ViewVC Help
View File | Revision Log | Show Annotations | View Changeset | Root Listing
root/svn/ircd-hybrid/trunk/src/server.c
Revision: 3136
Committed: Tue Mar 11 18:24:03 2014 UTC (11 years, 5 months ago) by michael
Content type: text/x-csrc
Original Path: ircd-hybrid/trunk/src/s_serv.c
File size: 42848 byte(s)
Log Message:
- Various fixes to previous ts5 removal changes

File Contents

# User Rev Content
1 adx 30 /*
2 michael 2916 * ircd-hybrid: an advanced, lightweight Internet Relay Chat Daemon (ircd)
3 adx 30 *
4 michael 2916 * Copyright (c) 1997-2014 ircd-hybrid development team
5 adx 30 *
6     * This program is free software; you can redistribute it and/or modify
7     * it under the terms of the GNU General Public License as published by
8     * the Free Software Foundation; either version 2 of the License, or
9     * (at your option) any later version.
10     *
11     * This program is distributed in the hope that it will be useful,
12     * but WITHOUT ANY WARRANTY; without even the implied warranty of
13     * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
14     * GNU General Public License for more details.
15     *
16     * You should have received a copy of the GNU General Public License
17     * along with this program; if not, write to the Free Software
18     * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307
19     * USA
20     */
21    
22 michael 2916 /*! \file s_serv.c
23     * \brief Server related functions.
24     * \version $Id$
25     */
26    
27 adx 30 #include "stdinc.h"
28     #ifdef HAVE_LIBCRYPTO
29     #include <openssl/rsa.h>
30     #include "rsa.h"
31     #endif
32 michael 1011 #include "list.h"
33 adx 30 #include "channel.h"
34     #include "channel_mode.h"
35     #include "client.h"
36     #include "event.h"
37     #include "fdlist.h"
38     #include "hash.h"
39     #include "irc_string.h"
40     #include "ircd.h"
41     #include "ircd_defs.h"
42     #include "s_bsd.h"
43     #include "numeric.h"
44     #include "packet.h"
45     #include "irc_res.h"
46 michael 1309 #include "conf.h"
47 adx 30 #include "s_serv.h"
48 michael 1309 #include "log.h"
49 michael 1303 #include "s_misc.h"
50 adx 30 #include "s_user.h"
51     #include "send.h"
52     #include "memory.h"
53 michael 2916 #include "channel.h"
54 michael 1243 #include "parse.h"
55 adx 30
56     #define MIN_CONN_FREQ 300
57    
58 michael 2156 dlink_list flatten_links;
59 adx 30 static dlink_list cap_list = { NULL, NULL, 0 };
60     static void server_burst(struct Client *);
61     static void burst_all(struct Client *);
62     static void send_tb(struct Client *client_p, struct Channel *chptr);
63    
64     static CNCB serv_connect_callback;
65    
66     static void burst_members(struct Client *, struct Channel *);
67    
68     /*
69     * write_links_file
70     *
71     * inputs - void pointer which is not used
72     * output - NONE
73     * side effects - called from an event, write out list of linked servers
74     * but in no particular order.
75     */
76     void
77 michael 2156 write_links_file(void *notused)
78 adx 30 {
79 michael 2156 FILE *file = NULL;
80 michael 2216 dlink_node *ptr = NULL, *ptr_next = NULL;
81 michael 2156 char buff[IRCD_BUFSIZE] = { '\0' };
82 adx 30
83 michael 2156 if ((file = fopen(LIPATH, "w")) == NULL)
84 adx 30 return;
85    
86 michael 2156 DLINK_FOREACH_SAFE(ptr, ptr_next, flatten_links.head)
87 adx 30 {
88 michael 2156 dlinkDelete(ptr, &flatten_links);
89     MyFree(ptr->data);
90     free_dlink_node(ptr);
91 adx 30 }
92    
93     DLINK_FOREACH(ptr, global_serv_list.head)
94     {
95 michael 1325 const struct Client *target_p = ptr->data;
96 adx 30
97 michael 2156 /*
98     * Skip hidden servers, aswell as ourselves, since we already send
99     * ourselves in /links
100     */
101     if (IsHidden(target_p) || IsMe(target_p))
102 adx 30 continue;
103    
104 michael 1851 if (HasFlag(target_p, FLAGS_SERVICE) && ConfigServerHide.hide_services)
105     continue;
106    
107 michael 1545 /*
108     * Attempt to format the file in such a way it follows the usual links output
109 adx 30 * ie "servername uplink :hops info"
110     * Mostly for aesthetic reasons - makes it look pretty in mIRC ;)
111     * - madmax
112     */
113 michael 2156 snprintf(buff, sizeof(buff), "%s %s :1 %s", target_p->name,
114     me.name, target_p->info);
115 michael 2212 dlinkAddTail(xstrdup(buff), make_dlink_node(), &flatten_links);
116 michael 2156 snprintf(buff, sizeof(buff), "%s %s :1 %s\n", target_p->name,
117     me.name, target_p->info);
118 adx 30
119 michael 1325 fputs(buff, file);
120 adx 30 }
121    
122 michael 1325 fclose(file);
123 adx 30 }
124    
125 michael 2216 void
126     read_links_file(void)
127     {
128     FILE *file = NULL;
129     char *p = NULL;
130     char buff[IRCD_BUFSIZE] = { '\0' };
131    
132     if ((file = fopen(LIPATH, "r")) == NULL)
133     return;
134    
135     while (fgets(buff, sizeof(buff), file))
136     {
137     if ((p = strchr(buff, '\n')) != NULL)
138     *p = '\0';
139    
140     dlinkAddTail(xstrdup(buff), make_dlink_node(), &flatten_links);
141     }
142    
143     fclose(file);
144     }
145    
146 adx 30 /* hunt_server()
147     * Do the basic thing in delivering the message (command)
148     * across the relays to the specific server (server) for
149     * actions.
150     *
151     * Note: The command is a format string and *MUST* be
152     * of prefixed style (e.g. ":%s COMMAND %s ...").
153     * Command can have only max 8 parameters.
154     *
155     * server parv[server] is the parameter identifying the
156     * target server.
157     *
158     * *WARNING*
159     * parv[server] is replaced with the pointer to the
160     * real servername from the matched client (I'm lazy
161     * now --msa).
162     *
163     * returns: (see #defines)
164     */
165     int
166     hunt_server(struct Client *client_p, struct Client *source_p, const char *command,
167 michael 1857 const int server, const int parc, char *parv[])
168 adx 30 {
169     struct Client *target_p = NULL;
170     struct Client *target_tmp = NULL;
171     dlink_node *ptr;
172     int wilds;
173    
174 michael 1344 /* Assume it's me, if no server */
175     if (parc <= server || EmptyString(parv[server]))
176     return HUNTED_ISME;
177 adx 30
178 michael 1652 if (!strcmp(parv[server], me.id) || !match(parv[server], me.name))
179 michael 1344 return HUNTED_ISME;
180    
181 adx 30 /* These are to pickup matches that would cause the following
182     * message to go in the wrong direction while doing quick fast
183     * non-matching lookups.
184     */
185     if (MyClient(source_p))
186 michael 1169 target_p = hash_find_client(parv[server]);
187 adx 30 else
188     target_p = find_person(client_p, parv[server]);
189    
190     if (target_p)
191     if (target_p->from == source_p->from && !MyConnect(target_p))
192     target_p = NULL;
193    
194 michael 1169 if (target_p == NULL && (target_p = hash_find_server(parv[server])))
195 adx 30 if (target_p->from == source_p->from && !MyConnect(target_p))
196     target_p = NULL;
197    
198 michael 1400 wilds = has_wildcards(parv[server]);
199 adx 30
200     /* Again, if there are no wild cards involved in the server
201     * name, use the hash lookup
202     */
203     if (target_p == NULL)
204     {
205     if (!wilds)
206     {
207 michael 1169 if (!(target_p = hash_find_server(parv[server])))
208 adx 30 {
209 michael 3109 sendto_one_numeric(source_p, &me, ERR_NOSUCHSERVER, parv[server]);
210 michael 2182 return HUNTED_NOSUCH;
211 adx 30 }
212     }
213     else
214     {
215     DLINK_FOREACH(ptr, global_client_list.head)
216     {
217     target_tmp = ptr->data;
218    
219 michael 1652 if (!match(parv[server], target_tmp->name))
220 adx 30 {
221     if (target_tmp->from == source_p->from && !MyConnect(target_tmp))
222     continue;
223     target_p = ptr->data;
224    
225     if (IsRegistered(target_p) && (target_p != client_p))
226     break;
227     }
228     }
229     }
230     }
231    
232     if (target_p != NULL)
233     {
234     if(!IsRegistered(target_p))
235     {
236 michael 3109 sendto_one_numeric(source_p, &me, ERR_NOSUCHSERVER, parv[server]);
237 adx 30 return HUNTED_NOSUCH;
238     }
239    
240     if (IsMe(target_p) || MyClient(target_p))
241     return HUNTED_ISME;
242    
243 michael 1652 if (match(target_p->name, parv[server]))
244 adx 30 parv[server] = target_p->name;
245    
246 michael 3136 /* This is a little kludgy but should work... */
247 michael 3096 sendto_one(target_p, command, ID_or_name(source_p, target_p),
248 adx 30 parv[1], parv[2], parv[3], parv[4],
249     parv[5], parv[6], parv[7], parv[8]);
250 michael 2134 return HUNTED_PASS;
251 michael 2345 }
252 adx 30
253 michael 3109 sendto_one_numeric(source_p, &me, ERR_NOSUCHSERVER, parv[server]);
254 michael 2134 return HUNTED_NOSUCH;
255 adx 30 }
256    
257     /* try_connections()
258     *
259     * inputs - void pointer which is not used
260     * output - NONE
261     * side effects -
262     * scan through configuration and try new connections.
263     * Returns the calendar time when the next call to this
264     * function should be made latest. (No harm done if this
265     * is called earlier or later...)
266     */
267     void
268     try_connections(void *unused)
269     {
270 michael 1632 dlink_node *ptr = NULL;
271     struct MaskItem *conf;
272 adx 30 int confrq;
273    
274     /* TODO: change this to set active flag to 0 when added to event! --Habeeb */
275     if (GlobalSetOptions.autoconn == 0)
276     return;
277    
278     DLINK_FOREACH(ptr, server_items.head)
279     {
280     conf = ptr->data;
281    
282 michael 1636 assert(conf->type == CONF_SERVER);
283 michael 1632
284 michael 2345 /* Also when already connecting! (update holdtimes) --SRB
285 adx 30 */
286 michael 1632 if (!conf->port ||!IsConfAllowAutoConn(conf))
287 adx 30 continue;
288    
289    
290     /* Skip this entry if the use of it is still on hold until
291     * future. Otherwise handle this entry (and set it on hold
292     * until next time). Will reset only hold times, if already
293     * made one successfull connection... [this algorithm is
294     * a bit fuzzy... -- msa >;) ]
295     */
296 michael 1649 if (conf->until > CurrentTime)
297 adx 30 continue;
298    
299 michael 1632 if (conf->class == NULL)
300 adx 30 confrq = DEFAULT_CONNECTFREQUENCY;
301     else
302     {
303 michael 1632 confrq = conf->class->con_freq;
304 michael 1377 if (confrq < MIN_CONN_FREQ)
305 michael 2134 confrq = MIN_CONN_FREQ;
306 adx 30 }
307    
308 michael 1649 conf->until = CurrentTime + confrq;
309 adx 30
310     /* Found a CONNECT config with port specified, scan clients
311     * and see if this server is already connected?
312     */
313 michael 1169 if (hash_find_server(conf->name) != NULL)
314 adx 30 continue;
315    
316 michael 1632 if (conf->class->ref_count < conf->class->max_total)
317 adx 30 {
318     /* Go to the end of the list, if not already last */
319     if (ptr->next != NULL)
320     {
321     dlinkDelete(ptr, &server_items);
322     dlinkAddTail(conf, &conf->node, &server_items);
323     }
324    
325     if (find_servconn_in_progress(conf->name))
326     return;
327    
328     /* We used to only print this if serv_connect() actually
329     * succeeded, but since comm_tcp_connect() can call the callback
330     * immediately if there is an error, we were getting error messages
331     * in the wrong order. SO, we just print out the activated line,
332     * and let serv_connect() / serv_connect_callback() print an
333     * error afterwards if it fails.
334     * -- adrian
335     */
336     if (ConfigServerHide.hide_server_ips)
337 michael 1618 sendto_realops_flags(UMODE_ALL, L_ALL, SEND_NOTICE,
338     "Connection to %s activated.",
339 adx 30 conf->name);
340     else
341 michael 1618 sendto_realops_flags(UMODE_ALL, L_ALL, SEND_NOTICE,
342     "Connection to %s[%s] activated.",
343 michael 1632 conf->name, conf->host);
344 adx 30
345 michael 1632 serv_connect(conf, NULL);
346 adx 30 /* We connect only one at time... */
347     return;
348     }
349     }
350     }
351    
352     int
353 michael 1115 valid_servname(const char *name)
354     {
355     unsigned int length = 0;
356     unsigned int dots = 0;
357     const char *p = name;
358    
359     for (; *p; ++p)
360     {
361     if (!IsServChar(*p))
362 michael 1118 return 0;
363 michael 1115
364     ++length;
365    
366     if (*p == '.')
367     ++dots;
368     }
369    
370 michael 1118 return dots != 0 && length <= HOSTLEN;
371 michael 1115 }
372    
373     int
374 michael 1302 check_server(const char *name, struct Client *client_p)
375 adx 30 {
376     dlink_node *ptr;
377 michael 1632 struct MaskItem *conf = NULL;
378     struct MaskItem *server_conf = NULL;
379 adx 30 int error = -1;
380    
381     assert(client_p != NULL);
382    
383     /* loop through looking for all possible connect items that might work */
384     DLINK_FOREACH(ptr, server_items.head)
385     {
386     conf = ptr->data;
387    
388 michael 1652 if (match(name, conf->name))
389 adx 30 continue;
390    
391     error = -3;
392    
393     /* XXX: Fix me for IPv6 */
394     /* XXX sockhost is the IPv4 ip as a string */
395 michael 2345 if (!match(conf->host, client_p->host) ||
396 michael 1652 !match(conf->host, client_p->sockhost))
397 adx 30 {
398     error = -2;
399    
400 michael 1632 if (!match_conf_password(client_p->localClient->passwd, conf))
401 michael 1414 return -2;
402 adx 30
403 michael 2228 if (!EmptyString(conf->certfp))
404 michael 2229 if (EmptyString(client_p->certfp) || strcasecmp(client_p->certfp, conf->certfp))
405 michael 2228 return -4;
406    
407 michael 1414 server_conf = conf;
408 adx 30 }
409     }
410    
411     if (server_conf == NULL)
412 michael 2182 return error;
413 adx 30
414     attach_conf(client_p, server_conf);
415    
416    
417 michael 1632 if (server_conf != NULL)
418 adx 30 {
419     struct sockaddr_in *v4;
420     #ifdef IPV6
421     struct sockaddr_in6 *v6;
422     #endif
423 michael 1632 switch (server_conf->aftype)
424 adx 30 {
425     #ifdef IPV6
426 michael 2345 case AF_INET6:
427 michael 1632 v6 = (struct sockaddr_in6 *)&server_conf->addr;
428 adx 30
429     if (IN6_IS_ADDR_UNSPECIFIED(&v6->sin6_addr))
430 michael 1632 memcpy(&server_conf->addr, &client_p->localClient->ip, sizeof(struct irc_ssaddr));
431 adx 30 break;
432     #endif
433     case AF_INET:
434 michael 1632 v4 = (struct sockaddr_in *)&server_conf->addr;
435 adx 30
436     if (v4->sin_addr.s_addr == INADDR_NONE)
437 michael 2345 memcpy(&server_conf->addr, &client_p->localClient->ip, sizeof(struct irc_ssaddr));
438 adx 30 break;
439     }
440     }
441    
442 michael 2182 return 0;
443 adx 30 }
444    
445     /* add_capability()
446     *
447     * inputs - string name of CAPAB
448     * - int flag of capability
449     * output - NONE
450     * side effects - Adds given capability name and bit mask to
451     * current supported capabilities. This allows
452     * modules to dynamically add or subtract their capability.
453     */
454     void
455     add_capability(const char *capab_name, int cap_flag, int add_to_default)
456     {
457 michael 885 struct Capability *cap = MyMalloc(sizeof(*cap));
458 adx 30
459 michael 1646 cap->name = xstrdup(capab_name);
460 adx 30 cap->cap = cap_flag;
461     dlinkAdd(cap, &cap->node, &cap_list);
462 michael 885
463 adx 30 if (add_to_default)
464     default_server_capabs |= cap_flag;
465     }
466    
467     /* delete_capability()
468     *
469     * inputs - string name of CAPAB
470     * output - NONE
471     * side effects - delete given capability from ones known.
472     */
473     int
474     delete_capability(const char *capab_name)
475     {
476     dlink_node *ptr;
477     dlink_node *next_ptr;
478     struct Capability *cap;
479    
480     DLINK_FOREACH_SAFE(ptr, next_ptr, cap_list.head)
481     {
482     cap = ptr->data;
483    
484     if (cap->cap != 0)
485     {
486     if (irccmp(cap->name, capab_name) == 0)
487     {
488 michael 2134 default_server_capabs &= ~(cap->cap);
489     dlinkDelete(ptr, &cap_list);
490     MyFree(cap->name);
491     MyFree(cap);
492 adx 30 }
493     }
494     }
495    
496 michael 896 return 0;
497 adx 30 }
498    
499     /*
500     * find_capability()
501     *
502     * inputs - string name of capab to find
503     * output - 0 if not found CAPAB otherwise
504     * side effects - none
505     */
506 michael 1877 unsigned int
507 adx 30 find_capability(const char *capab)
508     {
509 michael 896 const dlink_node *ptr = NULL;
510 adx 30
511     DLINK_FOREACH(ptr, cap_list.head)
512     {
513 michael 896 const struct Capability *cap = ptr->data;
514 adx 30
515 michael 896 if (cap->cap && !irccmp(cap->name, capab))
516     return cap->cap;
517 adx 30 }
518 michael 896
519     return 0;
520 adx 30 }
521    
522     /* send_capabilities()
523     *
524     * inputs - Client pointer to send to
525     * - int flag of capabilities that this server can send
526     * output - NONE
527     * side effects - send the CAPAB line to a server -orabidoo
528     *
529     */
530     void
531 michael 1632 send_capabilities(struct Client *client_p, int cap_can_send)
532 adx 30 {
533     struct Capability *cap=NULL;
534     char msgbuf[IRCD_BUFSIZE];
535     char *t;
536     int tl;
537     dlink_node *ptr;
538    
539     t = msgbuf;
540    
541     DLINK_FOREACH(ptr, cap_list.head)
542     {
543     cap = ptr->data;
544    
545     if (cap->cap & (cap_can_send|default_server_capabs))
546     {
547 michael 1793 tl = sprintf(t, "%s ", cap->name);
548 adx 30 t += tl;
549     }
550     }
551    
552 michael 319 *(t - 1) = '\0';
553 adx 30 sendto_one(client_p, "CAPAB :%s", msgbuf);
554     }
555    
556     /* sendnick_TS()
557 michael 2345 *
558 adx 30 * inputs - client (server) to send nick towards
559 adx 386 * - client to send nick for
560 adx 30 * output - NONE
561     * side effects - NICK message is sent towards given client_p
562     */
563     void
564     sendnick_TS(struct Client *client_p, struct Client *target_p)
565     {
566 michael 2691 char ubuf[IRCD_BUFSIZE];
567 adx 30
568     if (!IsClient(target_p))
569     return;
570    
571 michael 1294 send_umode(NULL, target_p, 0, SEND_UMODES, ubuf);
572 adx 30
573     if (ubuf[0] == '\0')
574     {
575     ubuf[0] = '+';
576     ubuf[1] = '\0';
577     }
578    
579 michael 1196 if (IsCapable(client_p, CAP_SVS))
580 michael 3135 sendto_one(client_p, ":%s UID %s %d %lu %s %s %s %s %s %s :%s",
581     target_p->servptr->id,
582     target_p->name, target_p->hopcount + 1,
583     (unsigned long) target_p->tsinfo,
584     ubuf, target_p->username, target_p->host,
585     (MyClient(target_p) && IsIPSpoof(target_p)) ?
586     "0" : target_p->sockhost, target_p->id,
587     target_p->svid, target_p->info);
588 adx 30 else
589 michael 3135 sendto_one(client_p, ":%s UID %s %d %lu %s %s %s %s %s :%s",
590     target_p->servptr->id,
591     target_p->name, target_p->hopcount + 1,
592     (unsigned long) target_p->tsinfo,
593     ubuf, target_p->username, target_p->host,
594     (MyClient(target_p) && IsIPSpoof(target_p)) ?
595     "0" : target_p->sockhost, target_p->id, target_p->info);
596 adx 386
597 michael 2229 if (!EmptyString(target_p->certfp))
598 michael 2228 sendto_one(client_p, ":%s CERTFP %s",
599     ID_or_name(target_p, client_p), target_p->certfp);
600    
601 michael 1519 if (target_p->away[0])
602     sendto_one(client_p, ":%s AWAY :%s", ID_or_name(target_p, client_p),
603     target_p->away);
604 adx 30
605     }
606    
607     /*
608     * show_capabilities - show current server capabilities
609     *
610     * inputs - pointer to a struct Client
611     * output - pointer to static string
612     * side effects - build up string representing capabilities of server listed
613     */
614     const char *
615 michael 2282 show_capabilities(const struct Client *target_p)
616 adx 30 {
617 michael 2309 static char msgbuf[IRCD_BUFSIZE] = "";
618 michael 2282 const dlink_node *ptr = NULL;
619 adx 30
620 michael 2309 strlcpy(msgbuf, "TS", sizeof(msgbuf));
621    
622 adx 30 DLINK_FOREACH(ptr, cap_list.head)
623     {
624     const struct Capability *cap = ptr->data;
625    
626 michael 2282 if (!IsCapable(target_p, cap->cap))
627     continue;
628    
629     strlcat(msgbuf, " ", sizeof(msgbuf));
630     strlcat(msgbuf, cap->name, sizeof(msgbuf));
631 adx 30 }
632 michael 1302
633     return msgbuf;
634 adx 30 }
635    
636     /* make_server()
637     *
638     * inputs - pointer to client struct
639     * output - pointer to struct Server
640     * side effects - add's an Server information block to a client
641     * if it was not previously allocated.
642     */
643     struct Server *
644     make_server(struct Client *client_p)
645     {
646     if (client_p->serv == NULL)
647     client_p->serv = MyMalloc(sizeof(struct Server));
648    
649     return client_p->serv;
650     }
651    
652     /* server_estab()
653     *
654     * inputs - pointer to a struct Client
655     * output -
656     * side effects -
657     */
658     void
659     server_estab(struct Client *client_p)
660     {
661     struct Client *target_p;
662 michael 1632 struct MaskItem *conf = NULL;
663 adx 30 char *host;
664     const char *inpath;
665     static char inpath_ip[HOSTLEN * 2 + USERLEN + 6];
666     dlink_node *ptr;
667 michael 1305 #ifdef HAVE_LIBCRYPTO
668     const COMP_METHOD *compression = NULL, *expansion = NULL;
669     #endif
670 adx 30
671     assert(client_p != NULL);
672    
673     strlcpy(inpath_ip, get_client_name(client_p, SHOW_IP), sizeof(inpath_ip));
674    
675     inpath = get_client_name(client_p, MASK_IP); /* "refresh" inpath with host */
676     host = client_p->name;
677    
678 michael 1632 if ((conf = find_conf_name(&client_p->localClient->confs, host, CONF_SERVER))
679 adx 30 == NULL)
680     {
681     /* This shouldn't happen, better tell the ops... -A1kmm */
682 michael 1618 sendto_realops_flags(UMODE_ALL, L_ALL, SEND_NOTICE,
683     "Warning: Lost connect{} block "
684 adx 30 "for server %s(this shouldn't happen)!", host);
685     exit_client(client_p, &me, "Lost connect{} block!");
686     return;
687     }
688    
689     MyFree(client_p->localClient->passwd);
690     client_p->localClient->passwd = NULL;
691    
692     /* Its got identd, since its a server */
693     SetGotId(client_p);
694    
695     /* If there is something in the serv_list, it might be this
696     * connecting server..
697     */
698 michael 2345 if (!ServerInfo.hub && serv_list.head)
699 adx 30 {
700     if (client_p != serv_list.head->data || serv_list.head->next)
701     {
702 michael 896 ++ServerStats.is_ref;
703 adx 30 sendto_one(client_p, "ERROR :I'm a leaf not a hub");
704     exit_client(client_p, &me, "I'm a leaf");
705     return;
706     }
707     }
708    
709 michael 1302 if (IsUnknown(client_p))
710 adx 30 {
711 michael 2134 sendto_one(client_p, "PASS %s TS %d %s", conf->spasswd, TS_CURRENT, me.id);
712 adx 30
713 michael 1632 send_capabilities(client_p, 0);
714 adx 30
715     sendto_one(client_p, "SERVER %s 1 :%s%s",
716 michael 1118 me.name, ConfigServerHide.hidden ? "(H) " : "", me.info);
717 adx 30 }
718    
719 michael 1115 sendto_one(client_p, "SVINFO %d %d 0 :%lu", TS_CURRENT, TS_MIN,
720 adx 30 (unsigned long)CurrentTime);
721    
722 michael 3135 if (HasID(client_p))
723 adx 30 hash_add_id(client_p);
724    
725     /* XXX Does this ever happen? I don't think so -db */
726 michael 1632 detach_conf(client_p, CONF_OPER);
727 adx 30
728     /* *WARNING*
729     ** In the following code in place of plain server's
730     ** name we send what is returned by get_client_name
731     ** which may add the "sockhost" after the name. It's
732     ** *very* *important* that there is a SPACE between
733     ** the name and sockhost (if present). The receiving
734     ** server will start the information field from this
735     ** first blank and thus puts the sockhost into info.
736     ** ...a bit tricky, but you have been warned, besides
737     ** code is more neat this way... --msa
738     */
739     client_p->servptr = &me;
740    
741     if (IsClosing(client_p))
742     return;
743    
744     SetServer(client_p);
745    
746     /* Update the capability combination usage counts. -A1kmm */
747     set_chcap_usage_counts(client_p);
748    
749     /* Some day, all these lists will be consolidated *sigh* */
750 michael 889 dlinkAdd(client_p, &client_p->lnode, &me.serv->server_list);
751 adx 30
752 michael 1126 assert(dlinkFind(&unknown_list, client_p));
753 adx 30
754 michael 1126 dlink_move_node(&client_p->localClient->lclient_node,
755     &unknown_list, &serv_list);
756 adx 30
757     Count.myserver++;
758    
759     dlinkAdd(client_p, make_dlink_node(), &global_serv_list);
760     hash_add_client(client_p);
761    
762     /* doesnt duplicate client_p->serv if allocated this struct already */
763     make_server(client_p);
764    
765     /* fixing eob timings.. -gnp */
766 michael 1241 client_p->localClient->firsttime = CurrentTime;
767 adx 30
768 michael 1632 if (find_matching_name_conf(CONF_SERVICE, client_p->name, NULL, NULL, 0))
769 michael 1219 AddFlag(client_p, FLAGS_SERVICE);
770 michael 1157
771 adx 30 /* Show the real host/IP to admins */
772 michael 1305 #ifdef HAVE_LIBCRYPTO
773 michael 1303 if (client_p->localClient->fd.ssl)
774     {
775 michael 1305 compression = SSL_get_current_compression(client_p->localClient->fd.ssl);
776     expansion = SSL_get_current_expansion(client_p->localClient->fd.ssl);
777    
778 michael 1618 sendto_realops_flags(UMODE_ALL, L_ADMIN, SEND_NOTICE,
779 michael 1305 "Link with %s established: [SSL: %s, Compression/Expansion method: %s/%s] (Capabilities: %s)",
780 michael 1303 inpath_ip, ssl_get_cipher(client_p->localClient->fd.ssl),
781 michael 1305 compression ? SSL_COMP_get_name(compression) : "NONE",
782     expansion ? SSL_COMP_get_name(expansion) : "NONE",
783 michael 1303 show_capabilities(client_p));
784     /* Now show the masked hostname/IP to opers */
785 michael 1618 sendto_realops_flags(UMODE_ALL, L_OPER, SEND_NOTICE,
786 michael 1305 "Link with %s established: [SSL: %s, Compression/Expansion method: %s/%s] (Capabilities: %s)",
787 michael 1303 inpath, ssl_get_cipher(client_p->localClient->fd.ssl),
788 michael 1305 compression ? SSL_COMP_get_name(compression) : "NONE",
789     expansion ? SSL_COMP_get_name(expansion) : "NONE",
790 michael 1303 show_capabilities(client_p));
791 michael 1305 ilog(LOG_TYPE_IRCD, "Link with %s established: [SSL: %s, Compression/Expansion method: %s/%s] (Capabilities: %s)",
792 michael 1303 inpath_ip, ssl_get_cipher(client_p->localClient->fd.ssl),
793 michael 1305 compression ? SSL_COMP_get_name(compression) : "NONE",
794     expansion ? SSL_COMP_get_name(expansion) : "NONE",
795 michael 1303 show_capabilities(client_p));
796     }
797     else
798 michael 1305 #endif
799 michael 1303 {
800 michael 1618 sendto_realops_flags(UMODE_ALL, L_ADMIN, SEND_NOTICE,
801 michael 1303 "Link with %s established: (Capabilities: %s)",
802 michael 1618 inpath_ip, show_capabilities(client_p));
803 michael 1303 /* Now show the masked hostname/IP to opers */
804 michael 1618 sendto_realops_flags(UMODE_ALL, L_OPER, SEND_NOTICE,
805 michael 1303 "Link with %s established: (Capabilities: %s)",
806 michael 1618 inpath, show_capabilities(client_p));
807 michael 1303 ilog(LOG_TYPE_IRCD, "Link with %s established: (Capabilities: %s)",
808     inpath_ip, show_capabilities(client_p));
809     }
810 adx 30
811 michael 1302 fd_note(&client_p->localClient->fd, "Server: %s", client_p->name);
812 adx 30
813 michael 3136 sendto_server(client_p, NOCAPS, NOCAPS, ":%s SID %s 2 %s :%s%s",
814     me.id, client_p->name, client_p->id,
815     IsHidden(client_p) ? "(H) " : "", client_p->info);
816 adx 30
817 michael 2345 /*
818     * Pass on my client information to the new server
819     *
820     * First, pass only servers (idea is that if the link gets
821     * cancelled beacause the server was already there,
822     * there are no NICK's to be cancelled...). Of course,
823     * if cancellation occurs, all this info is sent anyway,
824     * and I guess the link dies when a read is attempted...? --msa
825     *
826     * Note: Link cancellation to occur at this point means
827     * that at least two servers from my fragment are building
828     * up connection this other fragment at the same time, it's
829     * a race condition, not the normal way of operation...
830     *
831     * ALSO NOTE: using the get_client_name for server names--
832     * see previous *WARNING*!!! (Also, original inpath
833     * is destroyed...)
834     */
835 adx 30
836     DLINK_FOREACH_PREV(ptr, global_serv_list.tail)
837     {
838     target_p = ptr->data;
839    
840     /* target_p->from == target_p for target_p == client_p */
841 michael 1118 if (IsMe(target_p) || target_p->from == client_p)
842 adx 30 continue;
843    
844 michael 3135 sendto_one(client_p, ":%s SID %s %d %s :%s%s",
845     ID(target_p->servptr), target_p->name, target_p->hopcount+1,
846     target_p->id, IsHidden(target_p) ? "(H) " : "",
847     target_p->info);
848 michael 1972
849     if (HasFlag(target_p, FLAGS_EOB))
850 michael 2718 sendto_one(client_p, ":%s EOB", ID_or_name(target_p, client_p));
851 adx 30 }
852    
853     server_burst(client_p);
854     }
855    
856     /* server_burst()
857     *
858     * inputs - struct Client pointer server
859     * -
860     * output - none
861     * side effects - send a server burst
862     * bugs - still too long
863     */
864     static void
865     server_burst(struct Client *client_p)
866     {
867     /* Send it in the shortened format with the TS, if
868     ** it's a TS server; walk the list of channels, sending
869     ** all the nicks that haven't been sent yet for each
870     ** channel, then send the channel itself -- it's less
871     ** obvious than sending all nicks first, but on the
872     ** receiving side memory will be allocated more nicely
873     ** saving a few seconds in the handling of a split
874     ** -orabidoo
875     */
876    
877 michael 885 burst_all(client_p);
878 adx 30
879     /* EOB stuff is now in burst_all */
880     /* Always send a PING after connect burst is done */
881     sendto_one(client_p, "PING :%s", ID_or_name(&me, client_p));
882     }
883    
884     /* burst_all()
885     *
886 michael 2345 * inputs - pointer to server to send burst to
887 adx 30 * output - NONE
888     * side effects - complete burst of channels/nicks is sent to client_p
889     */
890     static void
891     burst_all(struct Client *client_p)
892     {
893 michael 329 dlink_node *ptr = NULL;
894 adx 30
895 michael 329 DLINK_FOREACH(ptr, global_channel_list.head)
896 adx 30 {
897 michael 329 struct Channel *chptr = ptr->data;
898 adx 30
899     if (dlink_list_length(&chptr->members) != 0)
900     {
901     burst_members(client_p, chptr);
902     send_channel_modes(client_p, chptr);
903 michael 329
904 michael 1472 if (IsCapable(client_p, CAP_TBURST))
905 michael 2134 send_tb(client_p, chptr);
906 adx 30 }
907     }
908    
909     /* also send out those that are not on any channel
910     */
911     DLINK_FOREACH(ptr, global_client_list.head)
912     {
913 michael 329 struct Client *target_p = ptr->data;
914 adx 30
915 michael 1219 if (!HasFlag(target_p, FLAGS_BURSTED) && target_p->from != client_p)
916 adx 30 sendnick_TS(client_p, target_p);
917 michael 2345
918 michael 1219 DelFlag(target_p, FLAGS_BURSTED);
919 adx 30 }
920    
921     if (IsCapable(client_p, CAP_EOB))
922     sendto_one(client_p, ":%s EOB", ID_or_name(&me, client_p));
923     }
924    
925     /*
926     * send_tb
927     *
928 michael 329 * inputs - pointer to Client
929     * - pointer to channel
930     * output - NONE
931     * side effects - Called on a server burst when
932 michael 1472 * server is CAP_TBURST capable
933 adx 30 */
934     static void
935     send_tb(struct Client *client_p, struct Channel *chptr)
936     {
937 michael 329 /*
938 michael 337 * We may also send an empty topic here, but only if topic_time isn't 0,
939     * i.e. if we had a topic that got unset. This is required for syncing
940     * topics properly.
941     *
942     * Imagine the following scenario: Our downlink introduces a channel
943     * to us with a TS that is equal to ours, but the channel topic on
944     * their side got unset while the servers were in splitmode, which means
945     * their 'topic' is newer. They simply wanted to unset it, so we have to
946     * deal with it in a more sophisticated fashion instead of just resetting
947     * it to their old topic they had before. Read m_tburst.c:ms_tburst
948     * for further information -Michael
949 michael 329 */
950 michael 337 if (chptr->topic_time != 0)
951 michael 1472 sendto_one(client_p, ":%s TBURST %lu %s %lu %s :%s",
952     ID_or_name(&me, client_p),
953     (unsigned long)chptr->channelts, chptr->chname,
954     (unsigned long)chptr->topic_time,
955     chptr->topic_info,
956     chptr->topic);
957 adx 30 }
958    
959     /* burst_members()
960     *
961     * inputs - pointer to server to send members to
962     * - dlink_list pointer to membership list to send
963     * output - NONE
964     * side effects -
965     */
966     static void
967     burst_members(struct Client *client_p, struct Channel *chptr)
968     {
969     struct Client *target_p;
970     struct Membership *ms;
971     dlink_node *ptr;
972    
973     DLINK_FOREACH(ptr, chptr->members.head)
974     {
975     ms = ptr->data;
976     target_p = ms->client_p;
977    
978 michael 1219 if (!HasFlag(target_p, FLAGS_BURSTED))
979 adx 30 {
980 michael 1219 AddFlag(target_p, FLAGS_BURSTED);
981 adx 30
982     if (target_p->from != client_p)
983     sendnick_TS(client_p, target_p);
984     }
985     }
986     }
987    
988     /* New server connection code
989     * Based upon the stuff floating about in s_bsd.c
990     * -- adrian
991     */
992    
993     /* serv_connect() - initiate a server connection
994     *
995 michael 2345 * inputs - pointer to conf
996 adx 30 * - pointer to client doing the connect
997     * output -
998     * side effects -
999     *
1000     * This code initiates a connection to a server. It first checks to make
1001     * sure the given server exists. If this is the case, it creates a socket,
1002     * creates a client, saves the socket information in the client, and
1003     * initiates a connection to the server through comm_connect_tcp(). The
1004     * completion of this goes through serv_completed_connection().
1005     *
1006     * We return 1 if the connection is attempted, since we don't know whether
1007     * it suceeded or not, and 0 if it fails in here somewhere.
1008     */
1009     int
1010 michael 1632 serv_connect(struct MaskItem *conf, struct Client *by)
1011 adx 30 {
1012     struct Client *client_p;
1013 michael 1398 char buf[HOSTIPLEN + 1];
1014 adx 30
1015     /* conversion structs */
1016     struct sockaddr_in *v4;
1017 michael 1632 /* Make sure conf is useful */
1018     assert(conf != NULL);
1019 adx 30
1020    
1021 michael 1632 getnameinfo((struct sockaddr *)&conf->addr, conf->addr.ss_len,
1022 michael 1123 buf, sizeof(buf), NULL, 0, NI_NUMERICHOST);
1023 michael 1632 ilog(LOG_TYPE_IRCD, "Connect to %s[%s] @%s", conf->name, conf->host,
1024 adx 30 buf);
1025    
1026     /* Still processing a DNS lookup? -> exit */
1027 michael 1632 if (conf->dns_pending)
1028 adx 30 {
1029 michael 1618 sendto_realops_flags(UMODE_ALL, L_ALL, SEND_NOTICE,
1030 michael 992 "Error connecting to %s: DNS lookup for connect{} in progress.",
1031     conf->name);
1032 adx 30 return (0);
1033     }
1034    
1035 michael 1632 if (conf->dns_failed)
1036 michael 992 {
1037 michael 1618 sendto_realops_flags(UMODE_ALL, L_ALL, SEND_NOTICE,
1038 michael 992 "Error connecting to %s: DNS lookup for connect{} failed.",
1039     conf->name);
1040     return (0);
1041     }
1042    
1043 adx 30 /* Make sure this server isn't already connected
1044 michael 1632 * Note: conf should ALWAYS be a valid C: line
1045 adx 30 */
1046 michael 1169 if ((client_p = hash_find_server(conf->name)) != NULL)
1047 michael 2345 {
1048 michael 1618 sendto_realops_flags(UMODE_ALL, L_ADMIN, SEND_NOTICE,
1049 michael 2134 "Server %s already present from %s",
1050     conf->name, get_client_name(client_p, SHOW_IP));
1051 michael 1618 sendto_realops_flags(UMODE_ALL, L_OPER, SEND_NOTICE,
1052 michael 2134 "Server %s already present from %s",
1053     conf->name, get_client_name(client_p, MASK_IP));
1054 adx 30 if (by && IsClient(by) && !MyClient(by))
1055 michael 3110 sendto_one_notice(by, &me, ":Server %s already present from %s",
1056     conf->name, get_client_name(client_p, MASK_IP));
1057 michael 2134 return 0;
1058 adx 30 }
1059 michael 2345
1060 adx 30 /* Create a local client */
1061     client_p = make_client(NULL);
1062    
1063     /* Copy in the server, hostname, fd */
1064     strlcpy(client_p->name, conf->name, sizeof(client_p->name));
1065 michael 1632 strlcpy(client_p->host, conf->host, sizeof(client_p->host));
1066 adx 30
1067     /* We already converted the ip once, so lets use it - stu */
1068 michael 1115 strlcpy(client_p->sockhost, buf, sizeof(client_p->sockhost));
1069 adx 30
1070 michael 2345 /* create a socket for the server connection */
1071 michael 1632 if (comm_open(&client_p->localClient->fd, conf->addr.ss.ss_family,
1072 adx 30 SOCK_STREAM, 0, NULL) < 0)
1073     {
1074     /* Eek, failure to create the socket */
1075 michael 2134 report_error(L_ALL, "opening stream socket to %s: %s",
1076     conf->name, errno);
1077 adx 30 SetDead(client_p);
1078     exit_client(client_p, &me, "Connection failed");
1079 michael 2134 return 0;
1080 adx 30 }
1081    
1082     /* servernames are always guaranteed under HOSTLEN chars */
1083     fd_note(&client_p->localClient->fd, "Server: %s", conf->name);
1084    
1085     /* Attach config entries to client here rather than in
1086     * serv_connect_callback(). This to avoid null pointer references.
1087     */
1088 michael 1632 if (!attach_connect_block(client_p, conf->name, conf->host))
1089 adx 30 {
1090 michael 1618 sendto_realops_flags(UMODE_ALL, L_ALL, SEND_NOTICE,
1091 michael 2134 "Host %s is not enabled for connecting: no connect{} block",
1092     conf->name);
1093 michael 2345 if (by && IsClient(by) && !MyClient(by))
1094 michael 3110 sendto_one_notice(by, &me, ":Connect to host %s failed.", client_p->name);
1095    
1096 adx 30 SetDead(client_p);
1097     exit_client(client_p, client_p, "Connection failed");
1098 michael 2134 return 0;
1099 adx 30 }
1100    
1101     /* at this point we have a connection in progress and C/N lines
1102     * attached to the client, the socket info should be saved in the
1103     * client and it should either be resolved or have a valid address.
1104     *
1105     * The socket has been connected or connect is in progress.
1106     */
1107     make_server(client_p);
1108    
1109     if (by && IsClient(by))
1110     strlcpy(client_p->serv->by, by->name, sizeof(client_p->serv->by));
1111     else
1112     strlcpy(client_p->serv->by, "AutoConn.", sizeof(client_p->serv->by));
1113    
1114     SetConnecting(client_p);
1115     dlinkAdd(client_p, &client_p->node, &global_client_list);
1116     /* from def_fam */
1117 michael 1632 client_p->localClient->aftype = conf->aftype;
1118 adx 30
1119     /* Now, initiate the connection */
1120 michael 2345 /* XXX assume that a non 0 type means a specific bind address
1121 adx 30 * for this connect.
1122     */
1123 michael 1632 switch (conf->aftype)
1124 adx 30 {
1125     case AF_INET:
1126 michael 1632 v4 = (struct sockaddr_in*)&conf->bind;
1127 adx 30 if (v4->sin_addr.s_addr != 0)
1128     {
1129     struct irc_ssaddr ipn;
1130     memset(&ipn, 0, sizeof(struct irc_ssaddr));
1131     ipn.ss.ss_family = AF_INET;
1132     ipn.ss_port = 0;
1133 michael 1632 memcpy(&ipn, &conf->bind, sizeof(struct irc_ssaddr));
1134 michael 2134 comm_connect_tcp(&client_p->localClient->fd, conf->host, conf->port,
1135 michael 2345 (struct sockaddr *)&ipn, ipn.ss_len,
1136 michael 2134 serv_connect_callback, client_p, conf->aftype,
1137     CONNECTTIMEOUT);
1138 adx 30 }
1139     else if (ServerInfo.specific_ipv4_vhost)
1140     {
1141     struct irc_ssaddr ipn;
1142     memset(&ipn, 0, sizeof(struct irc_ssaddr));
1143     ipn.ss.ss_family = AF_INET;
1144     ipn.ss_port = 0;
1145     memcpy(&ipn, &ServerInfo.ip, sizeof(struct irc_ssaddr));
1146 michael 1632 comm_connect_tcp(&client_p->localClient->fd, conf->host, conf->port,
1147 adx 30 (struct sockaddr *)&ipn, ipn.ss_len,
1148 michael 1632 serv_connect_callback, client_p, conf->aftype,
1149 michael 2134 CONNECTTIMEOUT);
1150 adx 30 }
1151     else
1152 michael 2345 comm_connect_tcp(&client_p->localClient->fd, conf->host, conf->port,
1153     NULL, 0, serv_connect_callback, client_p, conf->aftype,
1154 adx 30 CONNECTTIMEOUT);
1155     break;
1156     #ifdef IPV6
1157     case AF_INET6:
1158     {
1159 michael 2182 struct irc_ssaddr ipn;
1160     struct sockaddr_in6 *v6;
1161     struct sockaddr_in6 *v6conf;
1162 adx 30
1163 michael 2182 memset(&ipn, 0, sizeof(struct irc_ssaddr));
1164     v6conf = (struct sockaddr_in6 *)&conf->bind;
1165     v6 = (struct sockaddr_in6 *)&ipn;
1166 adx 30
1167 michael 2182 if (memcmp(&v6conf->sin6_addr, &v6->sin6_addr, sizeof(struct in6_addr)) != 0)
1168 adx 30 {
1169 michael 2182 memcpy(&ipn, &conf->bind, sizeof(struct irc_ssaddr));
1170     ipn.ss.ss_family = AF_INET6;
1171     ipn.ss_port = 0;
1172     comm_connect_tcp(&client_p->localClient->fd,
1173     conf->host, conf->port,
1174 michael 2345 (struct sockaddr *)&ipn, ipn.ss_len,
1175 michael 2182 serv_connect_callback, client_p,
1176     conf->aftype, CONNECTTIMEOUT);
1177     }
1178     else if (ServerInfo.specific_ipv6_vhost)
1179     {
1180     memcpy(&ipn, &ServerInfo.ip6, sizeof(struct irc_ssaddr));
1181     ipn.ss.ss_family = AF_INET6;
1182     ipn.ss_port = 0;
1183     comm_connect_tcp(&client_p->localClient->fd,
1184     conf->host, conf->port,
1185     (struct sockaddr *)&ipn, ipn.ss_len,
1186     serv_connect_callback, client_p,
1187     conf->aftype, CONNECTTIMEOUT);
1188     }
1189     else
1190     comm_connect_tcp(&client_p->localClient->fd,
1191 michael 2345 conf->host, conf->port,
1192 michael 2182 NULL, 0, serv_connect_callback, client_p,
1193     conf->aftype, CONNECTTIMEOUT);
1194 adx 30 }
1195     #endif
1196     }
1197 michael 2182 return 1;
1198 adx 30 }
1199    
1200 michael 1303 #ifdef HAVE_LIBCRYPTO
1201     static void
1202     finish_ssl_server_handshake(struct Client *client_p)
1203     {
1204 michael 1632 struct MaskItem *conf = NULL;
1205 michael 1303
1206     conf = find_conf_name(&client_p->localClient->confs,
1207 michael 1632 client_p->name, CONF_SERVER);
1208 michael 1303 if (conf == NULL)
1209     {
1210 michael 1618 sendto_realops_flags(UMODE_ALL, L_ADMIN, SEND_NOTICE,
1211 michael 1303 "Lost connect{} block for %s", get_client_name(client_p, HIDE_IP));
1212 michael 1618 sendto_realops_flags(UMODE_ALL, L_OPER, SEND_NOTICE,
1213 michael 1303 "Lost connect{} block for %s", get_client_name(client_p, MASK_IP));
1214    
1215     exit_client(client_p, &me, "Lost connect{} block");
1216     return;
1217     }
1218    
1219 michael 2134 sendto_one(client_p, "PASS %s TS %d %s", conf->spasswd, TS_CURRENT, me.id);
1220 michael 1303
1221 michael 1632 send_capabilities(client_p, 0);
1222 michael 1303
1223     sendto_one(client_p, "SERVER %s 1 :%s%s",
1224     me.name, ConfigServerHide.hidden ? "(H) " : "",
1225     me.info);
1226    
1227     /* If we've been marked dead because a send failed, just exit
1228     * here now and save everyone the trouble of us ever existing.
1229     */
1230     if (IsDead(client_p))
1231     {
1232 michael 1618 sendto_realops_flags(UMODE_ALL, L_ADMIN, SEND_NOTICE,
1233 michael 1303 "%s[%s] went dead during handshake",
1234     client_p->name,
1235     client_p->host);
1236 michael 1618 sendto_realops_flags(UMODE_ALL, L_OPER, SEND_NOTICE,
1237 michael 1303 "%s went dead during handshake", client_p->name);
1238     return;
1239     }
1240    
1241     /* don't move to serv_list yet -- we haven't sent a burst! */
1242     /* If we get here, we're ok, so lets start reading some data */
1243     comm_setselect(&client_p->localClient->fd, COMM_SELECT_READ, read_packet, client_p, 0);
1244     }
1245    
1246     static void
1247 michael 1306 ssl_server_handshake(fde_t *fd, struct Client *client_p)
1248 michael 1303 {
1249 michael 2463 X509 *cert = NULL;
1250     int ret = 0;
1251 michael 1303
1252 michael 2463 if ((ret = SSL_connect(client_p->localClient->fd.ssl)) <= 0)
1253 michael 1303 {
1254 michael 2463 switch (SSL_get_error(client_p->localClient->fd.ssl, ret))
1255 michael 1303 {
1256     case SSL_ERROR_WANT_WRITE:
1257     comm_setselect(&client_p->localClient->fd, COMM_SELECT_WRITE,
1258 michael 1308 (PF *)ssl_server_handshake, client_p, 0);
1259 michael 1303 return;
1260     case SSL_ERROR_WANT_READ:
1261     comm_setselect(&client_p->localClient->fd, COMM_SELECT_READ,
1262 michael 1308 (PF *)ssl_server_handshake, client_p, 0);
1263 michael 1303 return;
1264     default:
1265 michael 1308 {
1266     const char *sslerr = ERR_error_string(ERR_get_error(), NULL);
1267 michael 1618 sendto_realops_flags(UMODE_ALL, L_ALL, SEND_NOTICE,
1268 michael 1308 "Error connecting to %s: %s", client_p->name,
1269     sslerr ? sslerr : "unknown SSL error");
1270 michael 1303 exit_client(client_p, client_p, "Error during SSL handshake");
1271     return;
1272 michael 1308 }
1273 michael 1303 }
1274     }
1275    
1276 michael 2463 if ((cert = SSL_get_peer_certificate(client_p->localClient->fd.ssl)))
1277     {
1278     int res = SSL_get_verify_result(client_p->localClient->fd.ssl);
1279     char buf[EVP_MAX_MD_SIZE * 2 + 1] = { '\0' };
1280     unsigned char md[EVP_MAX_MD_SIZE] = { '\0' };
1281    
1282     if (res == X509_V_OK || res == X509_V_ERR_SELF_SIGNED_CERT_IN_CHAIN ||
1283     res == X509_V_ERR_UNABLE_TO_VERIFY_LEAF_SIGNATURE ||
1284     res == X509_V_ERR_DEPTH_ZERO_SELF_SIGNED_CERT)
1285     {
1286     unsigned int i = 0, n = 0;
1287    
1288     if (X509_digest(cert, EVP_sha256(), md, &n))
1289     {
1290     for (; i < n; ++i)
1291     snprintf(buf + 2 * i, 3, "%02X", md[i]);
1292     client_p->certfp = xstrdup(buf);
1293     }
1294     }
1295     else
1296     ilog(LOG_TYPE_IRCD, "Server %s!%s@%s gave bad SSL client certificate: %d",
1297     client_p->name, client_p->username, client_p->host, res);
1298     X509_free(cert);
1299     }
1300    
1301 michael 1303 finish_ssl_server_handshake(client_p);
1302     }
1303    
1304     static void
1305 michael 1632 ssl_connect_init(struct Client *client_p, struct MaskItem *conf, fde_t *fd)
1306 michael 1303 {
1307     if ((client_p->localClient->fd.ssl = SSL_new(ServerInfo.client_ctx)) == NULL)
1308     {
1309     ilog(LOG_TYPE_IRCD, "SSL_new() ERROR! -- %s",
1310     ERR_error_string(ERR_get_error(), NULL));
1311     SetDead(client_p);
1312     exit_client(client_p, client_p, "SSL_new failed");
1313     return;
1314     }
1315    
1316     SSL_set_fd(fd->ssl, fd->fd);
1317 michael 1306
1318 michael 1632 if (!EmptyString(conf->cipher_list))
1319     SSL_set_cipher_list(client_p->localClient->fd.ssl, conf->cipher_list);
1320 michael 1306
1321     ssl_server_handshake(NULL, client_p);
1322 michael 1303 }
1323     #endif
1324    
1325 adx 30 /* serv_connect_callback() - complete a server connection.
1326 michael 2345 *
1327 adx 30 * This routine is called after the server connection attempt has
1328     * completed. If unsucessful, an error is sent to ops and the client
1329     * is closed. If sucessful, it goes through the initialisation/check
1330     * procedures, the capabilities are sent, and the socket is then
1331     * marked for reading.
1332     */
1333     static void
1334     serv_connect_callback(fde_t *fd, int status, void *data)
1335     {
1336     struct Client *client_p = data;
1337 michael 1632 struct MaskItem *conf = NULL;
1338 adx 30
1339     /* First, make sure its a real client! */
1340     assert(client_p != NULL);
1341     assert(&client_p->localClient->fd == fd);
1342    
1343     /* Next, for backward purposes, record the ip of the server */
1344     memcpy(&client_p->localClient->ip, &fd->connect.hostaddr,
1345     sizeof(struct irc_ssaddr));
1346     /* Check the status */
1347     if (status != COMM_OK)
1348     {
1349     /* We have an error, so report it and quit
1350     * Admins get to see any IP, mere opers don't *sigh*
1351     */
1352     if (ConfigServerHide.hide_server_ips)
1353 michael 1618 sendto_realops_flags(UMODE_ALL, L_ADMIN, SEND_NOTICE,
1354 adx 30 "Error connecting to %s: %s",
1355     client_p->name, comm_errstr(status));
1356     else
1357 michael 1618 sendto_realops_flags(UMODE_ALL, L_ADMIN, SEND_NOTICE,
1358 michael 2134 "Error connecting to %s[%s]: %s", client_p->name,
1359     client_p->host, comm_errstr(status));
1360 adx 30
1361 michael 1618 sendto_realops_flags(UMODE_ALL, L_OPER, SEND_NOTICE,
1362 michael 2134 "Error connecting to %s: %s",
1363     client_p->name, comm_errstr(status));
1364 adx 30
1365     /* If a fd goes bad, call dead_link() the socket is no
1366     * longer valid for reading or writing.
1367     */
1368     dead_link_on_write(client_p, 0);
1369     return;
1370     }
1371    
1372     /* COMM_OK, so continue the connection procedure */
1373     /* Get the C/N lines */
1374     conf = find_conf_name(&client_p->localClient->confs,
1375 michael 2134 client_p->name, CONF_SERVER);
1376 adx 30 if (conf == NULL)
1377     {
1378 michael 1618 sendto_realops_flags(UMODE_ALL, L_ADMIN, SEND_NOTICE,
1379 michael 2134 "Lost connect{} block for %s", get_client_name(client_p, HIDE_IP));
1380 michael 1618 sendto_realops_flags(UMODE_ALL, L_OPER, SEND_NOTICE,
1381 michael 2134 "Lost connect{} block for %s", get_client_name(client_p, MASK_IP));
1382 adx 30
1383     exit_client(client_p, &me, "Lost connect{} block");
1384     return;
1385     }
1386    
1387     /* Next, send the initial handshake */
1388     SetHandshake(client_p);
1389    
1390     #ifdef HAVE_LIBCRYPTO
1391 michael 1632 if (IsConfSSL(conf))
1392 michael 1303 {
1393 michael 1632 ssl_connect_init(client_p, conf, fd);
1394 michael 1303 return;
1395     }
1396 adx 30 #endif
1397    
1398 michael 2134 sendto_one(client_p, "PASS %s TS %d %s", conf->spasswd, TS_CURRENT, me.id);
1399 adx 30
1400 michael 1632 send_capabilities(client_p, 0);
1401 adx 30
1402 michael 2134 sendto_one(client_p, "SERVER %s 1 :%s%s", me.name,
1403     ConfigServerHide.hidden ? "(H) " : "", me.info);
1404 adx 30
1405     /* If we've been marked dead because a send failed, just exit
1406     * here now and save everyone the trouble of us ever existing.
1407     */
1408 michael 2345 if (IsDead(client_p))
1409 adx 30 {
1410 michael 1618 sendto_realops_flags(UMODE_ALL, L_ADMIN, SEND_NOTICE,
1411 michael 2134 "%s[%s] went dead during handshake",
1412 adx 30 client_p->name,
1413 michael 2134 client_p->host);
1414 michael 1618 sendto_realops_flags(UMODE_ALL, L_OPER, SEND_NOTICE,
1415 michael 2134 "%s went dead during handshake", client_p->name);
1416 adx 30 return;
1417     }
1418    
1419     /* don't move to serv_list yet -- we haven't sent a burst! */
1420     /* If we get here, we're ok, so lets start reading some data */
1421     comm_setselect(fd, COMM_SELECT_READ, read_packet, client_p, 0);
1422     }
1423    
1424     struct Client *
1425     find_servconn_in_progress(const char *name)
1426     {
1427     dlink_node *ptr;
1428     struct Client *cptr;
1429    
1430     DLINK_FOREACH(ptr, unknown_list.head)
1431     {
1432     cptr = ptr->data;
1433    
1434     if (cptr && cptr->name[0])
1435 michael 1652 if (!match(name, cptr->name))
1436 adx 30 return cptr;
1437     }
1438 michael 2345
1439 adx 30 return NULL;
1440     }

Properties

Name Value
svn:eol-style native
svn:keywords Id Revision