| 30 |
|
#include "fdlist.h" |
| 31 |
|
#include "s_bsd.h" |
| 32 |
|
#include "client.h" |
| 33 |
– |
#include "common.h" |
| 33 |
|
#include "dbuf.h" |
| 34 |
|
#include "event.h" |
| 35 |
|
#include "irc_string.h" |
| 40 |
|
#include "irc_res.h" |
| 41 |
|
#include "restart.h" |
| 42 |
|
#include "s_auth.h" |
| 43 |
< |
#include "s_conf.h" |
| 44 |
< |
#include "s_log.h" |
| 43 |
> |
#include "conf.h" |
| 44 |
> |
#include "log.h" |
| 45 |
|
#include "s_serv.h" |
| 46 |
|
#include "send.h" |
| 47 |
|
#include "memory.h" |
| 129 |
|
{ |
| 130 |
|
who = (who) ? who : ""; |
| 131 |
|
|
| 132 |
< |
sendto_realops_flags(UMODE_DEBUG, level, text, who, strerror(error)); |
| 133 |
< |
log_oper_action(LOG_IOERR_TYPE, NULL, "%s %s %s\n", who, text, strerror(error)); |
| 134 |
< |
ilog(L_ERROR, text, who, strerror(error)); |
| 132 |
> |
sendto_realops_flags(UMODE_DEBUG, level, SEND_NOTICE, |
| 133 |
> |
text, who, strerror(error)); |
| 134 |
> |
ilog(LOG_TYPE_IRCD, text, who, strerror(error)); |
| 135 |
|
} |
| 136 |
|
|
| 137 |
|
/* |
| 177 |
|
void |
| 178 |
|
close_connection(struct Client *client_p) |
| 179 |
|
{ |
| 180 |
< |
struct ConfItem *conf; |
| 182 |
< |
struct AccessItem *aconf; |
| 183 |
< |
struct ClassItem *aclass; |
| 180 |
> |
dlink_node *ptr = NULL; |
| 181 |
|
|
| 182 |
< |
assert(NULL != client_p); |
| 182 |
> |
assert(client_p); |
| 183 |
|
|
| 184 |
|
if (!IsDead(client_p)) |
| 185 |
|
{ |
| 192 |
|
send_queued_write(client_p); |
| 193 |
|
} |
| 194 |
|
|
| 195 |
< |
if (IsServer(client_p)) |
| 195 |
> |
if (IsClient(client_p)) |
| 196 |
> |
{ |
| 197 |
> |
++ServerStats.is_cl; |
| 198 |
> |
ServerStats.is_cbs += client_p->localClient->send.bytes; |
| 199 |
> |
ServerStats.is_cbr += client_p->localClient->recv.bytes; |
| 200 |
> |
ServerStats.is_cti += CurrentTime - client_p->localClient->firsttime; |
| 201 |
> |
} |
| 202 |
> |
else if (IsServer(client_p)) |
| 203 |
|
{ |
| 204 |
|
++ServerStats.is_sv; |
| 205 |
|
ServerStats.is_sbs += client_p->localClient->send.bytes; |
| 206 |
|
ServerStats.is_sbr += client_p->localClient->recv.bytes; |
| 207 |
< |
ServerStats.is_sti += CurrentTime - client_p->firsttime; |
| 207 |
> |
ServerStats.is_sti += CurrentTime - client_p->localClient->firsttime; |
| 208 |
|
|
| 209 |
< |
/* XXX Does this even make any sense at all anymore? |
| 206 |
< |
* scheduling a 'quick' reconnect could cause a pile of |
| 207 |
< |
* nick collides under TSora protocol... -db |
| 208 |
< |
*/ |
| 209 |
< |
/* |
| 210 |
< |
* If the connection has been up for a long amount of time, schedule |
| 211 |
< |
* a 'quick' reconnect, else reset the next-connect cycle. |
| 212 |
< |
*/ |
| 213 |
< |
if ((conf = find_conf_exact(SERVER_TYPE, client_p->name, |
| 214 |
< |
client_p->username, client_p->host))) |
| 209 |
> |
DLINK_FOREACH(ptr, server_items.head) |
| 210 |
|
{ |
| 211 |
+ |
struct MaskItem *conf = ptr->data; |
| 212 |
+ |
|
| 213 |
+ |
if (irccmp(conf->name, client_p->name)) |
| 214 |
+ |
continue; |
| 215 |
+ |
|
| 216 |
|
/* |
| 217 |
< |
* Reschedule a faster reconnect, if this was a automatically |
| 218 |
< |
* connected configuration entry. (Note that if we have had |
| 219 |
< |
* a rehash in between, the status has been changed to |
| 220 |
< |
* CONF_ILLEGAL). But only do this if it was a "good" link. |
| 217 |
> |
* Reset next-connect cycle of all connect{} blocks that match |
| 218 |
> |
* this servername. |
| 219 |
|
*/ |
| 220 |
< |
aconf = map_to_conf(conf); |
| 223 |
< |
aclass = map_to_conf(aconf->class_ptr); |
| 224 |
< |
aconf->hold = time(NULL); |
| 225 |
< |
aconf->hold += (aconf->hold - client_p->since > HANGONGOODLINK) ? |
| 226 |
< |
HANGONRETRYDELAY : ConFreq(aclass); |
| 220 |
> |
conf->until = CurrentTime + conf->class->con_freq; |
| 221 |
|
} |
| 222 |
|
} |
| 229 |
– |
else if (IsClient(client_p)) |
| 230 |
– |
{ |
| 231 |
– |
++ServerStats.is_cl; |
| 232 |
– |
ServerStats.is_cbs += client_p->localClient->send.bytes; |
| 233 |
– |
ServerStats.is_cbr += client_p->localClient->recv.bytes; |
| 234 |
– |
ServerStats.is_cti += CurrentTime - client_p->firsttime; |
| 235 |
– |
} |
| 223 |
|
else |
| 224 |
|
++ServerStats.is_ni; |
| 225 |
|
|
| 235 |
|
if (client_p->localClient->fd.flags.open) |
| 236 |
|
fd_close(&client_p->localClient->fd); |
| 237 |
|
|
| 251 |
– |
if (HasServlink(client_p)) |
| 252 |
– |
{ |
| 253 |
– |
if (client_p->localClient->ctrlfd.flags.open) |
| 254 |
– |
fd_close(&client_p->localClient->ctrlfd); |
| 255 |
– |
} |
| 256 |
– |
|
| 238 |
|
dbuf_clear(&client_p->localClient->buf_sendq); |
| 239 |
|
dbuf_clear(&client_p->localClient->buf_recvq); |
| 240 |
|
|
| 241 |
|
MyFree(client_p->localClient->passwd); |
| 242 |
< |
detach_conf(client_p, CONF_TYPE); |
| 242 |
> |
detach_conf(client_p, CONF_CLIENT|CONF_OPER|CONF_SERVER); |
| 243 |
|
client_p->from = NULL; /* ...this should catch them! >:) --msa */ |
| 244 |
|
} |
| 245 |
|
|
| 246 |
+ |
/* Base16 encoding is: |
| 247 |
+ |
* Copyright (c) 2001-2004, Roger Dingledine |
| 248 |
+ |
* Copyright (c) 2004-2007, Roger Dingledine, Nick Mathewson |
| 249 |
+ |
* |
| 250 |
+ |
* Redistribution and use in source and binary forms, with or without |
| 251 |
+ |
* modification, are permitted provided that the following conditions are |
| 252 |
+ |
* met: |
| 253 |
+ |
* |
| 254 |
+ |
* Redistributions of source code must retain the above copyright |
| 255 |
+ |
* notice, this list of conditions and the following disclaimer. |
| 256 |
+ |
|
| 257 |
+ |
* Redistributions in binary form must reproduce the above copyright notice, |
| 258 |
+ |
* this list of conditions and the following disclaimer |
| 259 |
+ |
* in the documentation and/or other materials provided with the distribution. |
| 260 |
+ |
* |
| 261 |
+ |
* Neither the names of the copyright owners nor the names of its |
| 262 |
+ |
* contributors may be used to endorse or promote products derived from |
| 263 |
+ |
* this software without specific prior written permission. |
| 264 |
+ |
|
| 265 |
+ |
* THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS |
| 266 |
+ |
* "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT |
| 267 |
+ |
* LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR |
| 268 |
+ |
* A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT |
| 269 |
+ |
* OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, |
| 270 |
+ |
* SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT |
| 271 |
+ |
* LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, |
| 272 |
+ |
* DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY |
| 273 |
+ |
* THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT |
| 274 |
+ |
* (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE |
| 275 |
+ |
* OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. |
| 276 |
+ |
*/ |
| 277 |
+ |
static void |
| 278 |
+ |
base16_encode(char *dest, size_t destlen, const char *src, size_t srclen) |
| 279 |
+ |
{ |
| 280 |
+ |
const char *end; |
| 281 |
+ |
char *cp; |
| 282 |
+ |
|
| 283 |
+ |
assert(destlen >= srclen * 2 + 1); |
| 284 |
+ |
|
| 285 |
+ |
cp = dest; |
| 286 |
+ |
end = src + srclen; |
| 287 |
+ |
|
| 288 |
+ |
while (src < end) |
| 289 |
+ |
{ |
| 290 |
+ |
*cp++ = "0123456789ABCDEF"[(*(const uint8_t *)src) >> 4]; |
| 291 |
+ |
*cp++ = "0123456789ABCDEF"[(*(const uint8_t *)src) & 0xf]; |
| 292 |
+ |
++src; |
| 293 |
+ |
} |
| 294 |
+ |
|
| 295 |
+ |
*cp = '\0'; |
| 296 |
+ |
} |
| 297 |
+ |
|
| 298 |
|
#ifdef HAVE_LIBCRYPTO |
| 299 |
|
/* |
| 300 |
|
* ssl_handshake - let OpenSSL initialize the protocol. Register for |
| 303 |
|
static void |
| 304 |
|
ssl_handshake(int fd, struct Client *client_p) |
| 305 |
|
{ |
| 306 |
+ |
X509 *cert = NULL; |
| 307 |
|
int ret = SSL_accept(client_p->localClient->fd.ssl); |
| 308 |
+ |
int err = SSL_get_error(client_p->localClient->fd.ssl, ret); |
| 309 |
+ |
|
| 310 |
+ |
ilog(LOG_TYPE_IRCD, "SSL Error %d %s", err, ERR_error_string(err, NULL)); |
| 311 |
+ |
|
| 312 |
+ |
if ((cert = SSL_get_peer_certificate(client_p->localClient->fd.ssl))) |
| 313 |
+ |
{ |
| 314 |
+ |
int res = SSL_get_verify_result(client_p->localClient->fd.ssl); |
| 315 |
+ |
char buf[SHA_DIGEST_LENGTH * 2 + 1] = { '\0' }; |
| 316 |
+ |
|
| 317 |
+ |
if (res == X509_V_OK || res == X509_V_ERR_SELF_SIGNED_CERT_IN_CHAIN || |
| 318 |
+ |
res == X509_V_ERR_UNABLE_TO_VERIFY_LEAF_SIGNATURE || |
| 319 |
+ |
res == X509_V_ERR_DEPTH_ZERO_SELF_SIGNED_CERT) |
| 320 |
+ |
{ |
| 321 |
+ |
base16_encode(buf, sizeof(buf), |
| 322 |
+ |
(const char *)cert->sha1_hash, sizeof(cert->sha1_hash)); |
| 323 |
+ |
client_p->certfp = xstrndup(buf, sizeof(buf)); |
| 324 |
+ |
} |
| 325 |
+ |
else |
| 326 |
+ |
ilog(LOG_TYPE_IRCD, "Client %s!%s@%s gave bad SSL client certificate: %d", |
| 327 |
+ |
client_p->name, client_p->username, client_p->host, res); |
| 328 |
+ |
X509_free(cert); |
| 329 |
+ |
} |
| 330 |
|
|
| 331 |
|
if (ret <= 0) |
| 332 |
+ |
{ |
| 333 |
|
switch (SSL_get_error(client_p->localClient->fd.ssl, ret)) |
| 334 |
|
{ |
| 335 |
|
case SSL_ERROR_WANT_WRITE: |
| 346 |
|
exit_client(client_p, client_p, "Error during SSL handshake"); |
| 347 |
|
return; |
| 348 |
|
} |
| 349 |
+ |
} |
| 350 |
|
|
| 351 |
< |
execute_callback(auth_cb, client_p); |
| 351 |
> |
start_auth(client_p); |
| 352 |
|
} |
| 353 |
|
#endif |
| 354 |
|
|
| 379 |
|
sizeof(new_client->sockhost), NULL, 0, NI_NUMERICHOST); |
| 380 |
|
new_client->localClient->aftype = new_client->localClient->ip.ss.ss_family; |
| 381 |
|
|
| 382 |
+ |
#ifdef HAVE_LIBGEOIP |
| 383 |
+ |
/* XXX IPV6 SUPPORT XXX */ |
| 384 |
+ |
if (irn->ss.ss_family == AF_INET && geoip_ctx) |
| 385 |
+ |
{ |
| 386 |
+ |
const struct sockaddr_in *v4 = (const struct sockaddr_in *)&new_client->localClient->ip; |
| 387 |
+ |
new_client->localClient->country_id = GeoIP_id_by_ipnum(geoip_ctx, (unsigned long)ntohl(v4->sin_addr.s_addr)); |
| 388 |
+ |
} |
| 389 |
+ |
#endif |
| 390 |
+ |
|
| 391 |
|
if (new_client->sockhost[0] == ':' && new_client->sockhost[1] == ':') |
| 392 |
|
{ |
| 393 |
|
strlcpy(new_client->host, "0", sizeof(new_client->host)); |
| 406 |
|
{ |
| 407 |
|
if ((new_client->localClient->fd.ssl = SSL_new(ServerInfo.server_ctx)) == NULL) |
| 408 |
|
{ |
| 409 |
< |
ilog(L_CRIT, "SSL_new() ERROR! -- %s", |
| 409 |
> |
ilog(LOG_TYPE_IRCD, "SSL_new() ERROR! -- %s", |
| 410 |
|
ERR_error_string(ERR_get_error(), NULL)); |
| 411 |
|
|
| 412 |
|
SetDead(new_client); |
| 419 |
|
} |
| 420 |
|
else |
| 421 |
|
#endif |
| 422 |
< |
execute_callback(auth_cb, new_client); |
| 422 |
> |
start_auth(new_client); |
| 423 |
|
} |
| 424 |
|
|
| 425 |
|
/* |