
           	<sourcepath location="${ejbca.home}/modules/ejbca-ejb-cli/src"/>
           	<sourcepath location="${ejbca.home}/modules/ejbca-entity/src"/>
        	<sourcepath location="${ejbca.home}/modules/ejbca-ejb-interface/src"/>    	
            <sourcepath location="${ejbca.home}/modules/ejbca-ws/src"/>	
        	<sourcepath location="${ejbca.home}/modules/ejbca-ws-cli/src"/>
        	<sourcepath location="${ejbca.home}/modules/ejbca-ws-cli/src-gen"/>
        	<sourcepath location="${ejbca.home}/modules/peerconnector/src-cli"/>
        	<sourcepath location="${ejbca.home}/modules/peerconnector/src-common"/>
            <sourcepath location="${ejbca.home}/modules/peerconnector/src-ejb"/>
            <sourcepath location="${ejbca.home}/modules/peerconnector/src-interface"/>
            <sourcepath location="${ejbca.home}/modules/peerconnector/src-publ"/>
        	<sourcepath location="${ejbca.home}/modules/peerconnector/src-rar"/>
        	<sourcepath location="${ejbca.home}/modules/acme/src-common"/>
        	<sourcepath location="${ejbca.home}/modules/cits/src"/>
		<sourcepath location="${ejbca.home}/modules/peerconnector/src-war"/>
		<sourcepath location="${ejbca.home}/modules/peerconnector/src-ra"/>
        	<sourcepath location="${ejbca.home}/modules/va/src-war"/>
        	<sourcepath location="${ejbca.home}/modules/va/publisher/src"/>
        </javadoc>
    	<echo message=""/>
    	<dirname file="${apidoc}/index.html" property="javadoc.dir"/>
    	<echo message="EJBCA API is available in file://${javadoc.dir}/index.html"/>
    </target>

    <!-- ========================================================================== -->
    <!-- Upgrades the database for a new version of ejbca                           -->
    <!-- ========================================================================== -->
    <target name="upgrade" description="Run post-upgrade operations">
    	<java dir="${ejbca.home}" jar="${ejbca.home}/dist/ejbca-ejb-cli/ejbca-ejb-cli.jar" fork="true">
    		<arg line="upgrade"/>
    	</java>
	</target>


    <!-- ================================================================ -->
    <!-- Prompts for the database password if it has not been set already -->
    <!-- ================================================================ -->
	<target name="inputDatabasePassword" >
		<input message="Please enter the password to the database. Default works for H2." addproperty="database.password" defaultvalue="sa">
			<handler classname="org.apache.tools.ant.input.SecureInputHandler" />
		</input>
	</target>
	
	
    <!-- ========================================================================== -->
    <!-- Promts for truststore/keystore passwords if they have not been set already -->
    <!-- Note: This code is duplicated in cli.xml!!!!                               -->
    <!-- ========================================================================== -->
    
	<target name="inputKeystorePassword">
		<input message="Please enter the password of the truststore with the CA certificate for https?" addproperty="java.trustpassword" defaultvalue="changeit">
			<handler classname="org.apache.tools.ant.input.SecureInputHandler" />
		</input>
		<input message="Please enter the password of the keystore with the TLS key for https" addproperty="httpsserver.password" defaultvalue="serverpwd">
			<handler classname="org.apache.tools.ant.input.SecureInputHandler" />
		</input>
	</target>
	

	
    <!-- ======================================================================= -->
    <!-- Deploy EJBCA ear to JBoss                                               -->
    <!-- ======================================================================= -->
    <!-- Check if there exist a dist/ejbca.ear, if it exists deployear can just deploy it directly, if not we have to build it before deployear can deploy it -->
	<target name="checkearexists">
    	<condition property="ejbcaear.built">	
            <available file="${dist.dir}/ejbca.ear" type="file"/>
        </condition>
	</target>
	<target name="buildifnotbuilt" depends="checkearexists" unless="ejbcaear.built">
		<antcall target="build" inheritall="true" inheritrefs="true"/>
	</target>
    <target name="deploy" description="'ant deploy' is a deprecated target from outdated installation instructions, please use updated installation guides and the 'deployear' target">
        <echo message="'ant deploy' is a deprecated target from outdated installation instructions, please use updated installation guides and the 'deployear' target"/>
	</target>
    <target name="deployear" depends="buildifnotbuilt" description="Deploy the EJBCA application (ejbca.ear) without building and without deploying datasources or any configuration">       
		<fail message="File '${dist.dir}/ejbca.ear' to deploy does not exist. You must build the file using the 'ant' command.">
            <condition>
                <not>
                    <available file="${dist.dir}/ejbca.ear" type="file"/>
                </not>
            </condition>
        </fail>
        <antcall target="jee:deployear" />
        <antcall target="showtime" inheritall="true" inheritrefs="true"/>
    </target>

    <!-- ======================================================================= -->
    <!-- Deploy the keystores to the application server.                         -->
    <!-- ======================================================================= -->
    <target name="deploy-keystore" depends="deprecated:check" description="Deploy the keystore and truststore for the application server.">
      <antcall target="jee:keystore" />
    </target>

    <!-- ======================================================================= -->
    <!-- Deploy the datasources to the application server.                       -->
    <!-- ======================================================================= -->
    <target name="deploy-datasource" depends="deprecated:check" description="Deploy the datasources for the application server.">
      <antcall target="jee:deployDS" />
      <antcall target="jee:deployOCSPDS" />
    </target>

    <!-- ======================================================================= -->
    <!-- Deploy the services to the application server.                          -->
    <!-- ======================================================================= -->
    <target name="deploy-service" depends="deprecated:check" description="Deploy the services for the application server.">
      <antcall target="jee:deployServices" />
    </target>


	<target name="deploy-test" depends="failinproduction,build, inputDatabasePassword, inputKeystorePassword, deprecated:check" description="Deploy a test version of EJBCA.">		
		<!-- Build the test EAR -->
	   	<antcall target="jee:deployTestEar"/>
	</target>

    <!-- ======================================================================= -->
    <!-- Renew the keystore used by the web interface on the application server. -->
    <!-- ======================================================================= -->
    <target name="renew-keystore" depends="inputKeystorePassword, deprecated:check" description="Renews the keystore for the application server web interface. Don't forget to deploy the new keystore afterwards. The old keystore in p12/tomcat.jks will be overwritten.">
      <ant dir="${ejbca.home}/bin" antfile="cli.xml" target="ejbca:renew-keystore" />
    </target>

    <!-- ======================================================================= -->
    <!-- Make a ZIP release file of EJBCA, and a SHA1 checksum of the release    -->
	<!-- The ZIP file contains all the files used, but not temporary or compile files etc -->
    <!-- ======================================================================= -->
	<condition property="edition" value="ee" else="ce">
		<available file="${ejbca.home}/modules/plugins-ee/build.xml" />
	</condition>
	<property name="variant" value=""/> <!-- If we are running on a full EJBCA instance! -->

	<!-- This property is used to distinguish if we are running in full EJBCA or on a VA/RA only instance. To exclude parts from ejbca.sh accordingly -->
    <condition property="running.full.ejbca" value="true">
         <and>
            <not><equals arg1="${variant}" arg2="ra" casesensitive="false"/></not>
            <not><equals arg1="${variant}" arg2="va" casesensitive="false"/></not>
         </and>
    </condition>	
	
	<!-- Allows overruling the documentation generation for ziprelease. This is needed for Jenkins jobs, because confluence is not accessible from inside Jenkins. 
	     Default value (when you don't specify the -Ddoc.update flag at all) is TRUE -->
	<condition property="doc.update.ziprelease" value="true">
		   <not><equals arg1="${doc.update}" arg2="false"/></not>
	</condition>
	
	<target name="ziprelease" depends="deprecated:check" description="Make a zip file for EJBCA release. -Dvariant='ra', 'va' or 'eidas'">
		<antcall target="clean" />
		<!-- Always retrieve current version from Confluence -->
		<antcall target="doc" inheritAll="true">
			
			<param name="update.from.confluence" value="${doc.update.ziprelease}"/>	
            <param name="doc.update" value="${doc.update.ziprelease}"/> 
		</antcall>
		<!-- Copy the retrieved documentation from the tmp/docs directory into doc/dist for the sake of this release-->
		<copy todir="doc/dist" overwrite="true">
		    <fileset dir="tmp/htdocs/docs" includes="**/*" excludes="**/jquery.min.js"/>
		</copy>

		<antcall target="update-gitrev" /> <!-- update git revision version property -->
		<antcall target="update-edition" />
		
		<condition property="build.contains.eidas">
			<equals arg1="${variant}" arg2="eidas" casesensitive="false"/>
		</condition>
		
        <condition property="build.contains.va" value="true">
            <not><equals arg1="${variant}" arg2="ra" casesensitive="false"/></not>
        </condition>
		
        <condition property="build.contains.ra" value="true">
        	<not><equals arg1="${variant}" arg2="va" casesensitive="false"/></not>
        </condition>

        <condition property="build.contains.proxy-ca" value="true">
            <equals arg1="${variant}" arg2="proxy-ca" casesensitive="false"/>
        </condition>

        <condition property="build.contains.cesecore-x509ca" value="true">
        	<istrue value="${running.full.ejbca}" />
        </condition>
        
        <condition property="build.contains.cesecore-cvcca" value="true">
			<istrue value="${running.full.ejbca}" />
        </condition>
		
		<condition property="variant.suffix" value="_RA">
            <equals arg1="${variant}" arg2="ra" casesensitive="false"/>
        </condition>
        
        <condition property="variant.suffix" value="_VA">
            <equals arg1="${variant}" arg2="va" casesensitive="false"/>
        </condition>

		<condition property="variant.suffix" value="_eIDAS">
			<equals arg1="${variant}" arg2="eidas" casesensitive="false"/>
		</condition>

		<condition property="variant.suffix" value="_ProxyCA">
			<equals arg1="${variant}" arg2="proxy-ca" casesensitive="false"/>
		</condition>

		<condition property="variant.suffix" value="">
			<istrue value="${running.full.ejbca}" />
        </condition>
		
        <!-- Pre-configure eIDAS edition only to use P11NG with CP5 additions -->
	    <copy file="src/java/defaultvalues.properties" tofile="${tmp}/eidas/src/java/defaultvalues.properties" overwrite="true">
	        <filterchain>
	            <tokenfilter>
	                <replacestring from="#sunp11.cryptotoken.enabled=false" to="sunp11.cryptotoken.enabled=false"/>
	            </tokenfilter>
                <tokenfilter>
                    <replacestring from="#p11ng.cryptotoken.enabled=true" to="p11ng.cryptotoken.enabled=true"/>
                </tokenfilter>
                <tokenfilter>
                    <replacestring from="#p11ng.utimacocp5.enabled=true" to="p11ng.utimacocp5.enabled=true"/>
                </tokenfilter>
	        </filterchain>
	    </copy>

		<!-- Using native ant to convert dots in app.version.number for the zipversion -->
		<loadresource property="ejbca.zipversion">
			<propertyresource name="app.version.number"/>
			<filterchain>
				<tokenfilter>
					<replacestring from="." to="_"/>
				</tokenfilter>
			</filterchain>
		</loadresource>

        <!-- <input message="Version tag for zipfile (ex 3_2_1):" addproperty="ejbca.zipversion" /> -->
		<property name="basezipfile" value="ejbca_${edition}_${ejbca.zipversion}${variant.suffix}"/>
		
		<zip destfile="../${basezipfile}.zip">
		    <zipfileset dir="." prefix="${basezipfile}" filemode="600" dirmode="700" > 
		    	<include name="**/**" />
		    	<exclude name="**/CVS/**" />
		    	<exclude name="bin/backup/**" />
		    	<exclude name="tmp/**" />
		    	<exclude name="dist/**" />
		    	<exclude name="out/**" />
		    	<exclude name="p12*/**" />
		    	<exclude name="**/*.class" />
		    	<exclude name=".classpath" />
		    	<exclude name=".project" />
		    	<exclude name=".settings/**" />
		    	<exclude name="**/ejbca.properties" />
		    	<exclude name="conf/*.properties" />
		    	<exclude name="conf/logdevices/*.properties" />
		    	<exclude name="**/*.sh" />
		    	<exclude name="**/jndi.properties" />
		    	<exclude name="**/hs_err*" />
                <exclude name="**/*.log" />
                <exclude name=".metadata/**" />
		    	<exclude name="doc/xdocs/site/**" />
		    	<exclude name="modules/statedump/**" />
		    	<exclude name="container/" />
		    	<exclude name="Dockerfile" />
				<exclude name="preview/" />
				<exclude name="charts/" />
				<exclude name=".lighthouse/" />
				<exclude name=".jx/" />
				<exclude name=".github/" />
				<exclude name="OWNERS" />
				<exclude name="OWNERS_ALIASES" />
                <exclude name="src/package/" />
                <!-- Exclude directories from release that are built after "clean" as dependency to documentation -->
                <exclude name="modules/dist/**" />
                <exclude name="modules/buildtools/build/**" />
                <exclude name="modules/cesecore-common/build/**" />
                <exclude name="modules/cesecore-ejb-interface/build/**" />
                <exclude name="modules/cesecore-entity/build/**" />
                <exclude name="modules/ejbca-common/build-common/**" />
                <exclude name="modules/va/build-va-publisher/**" />
		    	<!-- Exclude internal Confluence information -->
		    	<exclude name="src/doc.properties" />
		    	<exclude unless="build.contains.cesecore-cvcca" name="modules/cesecore-cvcca/**"/>
		    	<exclude unless="build.contains.cesecore-x509ca" name="modules/cesecore-x509ca/**"/>
				<!-- List of modules to exclude from non-eIDAS editions -->
		    	<!-- Exclude standard values if eIDAS edition for which we will include the updated version below -->
                <exclude if="build.contains.eidas" name="src/java/defaultvalues.properties"/> 
                <exclude name="modules/p11ng-cli/src/org/ejbca/ui/p11ngcli/command/P11NgCliKeyAuthorizationCommand.java" unless="build.contains.eidas"/>
                <exclude name="modules/p11ng-cli/src/org/ejbca/ui/p11ngcli/command/P11NgCliKeyAuthorizationInitCommand.java" unless="build.contains.eidas"/>
                <exclude name="modules/p11ng-cli/src/org/ejbca/ui/p11ngcli/command/P11NgCliBackupObjectCommand.java" unless="build.contains.eidas"/>
                <exclude name="modules/p11ng-cli/src/org/ejbca/ui/p11ngcli/command/P11NgCliRestoreObjectCommand.java" unless="build.contains.eidas"/>
                <exclude name="modules/p11ng-cli/src/org/ejbca/ui/p11ngcli/command/P11NgCliUnblockKeyCommand.java" unless="build.contains.eidas"/>
                <exclude name="modules/ejbca-ejb-cli/src/org/ejbca/ui/cli/cryptotoken/CryptoTokenChangeAuthDataCommand.java" unless="build.contains.eidas"/>
		    	
		    	<exclude unless="build.contains.ra" name="modules/peerconnector/src-ra/org/ejbca/peerconnector/ra/RaMasterApiPeerImpl.java"/>
		    	<exclude unless="build.contains.ra" name="modules/peerconnector/src-ra/org/ejbca/peerconnector/ra/RaMasterApiPeerDownstreamImpl.java"/>
		    	<exclude unless="build.contains.ra" name="modules/peerconnector/src-ra/org/ejbca/peerconnector/ra/RaMasterApiPeerUpstreamImpl.java"/>
		    		
		    	<exclude unless="build.contains.ra" name="modules/ra-gui/**"/>
		    	
		    	<exclude unless="build.contains.va" name="modules/va/src-war/org/ejbca/ui/web/protocol/OCSPServlet.java"/>
		    	<exclude unless="build.contains.va" name="modules/va/resources/WEB-INF/web-status-ejbca.xml"/>

                <!-- Only include ProxyCA module if specified -->
                <exclude unless="build.contains.proxy-ca" name="modules/proxy-ca/**"/>
		    	
				<!-- List of subcommands for ejbca.sh script that must be hidden when we are running on limited ejbca (va/ra) installation. -->
		    	<!-- The excluded parts are listed in the ticket ECA-7904 and could be updated accordingly if needed.   -->
	            <exclude name="modules/ejbca-ejb-cli/src/org/ejbca/ui/cli/ca/**/CaEditCaCommand.java" unless="running.full.ejbca"/>
	            <exclude name="modules/ejbca-ejb-cli/src/org/ejbca/ui/cli/ca/**/CaRenewCACommand.java" unless="running.full.ejbca"/>
	            <exclude name="modules/ejbca-ejb-cli/src/org/ejbca/ui/cli/ca/**/CaDeactivateCACommand.java" unless="running.full.ejbca"/>
	            <exclude name="modules/ejbca-ejb-cli/src/org/ejbca/ui/cli/ca/**/CaInitCommand.java" unless="running.full.ejbca"/>
	            <exclude name="modules/ejbca-ejb-cli/src/org/ejbca/ui/cli/ca/**/CARepublishCommand.java" unless="running.full.ejbca"/>
	            <exclude name="modules/ejbca-ejb-cli/src/org/ejbca/ui/cli/ca/**/CaEditCertificateProfileCommand.java" unless="running.full.ejbca"/>
	            <exclude name="modules/ejbca-ejb-cli/src/org/ejbca/ui/cli/ca/**/CaCreateCrlCommand.java" unless="running.full.ejbca"/>
	            <exclude name="modules/ejbca-ejb-cli/src/org/ejbca/ui/cli/ca/**/CaExportProfilesCommand.java" unless="running.full.ejbca"/>
	            <exclude name="modules/ejbca-ejb-cli/src/org/ejbca/ui/cli/ca/**/CaImportProfilesCommand.java" unless="running.full.ejbca"/>
	            <exclude name="modules/ejbca-ejb-cli/src/org/ejbca/ui/cli/CreateCertCommand.java" unless="running.full.ejbca"/>
				<!-- End of the list of subcommands of ejbca.sh that must be hidden when we are running on limited ejbca (va/ra) installation -->
		    	
		    </zipfileset>
			
            <!-- Pre-configure eIDAS edition only to use P11NG with CP5 additions -->
            <zipfileset dir="${tmp}/eidas" prefix="${basezipfile}" filemode="700" dirmode="700"> 
                <include if="build.contains.eidas" name="src/java/defaultvalues.properties"/>
            </zipfileset>
			
		    <zipfileset dir="." prefix="${basezipfile}" filemode="700" dirmode="700"> 
		    	<include name="**/*.sh" />
				<exclude name="bin/backup/**" />
				<exclude name="modules/statedump/**" />
				<exclude name="container/**" />
				<exclude name=".jx/**" />
		    </zipfileset>
		    <zipfileset dir="." prefix="${basezipfile}" filemode="600" dirmode="700">
		    	<include name="conf/extendedkeyusage.properties" />		    	
		    </zipfileset>
		</zip>
        <antcall target="signjar">
            <param name="signjar.file" value="../${basezipfile}.zip"/>
        </antcall>
        <checksum file="../${basezipfile}.zip" algorithm="SHA1" forceOverwrite="yes" format="MD5SUM"/>
        <checksum file="../${basezipfile}.zip" algorithm="SHA1" property="ejbcaSHA1"/>      
        <checksum file="../${basezipfile}.zip" algorithm="SHA-256" forceOverwrite="yes" format="MD5SUM"/>
        <checksum file="../${basezipfile}.zip" algorithm="SHA-256" property="ejbcaSHA256"/>      
            <echo>
File:             ../${basezipfile}.zip
SHA1 checksum:    ${ejbcaSHA1}
SHA-256 checksum: ${ejbcaSHA256}
            </echo>
	</target>

        <!-- ======================================================================= -->
        <!-- Make a ZIP source release for CESeCore.                                 -->
        <!-- Creates a fat source zip containing all CESeCore source files and can   -->
        <!-- be included in your IDE to be able to browse the source.                -->
        <!-- ======================================================================= -->
        <target name="ziprelease-cesecore-src" description="Make a source zip for the CESeCore modules">
            <property name="cesecore.src.basezipfile" value="cesecore-${edition}-${app.version.number}-src"/>
            <delete file="../${cesecore.src.basezipfile}.zip"/>

            <property name="cesecore.src.release.dir" location="${tmp}/cesecore-release-src"/>
            <delete dir="${cesecore.src.release.dir}"/>
            <mkdir dir="${cesecore.src.release.dir}"/>
            <copy todir="${cesecore.src.release.dir}">
                <fileset dir="${basedir}/modules/">
                    <include name="cesecore-*/src/**" />
                </fileset>
                <!-- Don't include directories above src. -->
                <regexpmapper handledirsep="yes" from="^[-_a-zA-Z0-9]+/src/(.*)" to="\1" />
            </copy>

            <zip destfile="../${cesecore.src.basezipfile}.zip">
                <zipfileset dir="${cesecore.src.release.dir}" filemode="600" dirmode="700">
                    <exclude name="**/META-INF/*"/>
                    <exclude name="META-INF"/>
                </zipfileset>
            </zip>

            <antcall target="signjar">
                <param name="signjar.file" value="../${cesecore.src.basezipfile}.zip"/>
            </antcall>
            <checksum file="../${cesecore.src.basezipfile}.zip" algorithm="SHA1" forceOverwrite="yes" format="MD5SUM"/>
            <checksum file="../${cesecore.src.basezipfile}.zip" algorithm="SHA1" property="cesecoresrcSHA1"/>
            <checksum file="../${cesecore.src.basezipfile}.zip" algorithm="SHA-256" forceOverwrite="yes" format="MD5SUM"/>
            <checksum file="../${cesecore.src.basezipfile}.zip" algorithm="SHA-256" property="cesecoresrcSHA256"/>
            <echo>
File:             ../${cesecore.src.basezipfile}.zip
SHA1 checksum:    ${cesecoresrcSHA1}
SHA-256 checksum: ${cesecoresrcSHA256}
            </echo>
        </target>

    <condition property="cmpclient.exists">
    	<available file="${mod.cmpclient.path}/build.xml" />
    </condition>
	
    <!-- ======================================================================= -->
    <!-- Make a ZIP source release for Statedump, if available.                  -->
    <!-- Creates a fat source zip containing all Statedump source files and can  -->
    <!-- be included in your IDE to be able to browse the source.                -->
	<!-- 																		 -->
	<!-- Note that this zip is not standalone but needs to be unzipped inside an -->
	<!-- existing EJBCA installation and built there.							 -->
    <!-- ======================================================================= -->
    <target name="ziprelease-statedump-src" if="${mod.statedump.exists}" description="Make a source zip for the Statedump modules">
        <property name="statedump.src.basezipfile" value="statedump-${app.version.number}-src"/>
        <delete file="../${statedump.src.basezipfile}.zip"/>

        <property name="statedump.src.release.dir" location="${tmp}/statedump-release-src"/>
        <delete dir="${statedump.src.release.dir}"/>
        <mkdir dir="${statedump.src.release.dir}"/>
        <copy todir="${statedump.src.release.dir}">
            <fileset dir="${basedir}/modules/">
                <include name="statedump/src-*/**/*.java" />
                <include name="statedump/*.txt" />
                <include name="statedump/*.xml" />
                <include name="statedump/resources/**" />
            </fileset>
        </copy>

        <zip destfile="../${statedump.src.basezipfile}.zip">
            <zipfileset dir="${statedump.src.release.dir}" filemode="600" dirmode="700">
            </zipfileset>
        </zip>

        <antcall target="signjar">
            <param name="signjar.file" value="../${statedump.src.basezipfile}.zip"/>
        </antcall>
        <checksum file="../${statedump.src.basezipfile}.zip" algorithm="SHA1" forceOverwrite="yes" format="MD5SUM"/>
        <checksum file="../${statedump.src.basezipfile}.zip" algorithm="SHA1" property="statedumpsrcSHA1"/>
        <checksum file="../${statedump.src.basezipfile}.zip" algorithm="SHA-256" forceOverwrite="yes" format="MD5SUM"/>
        <checksum file="../${statedump.src.basezipfile}.zip" algorithm="SHA-256" property="statedumpsrcSHA256"/>
        <echo>
File:             ../${statedump.src.basezipfile}.zip
SHA1 checksum:    ${statedumpsrcSHA1}
SHA-256 checksum: ${statedumpsrcSHA256}
        	
Note that this zip is not standalone but needs to be unzipped inside an existing EJBCA installation and built there.
After building, you will need to re-deploy EJBCA.
        </echo>
    </target>
	
    <!-- ======================================================================= -->
    <!-- Make a ZIP source release for CmpClient, if available.                  -->
    <!-- Creates a fat source zip containing all CmpClient source files and can  -->
    <!-- be included in your IDE to be able to browse the source.                -->
	<!-- 																		 -->
	<!-- Note that this zip is not standalone but needs to be unzipped inside an -->
	<!-- existing EJBCA installation and built there.							 -->
    <!-- ======================================================================= -->
    <target name="ziprelease-cmpclient-src" if="${cmpclient.exists}">
        <property name="cmpclient.src.basezipfile" value="cmpclient-${app.version.number}-src"/>
        <delete file="../${cmpclient.src.basezipfile}.zip"/>

        <property name="cmpclient.src.release.dir" location="${tmp}/cmpclient-release-src"/>
        <delete dir="${cmpclient.src.release.dir}"/>
        <mkdir dir="${cmpclient.src.release.dir}"/>
        <copy todir="${cmpclient.src.release.dir}">
            <fileset dir="${basedir}/modules/">
                <include name="cmpclient/**" />
            </fileset>
        </copy>

        <zip destfile="../${cmpclient.src.basezipfile}.zip">
            <zipfileset dir="${cmpclient.src.release.dir}" filemode="600" dirmode="700">
            </zipfileset>
        </zip>

        <antcall target="signjar">
            <param name="signjar.file" value="../${cmpclient.src.basezipfile}.zip"/>
        </antcall>
        <checksum file="../${cmpclient.src.basezipfile}.zip" algorithm="SHA1" forceOverwrite="yes" format="MD5SUM"/>
        <checksum file="../${cmpclient.src.basezipfile}.zip" algorithm="SHA1" property="cmpclientsrcSHA1"/>
        <checksum file="../${cmpclient.src.basezipfile}.zip" algorithm="SHA-256" forceOverwrite="yes" format="MD5SUM"/>
        <checksum file="../${cmpclient.src.basezipfile}.zip" algorithm="SHA-256" property="cmpclientsrcSHA256"/>
        <echo>
File:             ../${cmpclient.src.basezipfile}.zip
SHA1 checksum:    ${cmpclientsrcSHA1}
SHA-256 checksum: ${cmpclientsrcSHA256}
        	
Note that this zip is not standalone but needs to be unzipped inside an existing EJBCA installation and built there.
        </echo>
    </target>

        <!-- ======================================================================= -->
        <!-- Make a ZIP binary release for CESeCore.                                 -->
        <!-- Includes all the CESeCore JARs.                                         -->
        <!-- ======================================================================= -->
        <target name="ziprelease-cesecore-bin" description="Make a binary zip release of the CESeCore modules">
            <echo>Clean CESeCore modules</echo>
            <subant target="clean" verbose="false" inheritall="true" inheritrefs="true">
                <fileset dir="${basedir}/modules/" includes="cesecore-*/build.xml"/>
            </subant>
            <echo>Build CESeCore modules</echo>
            <ant dir="modules" target="cesecore-ejb" />	
            <property name="cesecore.bin.basezipfile" value="cesecore-${edition}-${app.version.number}-bin"/>

            <property name="cesecore.bin.release.dir" location="${tmp}/cesecore-release-bin"/>
            <delete dir="${cesecore.bin.release.dir}"/>
            <mkdir dir="${cesecore.bin.release.dir}"/>

            <copy todir="${cesecore.bin.release.dir}" flatten="true">
                <fileset dir="${basedir}/modules/">
                    <include name="cesecore-*/**/*.jar" />
                </fileset>
                <fileset dir="${basedir}/doc/licenses/">
                    <include name="LICENSE-LGPL"/>
                </fileset>
            </copy>

            <checksum algorithm="SHA-256">
                <fileset dir="${cesecore.bin.release.dir}">
                  <include name="*.jar"/>
                </fileset>
            </checksum>

            <zip destfile="../${cesecore.bin.basezipfile}.zip">
                <zipfileset dir="${cesecore.bin.release.dir}" prefix="${cesecore.bin.basezipfile}" filemode="600" dirmode="700"/>
            </zip>

            <antcall target="signjar">
                <param name="signjar.file" value="../${cesecore.bin.basezipfile}.zip"/>
            </antcall>
            <checksum file="../${cesecore.bin.basezipfile}.zip" algorithm="SHA1" forceOverwrite="yes" format="MD5SUM"/>
            <checksum file="../${cesecore.bin.basezipfile}.zip" algorithm="SHA1" property="cesecorebinSHA1"/>
            <checksum file="../${cesecore.bin.basezipfile}.zip" algorithm="SHA-256" forceOverwrite="yes" format="MD5SUM"/>
            <checksum file="../${cesecore.bin.basezipfile}.zip" algorithm="SHA-256" property="cesecorebinSHA256"/>
            <echo>
File:             ../${cesecore.bin.basezipfile}.zip
SHA1 checksum:    ${cesecorebinSHA1}
SHA-256 checksum: ${cesecorebinSHA256}
            </echo>
        </target>

    <!-- ======================================================================= -->
    <!-- Display application version string                                      -->
    <!-- ======================================================================= -->
	<target name="ejbcaversion" depends="deprecated:check" description="Output application version string.">
		<echo>${app.version}</echo>
	</target>

    <!-- ======================================================================= -->
    <!-- Target updating git revision string in propertiesAndPaths.xml           -->
    <!-- ======================================================================= -->
	<target name="update-gitrev" depends="deprecated:check">
		<echo>Trying to update src/internal.properties with Git revision of 'rev-parse HEAD'.</echo>
        <!-- find out git hash of HEAD, need git.exe installed on local machine will end up in property ${Revision} -->
        <exec executable="git" output="gitlog.out" failonerror="false" failifexecutionfails="false" resultproperty="exec.git.errorcode">
            <arg line="rev-parse HEAD"/>
        </exec>
        <!-- Allow the revision to be specified using -Drelease.revision=12345 on systems where the "git" CLI is not avilable. -->
        <condition property="failifgitfails" value="true">
        	<and>
            	<not><isset property="release.revision"/></not>
                <!-- Either the executable did not start (and hence this is unset) or the command failed with an error code. -->
                <not><equals arg1="${exec.git.errorcode}" arg2="0"/></not>
            </and>
        </condition>
		<fail if="failifgitfails" message="Failed to get current version using 'git' CLI. Consider installing git or use -Drelease.revision=&lt;number&gt;."/>
		<echo message="" append="true" file="gitlog.out"/>
		<loadfile property="Revision" srcfile="gitlog.out">
			<filterchain>
				<linecontainsregexp>
					<!-- Match SHA1 only. File main contain error message if Git command above failed -->
					<regexp pattern="\b([a-f0-9]{40})\b"/>
				</linecontainsregexp>
				<striplinebreaks/>
			</filterchain>
		</loadfile>
        <!-- If we failed to get the Git revision from the CLI command, use the specified one -->
        <property name="Revision" value="${release.revision}"/>
		<condition property="invalid-revision">
		    <matches pattern="\b([a-f0-9]{40})\b" string="${Revision}"/>
		</condition>
		<fail message="git.revision (SHA1) was not set" unless="invalid-revision"/>
		<delete file="gitlog.out"/>
		<antcall target="update-gitrev-updatefile" /> <!-- do update of file only if property is set -->
    </target>
	
	
	<target name="update-gitrev-updatefile" if="Revision">
		<replaceregexp file="src/internal.properties" encoding="UTF-8" match='(git.revision=).*'
			replace='\1${Revision}' />
		<echo>Updated "git.revision" to: ${Revision}</echo>
    </target>

	<target name="update-edition" depends="deprecated:check">
		<condition property="app.edition" value="Enterprise" >
			<matches string="${edition}" pattern="^ee$"/>
		</condition>
		<condition property="app.edition" value="Community" >
			<matches string="${edition}" pattern="^ce$"/>
		</condition>
		<replaceregexp file="src/internal.properties" encoding="UTF-8" match='(app.edition.verbose=).*'
					replace='\1${app.edition}' />
				<echo>Updated "app.edition.verbose" to: ${app.edition}</echo>
	</target>

	<!--
        Target for signing a JAR (JAR, EAR, WAR or ZIP)
        parameter: signjar.file=file to sign 
	-->
    <target name="signjar">
        <available file="${signjar.keystore}" property="signjar.keystorepresent" value="true"/>	
    	<condition property="signjar.message" value="Using keystore ${signjar.keystore}."
    		else="Specify -Dsignjar.keystore=/path/keystore.jks if you want to sign the release." >
            <isset property="signjar.keystorepresent" />
    	</condition>
    	<echo message="${signjar.message}" />
        <antcall target="signjar.internal" />
    </target>

    <target name="signjar.internal" if="signjar.keystorepresent">
        <echo message="Signing ${signjar.file}" />
        <input message="Enter alias for keystore ${signjar.keystore}:"
        	addproperty="signjar.keystorealias" defaultvalue="releasesigner" /> 
        <input message="Enter password for keystore ${signjar.keystore}:"
        	addproperty="signjar.keystorepass" defaultvalue="foo123" /> 
        <signjar keystore="${signjar.keystore}" jar="${signjar.file}"
        	alias="${signjar.keystorealias}" storepass="${signjar.keystorepass}" />
    </target>

	<!-- ("preprocess" is not run from anywhere right now..) -->
	<target name="preprocess">
        <!-- 
          Fix encoding of files for internal (log) internationalization) 
		  TODO: This looks more like this is something the French language contributor should run before a commit. Should be combined with the diff-script to show missing and redundant translations. 
        --> 		
		<delete file="${tmp}/intresources/ejbcaresources.fr.properties"/>
		<delete file="${tmp}/intresources/intresources.fr.properties"/>
    	<native2ascii encoding="ISO8859-1" 
    		src="${tmp}/intresources" 
    		dest="${tmp}/intresources"
    		includes="*resources.fr.properties" 
    	/>
	</target>
	
	
	<target name="ejbca.ear.module-dependencies">
        <ant dir="modules" target="ejbca.ear.module-dependencies" inheritall="true" inheritrefs="true"/>
	</target>

    <target name="ejbca-entity">
    	<ant dir="modules" target="ejbca-entity" />
    </target>
	
	<target name="ejbca-db-cli:fail" unless="ejbca-db-cli.available">
		<fail>EJBCA DB CLI does not exist in EJBCA Community. Please contact a sales representative at Keyfactor for information about how to get an Enterprise License.</fail>
	</target>

    <target name="ejbca-db-cli" depends="deprecated:check, ejbca-db-cli:fail" description="Build EJBCA JPA database CLI">
    	<ant dir="modules" target="ejbca-db-cli" />
    </target>
	
    <target name="ejbca-caa-cli" depends="deprecated:check" if="caa.exists" description="Creates a CLI jar for CAA lookups">
    	<ant dir="modules" target="ejbca-caa-cli" />
    </target>
	
	<target name="ejbca-ejb-interface">
       	<ant dir="modules" target="ejbca-ejb-interface" />
    </target>

    <target name="ejbca-ejb-cli" depends="deprecated:check" description="Builds EJBCA command line interface">
    	<ant dir="modules" target="ejbca-ejb-cli" />
    </target>
	
    <target name="peerconnector-cli:fail" unless="mod.peerconnector.exists">
        <fail>EJBCA DB CLI does not exist in EJBCA Community. Please contact a sales representative at PrimeKey Solutions for information about how to get an Enterprise License.</fail>
    </target>

	<target name="peerconnector-cli" depends="peerconnector-cli:fail" >
        <ant dir="modules" target="peerconnector-cli" />
	</target>
	
    <target name="adminweb.war">
    	<ant dir="modules" target="admin-gui" />
    </target>
	
    <target name="raweb.war" if="${variant.ra.enabled}">
    	<ant dir="modules" target="ra-gui" />
    </target>

    <target name="cmp.war">
    	<ant dir="modules" target="cmp-war" />
    </target>

    <target name="msae.war">
        <ant dir="modules" target="msae" />
    </target>
	
    <target name="cits.war">
        <ant dir="modules" target="cits" />
    </target>

    <target name="healthcheck.war">
    	<ant dir="modules" target="healthcheck-ejbca-war" />
    </target>
		
    <target name="clearcache.war">
    	<ant dir="modules" target="clearcache-ejbca-war" />
    </target>  

    <target name="scep.war">
    	<ant dir="modules" target="scep-war" />
    </target>

    <target name="est.war">
    	<ant dir="modules" target="est-war" />
    </target>

    <target name="ejbca-rest-api.war">
    	<ant dir="modules" target="ejbca-rest-api-war" />
    </target>
    	
    <target name="status.war">
    	<ant dir="modules" target="va-ejbca-war" />
    </target>
	
    <target name="webdist.war">
    	<ant dir="modules" target="webdist-war" />
    </target>

	<target name="clientToolBox" depends="deprecated:check" description="Builds command line clients as separate toolbox that can be deployed separately">
    	<ant dir="modules" target="clientToolBox" />
    </target>
    
	<target name="statedump" depends="deprecated:check" description="Build EJBCA StateDump tool">
		<ant dir="modules" target="statedump" />
    </target>
	
	<target name="configdump" depends="deprecated:check" description="Build EJBCA Configdump tool">
		<ant dir="modules" target="configdump" />
    </target>
	
	<target name="cmpclient" depends="deprecated:check" description="Build EJBCA CMP Client">
		<ant dir="modules" target="cmpclient" />
    </target>

	<target name="p11ng-cli" depends="deprecated:check" description="Build EJBCA P11NgCli">
		<ant dir="modules" target="p11ng-cli" />
    </target>	
	
	<target name="showtime" >
		<tstamp>
			<format property="completiontime" pattern="yyyy-MM-dd HH:mm:ss Z"/>
		</tstamp>
		<echo message="Task completed ${completiontime}."/>
	</target>
	
    <target name="ejbcaws.client" depends="deprecated:check" description="Build the EJBCA WS-API client">
    	<ant dir="modules" target="ejbca-ws-cli" />
    </target>

    <target name="ejbcaws.war" depends="deprecated:check" description="Build the EJBCA WS WAR">
    	<ant dir="modules" target="ejbca-ws"/>
    </target>

    <target name="ejbca-ws-wsdl" depends="deprecated:check" description="Generate the EJBCA Web Services WSDL">
    	<ant dir="modules" target="ejbca-ws-wsdl"/>
    </target>
	
    <target name="ejbca-ws-generate-client" depends="deprecated:check" description="Generate the EJBCA Web Services client source code files (used by developers of new WS API calls)">
    	<ant dir="modules" target="ejbca-ws-generate"/>
    </target>

	<!-- Target that copies all org.cesecore java files from EJBCA to cesecore (if it is in a subdirectory cesecore above ejbca dir).
	     Since EJBCA usually is the master for cesecore fies, this eases code merge very much.
	-->
    <target name="cesecorecodedrop">
        <copy todir="../cesecore/modules" overwrite="true">
            <fileset dir="modules">
                <!-- Include source files from all CESeCore modules -->
                <include name="cesecore-*/**/*.java"/>
                <include name="cesecore-*/**/*.properties"/>
                <include name="cesecore-*/**/*.xml"/>
                
                <!-- Exclude temporary files -->
                <exclude name="cesecore-*/dist/*"/>
                <exclude name="cesecore-*/build/*"/>
                
                <!-- Exclude build system for now. When possible in the future, also include this. -->
                <exclude name="cesecore-*/nbproject/**/*"/>
                <exclude name="cesecore-*/build.xml"/>
            </fileset>
        </copy>
        
        <copy file="conf/cesecore.properties.sample" tofile="../cesecore/src/main/resources/conf/cesecore.properties" overwrite="true"/>
        
        <!-- 
            TODO: Would be better if these where already placed in 
            cesecore-common/src/ so no special handling would be needed but 
            then EJBCA should also use the same place. 
        -->
        <copy todir="../cesecore/src/main/java" overwrite="true">
            <fileset dir="src/java">
                <include name="certextensions.properties"/>
                <include name="profilemappings.properties"/>
                <include name="profilemappings_enterprise.properties"/>
            </fileset>
        </copy>
        <copy todir="../cesecore/src/main/resources/intresources" overwrite="true">
            <fileset dir="src/intresources">
                <include name="intresources*.properties"/>
            </fileset>
        </copy>
        
        <!-- Test classes has not been modularized yet so filter out from the EJBCA modules for now -->
        <copy todir="../cesecore/src/test/java" overwrite="true">
            <fileset dir="modules/ejbca-ejb/src-test">
                <include name="org/cesecore/**/*java"/>
            </fileset>
        </copy>
        <copy todir="../cesecore/src/functionaltests/java" overwrite="true">
            <fileset dir="modules/systemtests/src-interface">
                <include name="org/cesecore/**/*java"/>
            </fileset>
            <fileset dir="modules/systemtests/src">
                <include name="org/cesecore/**/*java"/>
            </fileset>
        </copy>
        <copy todir="../cesecore/src/functionaltests/test" overwrite="true">
            <fileset dir="modules/systemtests/src-test">
                <include name="org/cesecore/**/*java"/>
            </fileset>
        </copy>
    </target>

</project>