ViewVC Help
View File | Revision Log | Show Annotations | View Changeset | Root Listing
root/svn/ircd-hybrid/branches/8.2.x/src/server.c
(Generate patch)

Comparing:
ircd-hybrid-7.2/src/s_serv.c (file contents), Revision 337 by michael, Mon Dec 26 19:20:47 2005 UTC vs.
ircd-hybrid/trunk/src/s_serv.c (file contents), Revision 2916 by michael, Sat Jan 25 21:09:18 2014 UTC

# Line 1 | Line 1
1   /*
2 < *  ircd-hybrid: an advanced Internet Relay Chat Daemon(ircd).
3 < *  s_serv.c: Server related functions.
2 > *  ircd-hybrid: an advanced, lightweight Internet Relay Chat Daemon (ircd)
3   *
4 < *  Copyright (C) 2005 by the past and present ircd coders, and others.
4 > *  Copyright (c) 1997-2014 ircd-hybrid development team
5   *
6   *  This program is free software; you can redistribute it and/or modify
7   *  it under the terms of the GNU General Public License as published by
# Line 18 | Line 17
17   *  along with this program; if not, write to the Free Software
18   *  Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307
19   *  USA
20 < *
21 < *  $Id$
20 > */
21 >
22 > /*! \file s_serv.c
23 > * \brief Server related functions.
24 > * \version $Id$
25   */
26  
27   #include "stdinc.h"
# Line 27 | Line 29
29   #include <openssl/rsa.h>
30   #include "rsa.h"
31   #endif
32 < #include "tools.h"
32 > #include "list.h"
33   #include "channel.h"
34   #include "channel_mode.h"
35   #include "client.h"
34 #include "common.h"
36   #include "dbuf.h"
37   #include "event.h"
38   #include "fdlist.h"
39   #include "hash.h"
40   #include "irc_string.h"
40 #include "inet_misc.h"
41 #include "sprintf_irc.h"
41   #include "ircd.h"
42   #include "ircd_defs.h"
43   #include "s_bsd.h"
45 #include "irc_getnameinfo.h"
46 #include "list.h"
44   #include "numeric.h"
45   #include "packet.h"
46   #include "irc_res.h"
47 < #include "s_conf.h"
47 > #include "conf.h"
48   #include "s_serv.h"
49 < #include "s_log.h"
50 < #include "s_stats.h"
49 > #include "log.h"
50 > #include "s_misc.h"
51   #include "s_user.h"
52   #include "send.h"
53   #include "memory.h"
54 < #include "channel.h" /* chcap_usage_counts stuff...*/
54 > #include "channel.h"
55 > #include "parse.h"
56  
57   #define MIN_CONN_FREQ 300
58  
59 < struct Client *uplink  = NULL;
62 <
63 <
59 > dlink_list flatten_links;
60   static dlink_list cap_list = { NULL, NULL, 0 };
65 static unsigned long freeMask;
61   static void server_burst(struct Client *);
67 static int fork_server(struct Client *);
62   static void burst_all(struct Client *);
69 static void cjoin_all(struct Client *);
63   static void send_tb(struct Client *client_p, struct Channel *chptr);
64  
65   static CNCB serv_connect_callback;
66  
74 static void start_io(struct Client *);
67   static void burst_members(struct Client *, struct Channel *);
76 static void burst_ll_members(struct Client *, struct Channel *);
77 static void add_lazylinkchannel(struct Client *, struct Channel *);
78
79 static SlinkRplHnd slink_error;
80 static SlinkRplHnd slink_zipstats;
81
82
83 #ifdef HAVE_LIBCRYPTO
84 struct EncCapability CipherTable[] =
85 {
86 #ifdef HAVE_EVP_BF_CFB
87  { "BF/168",     CAP_ENC_BF_168,     24, CIPHER_BF     },
88  { "BF/128",     CAP_ENC_BF_128,     16, CIPHER_BF     },
89 #endif
90 #ifdef HAVE_EVP_CAST5_CFB
91  { "CAST/128",   CAP_ENC_CAST_128,   16, CIPHER_CAST   },
92 #endif
93 #ifdef HAVE_EVP_IDEA_CFB
94  { "IDEA/128",   CAP_ENC_IDEA_128,   16, CIPHER_IDEA   },
95 #endif
96 #ifdef HAVE_EVP_RC5_32_12_16_CFB
97  { "RC5.16/128", CAP_ENC_RC5_16_128, 16, CIPHER_RC5_16 },
98  { "RC5.12/128", CAP_ENC_RC5_12_128, 16, CIPHER_RC5_12 },
99  { "RC5.8/128",  CAP_ENC_RC5_8_128,  16, CIPHER_RC5_8  },
100 #endif
101 #ifdef HAVE_EVP_DES_EDE3_CFB
102  { "3DES/168",   CAP_ENC_3DES_168,   24, CIPHER_3DES   },
103 #endif
104 #ifdef HAVE_EVP_DES_CFB
105  { "DES/56",     CAP_ENC_DES_56,      8, CIPHER_DES    },
106 #endif
107  { 0,            0,                   0, 0             }
108 };
109 #endif
110
111 struct SlinkRplDef slinkrpltab[] = {
112  { SLINKRPL_ERROR,    slink_error,    SLINKRPL_FLAG_DATA },
113  { SLINKRPL_ZIPSTATS, slink_zipstats, SLINKRPL_FLAG_DATA },
114  { 0,                 0,              0 },
115 };
116
117
118 void
119 slink_error(unsigned int rpl, unsigned int len, unsigned char *data,
120            struct Client *server_p)
121 {
122  assert(rpl == SLINKRPL_ERROR);
123  assert(len < 256);
124
125  data[len-1] = '\0';
126
127  sendto_realops_flags(UMODE_ALL, L_ALL, "SlinkError for %s: %s",
128                       server_p->name, data);
129  /* XXX should this be exit_client? */
130  exit_client(server_p, &me, "servlink error -- terminating link");
131 }
132
133 void
134 slink_zipstats(unsigned int rpl, unsigned int len, unsigned char *data,
135               struct Client *server_p)
136 {
137  struct ZipStats zipstats;
138  unsigned long in = 0, in_wire = 0, out = 0, out_wire = 0;
139  int i = 0;
140
141  assert(rpl == SLINKRPL_ZIPSTATS);
142  assert(len == 16);
143  assert(IsCapable(server_p, CAP_ZIP));
144
145  /* Yes, it needs to be done this way, no we cannot let the compiler
146   * work with the pointer to the structure.  This works around a GCC
147   * bug on SPARC that affects all versions at the time of this writing.
148   * I will feed you to the creatures living in RMS's beard if you do
149   * not leave this as is, without being sure that you are not causing
150   * regression for most of our installed SPARC base.
151   * -jmallett, 04/27/2002
152   */
153  memcpy(&zipstats, &server_p->localClient->zipstats, sizeof(struct ZipStats));
154
155  in |= (data[i++] << 24);
156  in |= (data[i++] << 16);
157  in |= (data[i++] <<  8);
158  in |= (data[i++]      );
159
160  in_wire |= (data[i++] << 24);
161  in_wire |= (data[i++] << 16);
162  in_wire |= (data[i++] <<  8);
163  in_wire |= (data[i++]      );
164
165  out |= (data[i++] << 24);
166  out |= (data[i++] << 16);
167  out |= (data[i++] <<  8);
168  out |= (data[i++]      );
169
170  out_wire |= (data[i++] << 24);
171  out_wire |= (data[i++] << 16);
172  out_wire |= (data[i++] <<  8);
173  out_wire |= (data[i++]      );
174
175  /* This macro adds b to a if a plus b is not an overflow, and sets the
176   * value of a to b if it is.
177   * Add and Set if No Overflow.
178   */
179 #define ASNO(a, b) a = (a + b >= a ? a + b : b)
180
181  ASNO(zipstats.in, in);
182  ASNO(zipstats.out, out);
183  ASNO(zipstats.in_wire, in_wire);
184  ASNO(zipstats.out_wire, out_wire);
185
186  if (zipstats.in > 0)
187    zipstats.in_ratio = (((double)(zipstats.in - zipstats.in_wire) /
188                         (double)zipstats.in) * 100.00);
189  else
190    zipstats.in_ratio = 0;
191
192  if (zipstats.out > 0)
193    zipstats.out_ratio = (((double)(zipstats.out - zipstats.out_wire) /
194                          (double)zipstats.out) * 100.00);
195  else
196    zipstats.out_ratio = 0;
197
198  memcpy(&server_p->localClient->zipstats, &zipstats, sizeof (struct ZipStats));
199 }
200
201 void
202 collect_zipstats(void *unused)
203 {
204  dlink_node *ptr;
205  struct Client *target_p;
206
207  DLINK_FOREACH(ptr, serv_list.head)
208  {
209    target_p = ptr->data;
210
211    if (IsCapable(target_p, CAP_ZIP))
212    {
213      /* only bother if we haven't already got something queued... */
214      if (!target_p->localClient->slinkq)
215      {
216        target_p->localClient->slinkq     = MyMalloc(1); /* sigh.. */
217        target_p->localClient->slinkq[0]  = SLINKCMD_ZIPSTATS;
218        target_p->localClient->slinkq_ofs = 0;
219        target_p->localClient->slinkq_len = 1;
220        send_queued_slink_write(target_p);
221      }
222    }
223  }
224 }
225
226 #ifdef HAVE_LIBCRYPTO
227 struct EncCapability *
228 check_cipher(struct Client *client_p, struct AccessItem *aconf)
229 {
230  struct EncCapability *epref = NULL;
231
232  /* Use connect{} specific info if available */
233  if (aconf->cipher_preference)
234    epref = aconf->cipher_preference;
235  else if (ConfigFileEntry.default_cipher_preference)
236    epref = ConfigFileEntry.default_cipher_preference;
237
238  /*
239   * If the server supports the capability in hand, return the matching
240   * conf struct.  Otherwise, return NULL (an error).
241   */
242  if (epref && IsCapableEnc(client_p, epref->cap))
243    return epref;
244
245  return NULL;
246 }
247 #endif /* HAVE_LIBCRYPTO */
248
249 /* my_name_for_link()
250 * return wildcard name of my server name
251 * according to given config entry --Jto
252 */
253 const char *
254 my_name_for_link(struct ConfItem *conf)
255 {
256  struct AccessItem *aconf;
257
258  aconf = (struct AccessItem *)map_to_conf(conf);
259  if (aconf->fakename != NULL)
260    return(aconf->fakename);
261  else
262    return(me.name);
263 }
68  
69   /*
70   * write_links_file
# Line 271 | Line 75 | my_name_for_link(struct ConfItem *conf)
75   *                but in no particular order.
76   */
77   void
78 < write_links_file(void* notused)
78 > write_links_file(void *notused)
79   {
80 <  MessageFileLine *next_mptr = 0;
81 <  MessageFileLine *mptr = 0;
82 <  MessageFileLine *currentMessageLine = 0;
279 <  MessageFileLine *newMessageLine = 0;
280 <  MessageFile *MessageFileptr;
281 <  const char *p;
282 <  FBFILE *file;
283 <  char buff[512];
284 <  dlink_node *ptr;
285 <
286 <  MessageFileptr = &ConfigFileEntry.linksfile;
80 >  FILE *file = NULL;
81 >  dlink_node *ptr = NULL, *ptr_next = NULL;
82 >  char buff[IRCD_BUFSIZE] = { '\0' };
83  
84 <  if ((file = fbopen(MessageFileptr->fileName, "w")) == NULL)
84 >  if ((file = fopen(LIPATH, "w")) == NULL)
85      return;
86  
87 <  for (mptr = MessageFileptr->contentsOfFile; mptr; mptr = next_mptr)
87 >  DLINK_FOREACH_SAFE(ptr, ptr_next, flatten_links.head)
88    {
89 <    next_mptr = mptr->next;
90 <    MyFree(mptr);
89 >    dlinkDelete(ptr, &flatten_links);
90 >    MyFree(ptr->data);
91 >    free_dlink_node(ptr);
92    }
93  
297  MessageFileptr->contentsOfFile = NULL;
298  currentMessageLine             = NULL;
299
94    DLINK_FOREACH(ptr, global_serv_list.head)
95    {
96 <    size_t nbytes = 0;
303 <    struct Client *target_p = ptr->data;
96 >    const struct Client *target_p = ptr->data;
97  
98 <    /* skip ourselves, we send ourselves in /links */
99 <    if (IsMe(target_p))
98 >    /*
99 >     * Skip hidden servers, aswell as ourselves, since we already send
100 >     * ourselves in /links
101 >     */
102 >    if (IsHidden(target_p) || IsMe(target_p))
103        continue;
104  
105 <    /* skip hidden servers */
310 <    if (IsHidden(target_p) && !ConfigServerHide.disable_hidden)
105 >    if (HasFlag(target_p, FLAGS_SERVICE) && ConfigServerHide.hide_services)
106        continue;
107  
108 <    if (target_p->info[0])
109 <      p = target_p->info;
315 <    else
316 <      p = "(Unknown Location)";
317 <
318 <    newMessageLine = MyMalloc(sizeof(MessageFileLine));
319 <
320 <    /* Attempt to format the file in such a way it follows the usual links output
108 >    /*
109 >     * Attempt to format the file in such a way it follows the usual links output
110       * ie  "servername uplink :hops info"
111       * Mostly for aesthetic reasons - makes it look pretty in mIRC ;)
112       * - madmax
113       */
114 +    snprintf(buff, sizeof(buff), "%s %s :1 %s",   target_p->name,
115 +             me.name, target_p->info);
116 +    dlinkAddTail(xstrdup(buff), make_dlink_node(), &flatten_links);
117 +    snprintf(buff, sizeof(buff), "%s %s :1 %s\n", target_p->name,
118 +             me.name, target_p->info);
119  
120 <    /*
121 <     * For now, check this ircsprintf wont overflow - it shouldnt on a
328 <     * default config but it is configurable..
329 <     * This should be changed to an snprintf at some point, but I'm wanting to
330 <     * know if this is a cause of a bug - cryogen
331 <     */
332 <    assert(strlen(target_p->name) + strlen(me.name) + 6 + strlen(p) <=
333 <            MESSAGELINELEN);
334 <    ircsprintf(newMessageLine->line, "%s %s :1 %s",
335 <               target_p->name, me.name, p);
336 <    newMessageLine->next = NULL;
120 >    fputs(buff, file);
121 >  }
122  
123 <    if (MessageFileptr->contentsOfFile)
124 <    {
125 <      if (currentMessageLine)
126 <        currentMessageLine->next = newMessageLine;
127 <      currentMessageLine = newMessageLine;
128 <    }
129 <    else
130 <    {
131 <      MessageFileptr->contentsOfFile = newMessageLine;
132 <      currentMessageLine = newMessageLine;
133 <    }
123 >  fclose(file);
124 > }
125 >
126 > void
127 > read_links_file(void)
128 > {
129 >  FILE *file = NULL;
130 >  char *p = NULL;
131 >  char buff[IRCD_BUFSIZE] = { '\0' };
132 >
133 >  if ((file = fopen(LIPATH, "r")) == NULL)
134 >    return;
135  
136 <    nbytes = ircsprintf(buff, "%s %s :1 %s\n", target_p->name, me.name, p);
137 <    fbputs(buff, file, nbytes);
136 >  while (fgets(buff, sizeof(buff), file))
137 >  {
138 >    if ((p = strchr(buff, '\n')) != NULL)
139 >      *p = '\0';
140 >
141 >    dlinkAddTail(xstrdup(buff), make_dlink_node(), &flatten_links);
142    }
143  
144 <  fbclose(file);
144 >  fclose(file);
145   }
146  
147   /* hunt_server()
# Line 375 | Line 165 | write_links_file(void* notused)
165   */
166   int
167   hunt_server(struct Client *client_p, struct Client *source_p, const char *command,
168 <            int server, int parc, char *parv[])
168 >            const int server, const int parc, char *parv[])
169   {
170    struct Client *target_p = NULL;
171    struct Client *target_tmp = NULL;
172    dlink_node *ptr;
173    int wilds;
174  
175 <  /* Assume it's me, if no server
176 <   */
177 <  if (parc <= server || EmptyString(parv[server]) ||
178 <      match(me.name, parv[server]) ||
179 <      match(parv[server], me.name) ||
180 <      !strcmp(parv[server], me.id))
391 <    return(HUNTED_ISME);
175 >  /* Assume it's me, if no server */
176 >  if (parc <= server || EmptyString(parv[server]))
177 >    return HUNTED_ISME;
178 >
179 >  if (!strcmp(parv[server], me.id) || !match(parv[server], me.name))
180 >    return HUNTED_ISME;
181  
182    /* These are to pickup matches that would cause the following
183     * message to go in the wrong direction while doing quick fast
184     * non-matching lookups.
185     */
186    if (MyClient(source_p))
187 <    target_p = find_client(parv[server]);
187 >    target_p = hash_find_client(parv[server]);
188    else
189      target_p = find_person(client_p, parv[server]);
190  
# Line 403 | Line 192 | hunt_server(struct Client *client_p, str
192      if (target_p->from == source_p->from && !MyConnect(target_p))
193        target_p = NULL;
194  
195 <  if (target_p == NULL && (target_p = find_server(parv[server])))
195 >  if (target_p == NULL && (target_p = hash_find_server(parv[server])))
196      if (target_p->from == source_p->from && !MyConnect(target_p))
197        target_p = NULL;
198  
199 <  collapse(parv[server]);
411 <  wilds = (strchr(parv[server], '?') || strchr(parv[server], '*'));
199 >  wilds = has_wildcards(parv[server]);
200  
201    /* Again, if there are no wild cards involved in the server
202     * name, use the hash lookup
# Line 417 | Line 205 | hunt_server(struct Client *client_p, str
205    {
206      if (!wilds)
207      {
208 <      if (!(target_p = find_server(parv[server])))
208 >      if (!(target_p = hash_find_server(parv[server])))
209        {
210          sendto_one(source_p, form_str(ERR_NOSUCHSERVER),
211 <                   me.name, parv[0], parv[server]);
212 <        return(HUNTED_NOSUCH);
211 >                   me.name, source_p->name, parv[server]);
212 >        return HUNTED_NOSUCH;
213        }
214      }
215      else
# Line 430 | Line 218 | hunt_server(struct Client *client_p, str
218        {
219          target_tmp = ptr->data;
220  
221 <        if (match(parv[server], target_tmp->name))
221 >        if (!match(parv[server], target_tmp->name))
222          {
223            if (target_tmp->from == source_p->from && !MyConnect(target_tmp))
224              continue;
# Line 448 | Line 236 | hunt_server(struct Client *client_p, str
236      if(!IsRegistered(target_p))
237      {
238        sendto_one(source_p, form_str(ERR_NOSUCHSERVER),
239 <                 me.name, parv[0], parv[server]);
239 >                 me.name, source_p->name, parv[server]);
240        return HUNTED_NOSUCH;
241      }
242  
243      if (IsMe(target_p) || MyClient(target_p))
244        return HUNTED_ISME;
245  
246 <    if (!match(target_p->name, parv[server]))
246 >    if (match(target_p->name, parv[server]))
247        parv[server] = target_p->name;
248  
461    /* Deal with lazylinks */
462    client_burst_if_needed(target_p, source_p);
463
249      /* This is a little kludgy but should work... */
250      if (IsClient(source_p) &&
251          ((MyConnect(target_p) && IsCapable(target_p, CAP_TS6)) ||
# Line 470 | Line 255 | hunt_server(struct Client *client_p, str
255      sendto_one(target_p, command, parv[0],
256                 parv[1], parv[2], parv[3], parv[4],
257                 parv[5], parv[6], parv[7], parv[8]);
258 <    return(HUNTED_PASS);
259 <  }
258 >    return HUNTED_PASS;
259 >  }
260  
261    sendto_one(source_p, form_str(ERR_NOSUCHSERVER),
262 <             me.name, parv[0], parv[server]);
263 <  return(HUNTED_NOSUCH);
262 >             me.name, source_p->name, parv[server]);
263 >  return HUNTED_NOSUCH;
264   }
265  
266   /* try_connections()
# Line 491 | Line 276 | hunt_server(struct Client *client_p, str
276   void
277   try_connections(void *unused)
278   {
279 <  dlink_node *ptr;
280 <  struct ConfItem *conf;
496 <  struct AccessItem *aconf;
497 <  struct ClassItem *cltmp;
279 >  dlink_node *ptr = NULL;
280 >  struct MaskItem *conf;
281    int confrq;
282  
283    /* TODO: change this to set active flag to 0 when added to event! --Habeeb */
# Line 504 | Line 287 | try_connections(void *unused)
287    DLINK_FOREACH(ptr, server_items.head)
288    {
289      conf = ptr->data;
507    aconf = (struct AccessItem *)map_to_conf(conf);
290  
291 <    /* Also when already connecting! (update holdtimes) --SRB
291 >    assert(conf->type == CONF_SERVER);
292 >
293 >    /* Also when already connecting! (update holdtimes) --SRB
294       */
295 <    if (!(aconf->status & CONF_SERVER) || aconf->port <= 0 ||
512 <        !(IsConfAllowAutoConn(aconf)))
295 >    if (!conf->port ||!IsConfAllowAutoConn(conf))
296        continue;
297  
515    cltmp = (struct ClassItem *)map_to_conf(aconf->class_ptr);
298  
299      /* Skip this entry if the use of it is still on hold until
300       * future. Otherwise handle this entry (and set it on hold
# Line 520 | Line 302 | try_connections(void *unused)
302       * made one successfull connection... [this algorithm is
303       * a bit fuzzy... -- msa >;) ]
304       */
305 <    if (aconf->hold > CurrentTime)
305 >    if (conf->until > CurrentTime)
306        continue;
307  
308 <    if (cltmp == NULL)
308 >    if (conf->class == NULL)
309        confrq = DEFAULT_CONNECTFREQUENCY;
310      else
311      {
312 <      confrq = ConFreq(cltmp);
313 <      if (confrq < MIN_CONN_FREQ )
314 <        confrq = MIN_CONN_FREQ;
312 >      confrq = conf->class->con_freq;
313 >      if (confrq < MIN_CONN_FREQ)
314 >        confrq = MIN_CONN_FREQ;
315      }
316  
317 <    aconf->hold = CurrentTime + confrq;
317 >    conf->until = CurrentTime + confrq;
318  
319      /* Found a CONNECT config with port specified, scan clients
320       * and see if this server is already connected?
321       */
322 <    if (find_server(conf->name) != NULL)
322 >    if (hash_find_server(conf->name) != NULL)
323        continue;
324  
325 <    if (CurrUserCount(cltmp) < MaxTotal(cltmp))
325 >    if (conf->class->ref_count < conf->class->max_total)
326      {
327        /* Go to the end of the list, if not already last */
328        if (ptr->next != NULL)
# Line 561 | Line 343 | try_connections(void *unused)
343         *   -- adrian
344         */
345        if (ConfigServerHide.hide_server_ips)
346 <        sendto_realops_flags(UMODE_ALL, L_ALL, "Connection to %s activated.",
346 >        sendto_realops_flags(UMODE_ALL, L_ALL, SEND_NOTICE,
347 >                             "Connection to %s activated.",
348                               conf->name);
349        else
350 <        sendto_realops_flags(UMODE_ALL, L_ALL, "Connection to %s[%s] activated.",
351 <                             conf->name, aconf->host);
350 >        sendto_realops_flags(UMODE_ALL, L_ALL, SEND_NOTICE,
351 >                             "Connection to %s[%s] activated.",
352 >                             conf->name, conf->host);
353  
354 <      serv_connect(aconf, NULL);
354 >      serv_connect(conf, NULL);
355        /* We connect only one at time... */
356        return;
357      }
# Line 575 | Line 359 | try_connections(void *unused)
359   }
360  
361   int
362 < check_server(const char *name, struct Client *client_p, int cryptlink)
362 > valid_servname(const char *name)
363 > {
364 >  unsigned int length = 0;
365 >  unsigned int dots   = 0;
366 >  const char *p = name;
367 >
368 >  for (; *p; ++p)
369 >  {
370 >    if (!IsServChar(*p))
371 >      return 0;
372 >
373 >    ++length;
374 >
375 >    if (*p == '.')
376 >      ++dots;
377 >  }
378 >
379 >  return dots != 0 && length <= HOSTLEN;
380 > }
381 >
382 > int
383 > check_server(const char *name, struct Client *client_p)
384   {
385    dlink_node *ptr;
386 <  struct ConfItem *conf           = NULL;
387 <  struct ConfItem *server_conf    = NULL;
583 <  struct AccessItem *server_aconf = NULL;
584 <  struct AccessItem *aconf        = NULL;
386 >  struct MaskItem *conf        = NULL;
387 >  struct MaskItem *server_conf = NULL;
388    int error = -1;
389  
390    assert(client_p != NULL);
391  
589  if (client_p == NULL)
590    return(error);
591
592  if (strlen(name) > HOSTLEN)
593    return(-4);
594
392    /* loop through looking for all possible connect items that might work */
393    DLINK_FOREACH(ptr, server_items.head)
394    {
395      conf = ptr->data;
599    aconf = (struct AccessItem *)map_to_conf(conf);
396  
397 <    if (!match(name, conf->name))
397 >    if (match(name, conf->name))
398        continue;
399  
400      error = -3;
401  
402      /* XXX: Fix me for IPv6                    */
403      /* XXX sockhost is the IPv4 ip as a string */
404 <    if (match(aconf->host, client_p->host) ||
405 <        match(aconf->host, client_p->sockhost))
404 >    if (!match(conf->host, client_p->host) ||
405 >        !match(conf->host, client_p->sockhost))
406      {
407        error = -2;
612 #ifdef HAVE_LIBCRYPTO
613      if (cryptlink && IsConfCryptLink(aconf))
614      {
615        if (aconf->rsa_public_key)
616          server_conf = conf;
617      }
618      else if (!(cryptlink || IsConfCryptLink(aconf)))
619 #endif /* HAVE_LIBCRYPTO */
620      {
621        /* A NULL password is as good as a bad one */
622        if (EmptyString(client_p->localClient->passwd))
623          return(-2);
624
625        /* code in s_conf.c should not have allowed this to be NULL */
626        if (aconf->passwd == NULL)
627          return(-2);
408  
409 <        if (IsConfEncrypted(aconf))
410 <        {
411 <          if (strcmp(aconf->passwd,
412 <              (const char *)crypt(client_p->localClient->passwd,
413 <                                  aconf->passwd)) == 0)
414 <            server_conf = conf;
415 <        }
416 <        else
637 <        {
638 <          if (strcmp(aconf->passwd, client_p->localClient->passwd) == 0)
639 <            server_conf = conf;
640 <        }
641 <      }
409 >      if (!match_conf_password(client_p->localClient->passwd, conf))
410 >        return -2;
411 >
412 >      if (!EmptyString(conf->certfp))
413 >        if (EmptyString(client_p->certfp) || strcasecmp(client_p->certfp, conf->certfp))
414 >          return -4;
415 >
416 >      server_conf = conf;
417      }
418    }
419  
420    if (server_conf == NULL)
421 <    return(error);
421 >    return error;
422  
423    attach_conf(client_p, server_conf);
424  
650  /* Now find all leaf or hub config items for this server */
651  DLINK_FOREACH(ptr, hub_items.head)
652  {
653    conf = ptr->data;
654
655    if (!match(name, conf->name))
656      continue;
657    attach_conf(client_p, conf);
658  }
425  
426 <  DLINK_FOREACH(ptr, leaf_items.head)
661 <  {
662 <    conf = ptr->data;
663 <
664 <    if (!match(name, conf->name))
665 <      continue;
666 <    attach_conf(client_p, conf);
667 <  }
668 <
669 <  server_aconf = (struct AccessItem *)map_to_conf(server_conf);
670 <
671 <  if (!IsConfLazyLink(server_aconf))
672 <    ClearCap(client_p, CAP_LL);
673 < #ifdef HAVE_LIBZ /* otherwise, clear it unconditionally */
674 <  if (!IsConfCompressed(server_aconf))
675 < #endif
676 <    ClearCap(client_p, CAP_ZIP);
677 <  if (!IsConfCryptLink(server_aconf))
678 <    ClearCap(client_p, CAP_ENC);
679 <  if (!IsConfTopicBurst(server_aconf))
680 <  {
681 <    ClearCap(client_p, CAP_TB);
682 <    ClearCap(client_p, CAP_TBURST);
683 <  }
684 <
685 <  /* Don't unset CAP_HUB here even if the server isn't a hub,
686 <   * it only indicates if the server thinks it's lazylinks are
687 <   * leafs or not.. if you unset it, bad things will happen
688 <   */
689 <  if (aconf != NULL)
426 >  if (server_conf != NULL)
427    {
428      struct sockaddr_in *v4;
429   #ifdef IPV6
430      struct sockaddr_in6 *v6;
431   #endif
432 <    switch (aconf->aftype)
432 >    switch (server_conf->aftype)
433      {
434   #ifdef IPV6
435 <      case AF_INET6:
436 <        v6 = (struct sockaddr_in6 *)&aconf->ipnum;
435 >      case AF_INET6:
436 >        v6 = (struct sockaddr_in6 *)&server_conf->addr;
437  
438          if (IN6_IS_ADDR_UNSPECIFIED(&v6->sin6_addr))
439 <          memcpy(&aconf->ipnum, &client_p->localClient->ip, sizeof(struct irc_ssaddr));
439 >          memcpy(&server_conf->addr, &client_p->localClient->ip, sizeof(struct irc_ssaddr));
440          break;
441   #endif
442        case AF_INET:
443 <        v4 = (struct sockaddr_in *)&aconf->ipnum;
443 >        v4 = (struct sockaddr_in *)&server_conf->addr;
444  
445          if (v4->sin_addr.s_addr == INADDR_NONE)
446 <          memcpy(&aconf->ipnum, &client_p->localClient->ip, sizeof(struct irc_ssaddr));
446 >          memcpy(&server_conf->addr, &client_p->localClient->ip, sizeof(struct irc_ssaddr));
447          break;
448      }
449    }
450  
451 <  return(0);
451 >  return 0;
452   }
453  
454   /* add_capability()
# Line 726 | Line 463 | check_server(const char *name, struct Cl
463   void
464   add_capability(const char *capab_name, int cap_flag, int add_to_default)
465   {
466 <  struct Capability *cap;
466 >  struct Capability *cap = MyMalloc(sizeof(*cap));
467  
468 <  cap = (struct Capability *)MyMalloc(sizeof(*cap));
732 <  DupString(cap->name, capab_name);
468 >  cap->name = xstrdup(capab_name);
469    cap->cap = cap_flag;
470    dlinkAdd(cap, &cap->node, &cap_list);
471 +
472    if (add_to_default)
473      default_server_capabs |= cap_flag;
474   }
# Line 757 | Line 494 | delete_capability(const char *capab_name
494      {
495        if (irccmp(cap->name, capab_name) == 0)
496        {
497 <        default_server_capabs &= ~(cap->cap);
498 <        dlinkDelete(ptr, &cap_list);
499 <        MyFree(cap->name);
500 <        cap->name = NULL;
764 <        MyFree(cap);
497 >        default_server_capabs &= ~(cap->cap);
498 >        dlinkDelete(ptr, &cap_list);
499 >        MyFree(cap->name);
500 >        MyFree(cap);
501        }
502      }
503    }
504  
505 <  return(0);
505 >  return 0;
506   }
507  
508   /*
# Line 776 | Line 512 | delete_capability(const char *capab_name
512   * output       - 0 if not found CAPAB otherwise
513   * side effects - none
514   */
515 < int
515 > unsigned int
516   find_capability(const char *capab)
517   {
518 <  dlink_node *ptr;
783 <  struct Capability *cap;
518 >  const dlink_node *ptr = NULL;
519  
520    DLINK_FOREACH(ptr, cap_list.head)
521    {
522 <    cap = ptr->data;
522 >    const struct Capability *cap = ptr->data;
523  
524 <    if (cap->cap != 0)
525 <    {
791 <      if (irccmp(cap->name, capab) == 0)
792 <        return(cap->cap);
793 <    }
524 >    if (cap->cap && !irccmp(cap->name, capab))
525 >      return cap->cap;
526    }
527 <  return(0);
527 >
528 >  return 0;
529   }
530  
531   /* send_capabilities()
532   *
533   * inputs       - Client pointer to send to
801 *              - Pointer to AccessItem (for crypt)
534   *              - int flag of capabilities that this server can send
803 *              - int flag of encryption capabilities
535   * output       - NONE
536   * side effects - send the CAPAB line to a server  -orabidoo
537   *
538   */
539   void
540 < send_capabilities(struct Client *client_p, struct AccessItem *aconf,
810 <                  int cap_can_send, int enc_can_send)
540 > send_capabilities(struct Client *client_p, int cap_can_send)
541   {
542    struct Capability *cap=NULL;
543    char msgbuf[IRCD_BUFSIZE];
544    char *t;
545    int tl;
546    dlink_node *ptr;
817 #ifdef HAVE_LIBCRYPTO
818  const struct EncCapability *epref = NULL;
819  char *capend;
820  int sent_cipher = 0;
821 #endif
547  
548    t = msgbuf;
549  
# Line 828 | Line 553 | send_capabilities(struct Client *client_
553  
554      if (cap->cap & (cap_can_send|default_server_capabs))
555      {
556 <      tl = ircsprintf(t, "%s ", cap->name);
556 >      tl = sprintf(t, "%s ", cap->name);
557        t += tl;
558      }
559    }
835 #ifdef HAVE_LIBCRYPTO
836  if (enc_can_send)
837  {
838    capend = t;
839    strcpy(t, "ENC:");
840    t += 4;
841
842    /* use connect{} specific info if available */
843    if (aconf->cipher_preference)
844      epref = aconf->cipher_preference;
845    else if (ConfigFileEntry.default_cipher_preference)
846      epref = ConfigFileEntry.default_cipher_preference;
847
848    if (epref && (epref->cap & enc_can_send))
849    {
850      /* Leave the space -- it is removed later. */
851      tl = ircsprintf(t, "%s ", epref->name);
852      t += tl;
853      sent_cipher = 1;
854    }
560  
856    if (!sent_cipher)
857      t = capend; /* truncate string before ENC:, below */
858  }
859 #endif
561    *(t - 1) = '\0';
562    sendto_one(client_p, "CAPAB :%s", msgbuf);
563   }
564  
565   /* sendnick_TS()
566 < *
566 > *
567   * inputs       - client (server) to send nick towards
568 < *              - client to send nick for
568 > *          - client to send nick for
569   * output       - NONE
570   * side effects - NICK message is sent towards given client_p
571   */
572   void
573   sendnick_TS(struct Client *client_p, struct Client *target_p)
574   {
575 <  static char ubuf[12];
575 >  char ubuf[IRCD_BUFSIZE];
576  
577    if (!IsClient(target_p))
578      return;
579  
580 <  send_umode(NULL, target_p, 0, IsOperHiddenAdmin(target_p) ?
880 <    SEND_UMODES & ~UMODE_ADMIN : SEND_UMODES, ubuf);
580 >  send_umode(NULL, target_p, 0, SEND_UMODES, ubuf);
581  
582    if (ubuf[0] == '\0')
583    {
# Line 885 | Line 585 | sendnick_TS(struct Client *client_p, str
585      ubuf[1] = '\0';
586    }
587  
588 <  /* XXX Both of these need to have a :me.name or :mySID!?!?! */
589 <  if (HasID(target_p) && IsCapable(client_p, CAP_TS6))
590 <    sendto_one(client_p, ":%s UID %s %d %lu %s %s %s %s %s :%s",
591 <               target_p->servptr->id,
592 <               target_p->name, target_p->hopcount + 1,
593 <               (unsigned long) target_p->tsinfo,
594 <               ubuf, target_p->username, target_p->host,
595 <           ((MyClient(target_p)&&!IsIPSpoof(target_p))?target_p->sockhost:"0"),
596 <           target_p->id, target_p->info);
588 >  if (IsCapable(client_p, CAP_SVS))
589 >  {
590 >    if (HasID(target_p) && IsCapable(client_p, CAP_TS6))
591 >      sendto_one(client_p, ":%s UID %s %d %lu %s %s %s %s %s %s :%s",
592 >                 target_p->servptr->id,
593 >                 target_p->name, target_p->hopcount + 1,
594 >                 (unsigned long) target_p->tsinfo,
595 >                 ubuf, target_p->username, target_p->host,
596 >                 (MyClient(target_p) && IsIPSpoof(target_p)) ?
597 >                 "0" : target_p->sockhost, target_p->id,
598 >                 target_p->svid, target_p->info);
599 >    else
600 >      sendto_one(client_p, "NICK %s %d %lu %s %s %s %s %s :%s",
601 >                 target_p->name, target_p->hopcount + 1,
602 >                 (unsigned long) target_p->tsinfo,
603 >                 ubuf, target_p->username, target_p->host,
604 >                 target_p->servptr->name, target_p->svid,
605 >                 target_p->info);
606 >  }
607    else
898    sendto_one(client_p, "NICK %s %d %lu %s %s %s %s :%s",
899               target_p->name, target_p->hopcount + 1,
900               (unsigned long) target_p->tsinfo,
901               ubuf, target_p->username, target_p->host,
902               target_p->servptr->name, target_p->info);
903  if (IsConfAwayBurst((struct AccessItem *)map_to_conf(client_p->serv->sconf)))
904    if (!EmptyString(target_p->away))
905      sendto_one(client_p, ":%s AWAY :%s", target_p->name,
906                 target_p->away);
907
908 }
909
910 /* client_burst_if_needed()
911 *
912 * inputs       - pointer to server
913 *              - pointer to client to add
914 * output       - NONE
915 * side effects - If this client is not known by this lazyleaf, send it
916 */
917 void
918 client_burst_if_needed(struct Client *client_p, struct Client *target_p)
919 {
920  if (!ServerInfo.hub)
921    return;
922  if (!MyConnect(client_p))
923    return;
924  if (!IsCapable(client_p,CAP_LL))
925    return;
926
927  if ((target_p->lazyLinkClientExists & client_p->localClient->serverMask) == 0)
608    {
609 <    sendnick_TS(client_p, target_p);
610 <    add_lazylinkclient(client_p,target_p);
609 >    if (HasID(target_p) && IsCapable(client_p, CAP_TS6))
610 >      sendto_one(client_p, ":%s UID %s %d %lu %s %s %s %s %s :%s",
611 >                 target_p->servptr->id,
612 >                 target_p->name, target_p->hopcount + 1,
613 >                 (unsigned long) target_p->tsinfo,
614 >                 ubuf, target_p->username, target_p->host,
615 >                 (MyClient(target_p) && IsIPSpoof(target_p)) ?
616 >                 "0" : target_p->sockhost, target_p->id, target_p->info);
617 >    else
618 >      sendto_one(client_p, "NICK %s %d %lu %s %s %s %s :%s",
619 >                 target_p->name, target_p->hopcount + 1,
620 >                 (unsigned long) target_p->tsinfo,
621 >                 ubuf, target_p->username, target_p->host,
622 >                 target_p->servptr->name, target_p->info);
623    }
624 +
625 +  if (!EmptyString(target_p->certfp))
626 +    sendto_one(client_p, ":%s CERTFP %s",
627 +               ID_or_name(target_p, client_p), target_p->certfp);
628 +
629 +  if (target_p->away[0])
630 +    sendto_one(client_p, ":%s AWAY :%s", ID_or_name(target_p, client_p),
631 +               target_p->away);
632 +
633   }
634  
635   /*
# Line 939 | Line 640 | client_burst_if_needed(struct Client *cl
640   * side effects - build up string representing capabilities of server listed
641   */
642   const char *
643 < show_capabilities(struct Client *target_p)
643 > show_capabilities(const struct Client *target_p)
644   {
645 <  static char msgbuf[IRCD_BUFSIZE];
646 <  char *t = msgbuf;
946 <  dlink_node *ptr;
645 >  static char msgbuf[IRCD_BUFSIZE] = "";
646 >  const dlink_node *ptr = NULL;
647  
648 <  t += ircsprintf(msgbuf, "TS ");
648 >  strlcpy(msgbuf, "TS", sizeof(msgbuf));
649  
650    DLINK_FOREACH(ptr, cap_list.head)
651    {
652      const struct Capability *cap = ptr->data;
653  
654 <    if (IsCapable(target_p, cap->cap))
655 <      t += ircsprintf(t, "%s ", cap->name);
654 >    if (!IsCapable(target_p, cap->cap))
655 >      continue;
656 >
657 >    strlcat(msgbuf,       " ", sizeof(msgbuf));
658 >    strlcat(msgbuf, cap->name, sizeof(msgbuf));
659    }
957 #ifdef HAVE_LIBCRYPTO
958  if (IsCapable(target_p, CAP_ENC) &&
959      target_p->localClient->in_cipher &&
960      target_p->localClient->out_cipher)
961    t += ircsprintf(t, "ENC:%s ",
962                    target_p->localClient->in_cipher->name);
963 #endif
964  *(t - 1) = '\0';
660  
661 <  return(msgbuf);
661 >  return msgbuf;
662   }
663  
664   /* make_server()
# Line 977 | Line 672 | struct Server *
672   make_server(struct Client *client_p)
673   {
674    if (client_p->serv == NULL)
980  {
675      client_p->serv = MyMalloc(sizeof(struct Server));
982    client_p->serv->dep_servers = 1;
983  }
676  
677    return client_p->serv;
678   }
# Line 995 | Line 687 | void
687   server_estab(struct Client *client_p)
688   {
689    struct Client *target_p;
690 <  struct ConfItem *conf;
999 <  struct AccessItem *aconf=NULL;
690 >  struct MaskItem *conf = NULL;
691    char *host;
692    const char *inpath;
693    static char inpath_ip[HOSTLEN * 2 + USERLEN + 6];
1003  dlink_node *m;
694    dlink_node *ptr;
695 + #ifdef HAVE_LIBCRYPTO
696 +  const COMP_METHOD *compression = NULL, *expansion = NULL;
697 + #endif
698  
699    assert(client_p != NULL);
700  
# Line 1010 | Line 703 | server_estab(struct Client *client_p)
703    inpath = get_client_name(client_p, MASK_IP); /* "refresh" inpath with host */
704    host   = client_p->name;
705  
706 <  if ((conf = find_conf_name(&client_p->localClient->confs, host, SERVER_TYPE))
706 >  if ((conf = find_conf_name(&client_p->localClient->confs, host, CONF_SERVER))
707        == NULL)
708    {
709      /* This shouldn't happen, better tell the ops... -A1kmm */
710 <    sendto_realops_flags(UMODE_ALL, L_ALL, "Warning: Lost connect{} block "
710 >    sendto_realops_flags(UMODE_ALL, L_ALL, SEND_NOTICE,
711 >                         "Warning: Lost connect{} block "
712                           "for server %s(this shouldn't happen)!", host);
713      exit_client(client_p, &me, "Lost connect{} block!");
714      return;
# Line 1029 | Line 723 | server_estab(struct Client *client_p)
723    /* If there is something in the serv_list, it might be this
724     * connecting server..
725     */
726 <  if (!ServerInfo.hub && serv_list.head)  
726 >  if (!ServerInfo.hub && serv_list.head)
727    {
728      if (client_p != serv_list.head->data || serv_list.head->next)
729      {
730 <      ServerStats->is_ref++;
730 >      ++ServerStats.is_ref;
731        sendto_one(client_p, "ERROR :I'm a leaf not a hub");
732        exit_client(client_p, &me, "I'm a leaf");
733        return;
734      }
735    }
736  
737 <  aconf = (struct AccessItem *)map_to_conf(conf);
1044 <
1045 <  if (IsUnknown(client_p) && !IsConfCryptLink(aconf))
737 >  if (IsUnknown(client_p))
738    {
739 <    /* jdc -- 1.  Use EmptyString(), not [0] index reference.
1048 <     *        2.  Check aconf->spasswd, not aconf->passwd.
1049 <     */
1050 <    if (!EmptyString(aconf->spasswd))
1051 <    {
1052 <      /* only send ts6 format PASS if we have ts6 enabled */
1053 <    if (me.id[0] != '\0')               /* Send TS 6 form only if id */
1054 <        sendto_one(client_p, "PASS %s TS %d %s",
1055 <                   aconf->spasswd, TS_CURRENT, me.id);
1056 <      else
1057 <        sendto_one(client_p, "PASS %s TS 5",
1058 <                   aconf->spasswd);
1059 <    }
739 >    sendto_one(client_p, "PASS %s TS %d %s", conf->spasswd, TS_CURRENT, me.id);
740  
741 <    /* Pass my info to the new server
1062 <     *
1063 <     * If trying to negotiate LazyLinks, pass on CAP_LL
1064 <     * If this is a HUB, pass on CAP_HUB
1065 <     * Pass on ZIP if supported
1066 <     * Pass on TB if supported.
1067 <     * - Dianora
1068 <     */
741 >    send_capabilities(client_p, 0);
742  
1070    send_capabilities(client_p, aconf, (ServerInfo.hub ? CAP_HUB : 0)
1071      | (IsConfLazyLink(aconf) ? CAP_LL : 0)
1072      | (IsConfCompressed(aconf) ? CAP_ZIP : 0)
1073      | (IsConfTopicBurst(aconf) ? CAP_TBURST|CAP_TB : 0), 0);
1074
1075    /* SERVER is the last command sent before switching to ziplinks.
1076     * We set TCPNODELAY on the socket to make sure it gets sent out
1077     * on the wire immediately.  Otherwise, it could be sitting in
1078     * a kernel buffer when we start sending zipped data, and the
1079     * parser on the receiving side can't hand both unzipped and zipped
1080     * data in one packet. --Rodder
1081     *
1082     * currently we only need to call send_queued_write,
1083     * Nagle is already disabled at this point --adx
1084     */
743      sendto_one(client_p, "SERVER %s 1 :%s%s",
744 <               my_name_for_link(conf),
1087 <               ConfigServerHide.hidden ? "(H) " : "",
1088 <               (me.info[0]) ? (me.info) : "IRCers United");
1089 <    send_queued_write(client_p);
744 >               me.name, ConfigServerHide.hidden ? "(H) " : "", me.info);
745    }
746  
747 <  /* Hand the server off to servlink now */
1093 <  if (IsCapable(client_p, CAP_ENC) || IsCapable(client_p, CAP_ZIP))
1094 <  {
1095 <    if (fork_server(client_p) < 0)
1096 <    {
1097 <      sendto_realops_flags(UMODE_ALL, L_ADMIN,
1098 <                           "Warning: fork failed for server %s -- check servlink_path (%s)",
1099 <                           get_client_name(client_p, HIDE_IP), ConfigFileEntry.servlink_path);
1100 <      sendto_realops_flags(UMODE_ALL, L_OPER, "Warning: fork failed for server "
1101 <                           "%s -- check servlink_path (%s)",
1102 <                           get_client_name(client_p, MASK_IP),
1103 <                           ConfigFileEntry.servlink_path);
1104 <      exit_client(client_p, &me, "fork failed");
1105 <      return;
1106 <    }
1107 <
1108 <    start_io(client_p);
1109 <    SetServlink(client_p);
1110 <  }
1111 <
1112 <  /* only send ts6 format SVINFO if we have ts6 enabled */
1113 <  sendto_one(client_p, "SVINFO %d %d 0 :%lu",
1114 <             (me.id[0] ? TS_CURRENT : 5), TS_MIN,
747 >  sendto_one(client_p, "SVINFO %d %d 0 :%lu", TS_CURRENT, TS_MIN,
748               (unsigned long)CurrentTime);
749  
750    /* assumption here is if they passed the correct TS version, they also passed an SID */
# Line 1119 | Line 752 | server_estab(struct Client *client_p)
752      hash_add_id(client_p);
753  
754    /* XXX Does this ever happen? I don't think so -db */
755 <  detach_conf(client_p, OPER_TYPE);
755 >  detach_conf(client_p, CONF_OPER);
756  
757    /* *WARNING*
758    **    In the following code in place of plain server's
# Line 1143 | Line 776 | server_estab(struct Client *client_p)
776    set_chcap_usage_counts(client_p);
777  
778    /* Some day, all these lists will be consolidated *sigh* */
779 <  dlinkAdd(client_p, &client_p->lnode, &me.serv->servers);
779 >  dlinkAdd(client_p, &client_p->lnode, &me.serv->server_list);
780  
781 <  m = dlinkFind(&unknown_list, client_p);
1149 <  assert(NULL != m);
781 >  assert(dlinkFind(&unknown_list, client_p));
782  
783 <  dlinkDelete(m, &unknown_list);
784 <  dlinkAdd(client_p, m, &serv_list);
783 >  dlink_move_node(&client_p->localClient->lclient_node,
784 >                  &unknown_list, &serv_list);
785  
786    Count.myserver++;
787  
# Line 1160 | Line 792 | server_estab(struct Client *client_p)
792    make_server(client_p);
793  
794    /* fixing eob timings.. -gnp */
795 <  client_p->firsttime = CurrentTime;
1164 <
1165 <  /* Show the real host/IP to admins */
1166 <  sendto_realops_flags(UMODE_ALL, L_ADMIN,
1167 <                       "Link with %s established: (%s) link",
1168 <                       inpath_ip,show_capabilities(client_p));
1169 <  /* Now show the masked hostname/IP to opers */
1170 <  sendto_realops_flags(UMODE_ALL, L_OPER,
1171 <                       "Link with %s established: (%s) link",
1172 <                       inpath,show_capabilities(client_p));
1173 <  ilog(L_NOTICE, "Link with %s established: (%s) link",
1174 <       inpath_ip, show_capabilities(client_p));
795 >  client_p->localClient->firsttime = CurrentTime;
796  
797 <  client_p->serv->sconf = conf;
797 >  if (find_matching_name_conf(CONF_SERVICE, client_p->name, NULL, NULL, 0))
798 >    AddFlag(client_p, FLAGS_SERVICE);
799  
800 <  if (HasServlink(client_p))
800 >  /* Show the real host/IP to admins */
801 > #ifdef HAVE_LIBCRYPTO
802 >  if (client_p->localClient->fd.ssl)
803    {
804 <    /* we won't overflow FD_DESC_SZ here, as it can hold
805 <     * client_p->name + 64
806 <     */
807 <    fd_note(&client_p->localClient->fd, "slink data: %s", client_p->name);
808 <    fd_note(&client_p->localClient->ctrlfd, "slink ctrl: %s", client_p->name);
804 >    compression = SSL_get_current_compression(client_p->localClient->fd.ssl);
805 >    expansion   = SSL_get_current_expansion(client_p->localClient->fd.ssl);
806 >
807 >    sendto_realops_flags(UMODE_ALL, L_ADMIN, SEND_NOTICE,
808 >                         "Link with %s established: [SSL: %s, Compression/Expansion method: %s/%s] (Capabilities: %s)",
809 >                         inpath_ip, ssl_get_cipher(client_p->localClient->fd.ssl),
810 >                         compression ? SSL_COMP_get_name(compression) : "NONE",
811 >                         expansion ? SSL_COMP_get_name(expansion) : "NONE",
812 >                         show_capabilities(client_p));
813 >    /* Now show the masked hostname/IP to opers */
814 >    sendto_realops_flags(UMODE_ALL, L_OPER, SEND_NOTICE,
815 >                         "Link with %s established: [SSL: %s, Compression/Expansion method: %s/%s] (Capabilities: %s)",
816 >                         inpath, ssl_get_cipher(client_p->localClient->fd.ssl),
817 >                         compression ? SSL_COMP_get_name(compression) : "NONE",
818 >                         expansion ? SSL_COMP_get_name(expansion) : "NONE",
819 >                         show_capabilities(client_p));
820 >    ilog(LOG_TYPE_IRCD, "Link with %s established: [SSL: %s, Compression/Expansion method: %s/%s] (Capabilities: %s)",
821 >         inpath_ip, ssl_get_cipher(client_p->localClient->fd.ssl),
822 >         compression ? SSL_COMP_get_name(compression) : "NONE",
823 >         expansion ? SSL_COMP_get_name(expansion) : "NONE",
824 >         show_capabilities(client_p));
825    }
826    else
827 <    fd_note(&client_p->localClient->fd, "Server: %s", client_p->name);
827 > #endif
828 >  {
829 >    sendto_realops_flags(UMODE_ALL, L_ADMIN, SEND_NOTICE,
830 >                         "Link with %s established: (Capabilities: %s)",
831 >                         inpath_ip, show_capabilities(client_p));
832 >    /* Now show the masked hostname/IP to opers */
833 >    sendto_realops_flags(UMODE_ALL, L_OPER, SEND_NOTICE,
834 >                         "Link with %s established: (Capabilities: %s)",
835 >                         inpath, show_capabilities(client_p));
836 >    ilog(LOG_TYPE_IRCD, "Link with %s established: (Capabilities: %s)",
837 >         inpath_ip, show_capabilities(client_p));
838 >  }
839 >
840 >  fd_note(&client_p->localClient->fd, "Server: %s", client_p->name);
841  
842    /* Old sendto_serv_but_one() call removed because we now
843    ** need to send different names to different servers
# Line 1197 | Line 850 | server_estab(struct Client *client_p)
850      if (target_p == client_p)
851        continue;
852  
1200    if ((conf = target_p->serv->sconf) &&
1201         match(my_name_for_link(conf), client_p->name))
1202      continue;
1203
853      if (IsCapable(target_p, CAP_TS6) && HasID(client_p))
854        sendto_one(target_p, ":%s SID %s 2 %s :%s%s",
855                   me.id, client_p->name, client_p->id,
856                   IsHidden(client_p) ? "(H) " : "",
857                   client_p->info);
858      else
859 <      sendto_one(target_p,":%s SERVER %s 2 :%s%s",
859 >      sendto_one(target_p,":%s SERVER %s 2 :%s%s",
860                   me.name, client_p->name,
861                   IsHidden(client_p) ? "(H) " : "",
862                   client_p->info);
863    }
864  
865 <  /* Pass on my client information to the new server
866 <  **
867 <  ** First, pass only servers (idea is that if the link gets
868 <  ** cancelled beacause the server was already there,
869 <  ** there are no NICK's to be cancelled...). Of course,
870 <  ** if cancellation occurs, all this info is sent anyway,
871 <  ** and I guess the link dies when a read is attempted...? --msa
872 <  **
873 <  ** Note: Link cancellation to occur at this point means
874 <  ** that at least two servers from my fragment are building
875 <  ** up connection this other fragment at the same time, it's
876 <  ** a race condition, not the normal way of operation...
877 <  **
878 <  ** ALSO NOTE: using the get_client_name for server names--
879 <  **    see previous *WARNING*!!! (Also, original inpath
880 <  **    is destroyed...)
881 <  */
882 <
1234 <  conf = client_p->serv->sconf;
865 >  /*
866 >   * Pass on my client information to the new server
867 >   *
868 >   * First, pass only servers (idea is that if the link gets
869 >   * cancelled beacause the server was already there,
870 >   * there are no NICK's to be cancelled...). Of course,
871 >   * if cancellation occurs, all this info is sent anyway,
872 >   * and I guess the link dies when a read is attempted...? --msa
873 >   *
874 >   * Note: Link cancellation to occur at this point means
875 >   * that at least two servers from my fragment are building
876 >   * up connection this other fragment at the same time, it's
877 >   * a race condition, not the normal way of operation...
878 >   *
879 >   * ALSO NOTE: using the get_client_name for server names--
880 >   *    see previous *WARNING*!!! (Also, original inpath
881 >   *    is destroyed...)
882 >   */
883  
884    DLINK_FOREACH_PREV(ptr, global_serv_list.tail)
885    {
886      target_p = ptr->data;
887  
888      /* target_p->from == target_p for target_p == client_p */
889 <    if (target_p->from == client_p)
1242 <      continue;
1243 <
1244 <    if (match(my_name_for_link(conf), target_p->name))
889 >    if (IsMe(target_p) || target_p->from == client_p)
890        continue;
891  
892      if (IsCapable(client_p, CAP_TS6))
# Line 1257 | Line 902 | server_estab(struct Client *client_p)
902                     IsHidden(target_p) ? "(H) " : "", target_p->info);
903      }
904      else
905 <      sendto_one(client_p, ":%s SERVER %s %d :%s%s",
905 >      sendto_one(client_p, ":%s SERVER %s %d :%s%s",
906                   target_p->servptr->name, target_p->name, target_p->hopcount+1,
907                   IsHidden(target_p) ? "(H) " : "", target_p->info);
1263  }
1264
1265  if ((ServerInfo.hub == 0) && MyConnect(client_p))
1266    uplink = client_p;
1267
1268  server_burst(client_p);
1269 }
1270
1271 static void
1272 start_io(struct Client *server)
1273 {
1274  struct LocalUser *lserver = server->localClient;
1275  int alloclen = 1;
1276  char *buf;
1277  dlink_node *ptr;
1278  struct dbuf_block *block;
1279
1280  /* calculate how many bytes to allocate */
1281  if (IsCapable(server, CAP_ZIP))
1282    alloclen += 6;
1283 #ifdef HAVE_LIBCRYPTO
1284  if (IsCapable(server, CAP_ENC))
1285    alloclen += 16 + lserver->in_cipher->keylen + lserver->out_cipher->keylen;
1286 #endif
1287  alloclen += dbuf_length(&lserver->buf_recvq);
1288  alloclen += dlink_list_length(&lserver->buf_recvq.blocks) * 3;
1289  alloclen += dbuf_length(&lserver->buf_sendq);
1290  alloclen += dlink_list_length(&lserver->buf_sendq.blocks) * 3;
1291
1292  /* initialize servlink control sendq */
1293  lserver->slinkq = buf = MyMalloc(alloclen);
1294  lserver->slinkq_ofs = 0;
1295  lserver->slinkq_len = alloclen;
1296
1297  if (IsCapable(server, CAP_ZIP))
1298  {
1299    /* ziplink */
1300    *buf++ = SLINKCMD_SET_ZIP_OUT_LEVEL;
1301    *buf++ = 0; /* |          */
1302    *buf++ = 1; /* \ len is 1 */
1303    *buf++ = ConfigFileEntry.compression_level;
1304    *buf++ = SLINKCMD_START_ZIP_IN;
1305    *buf++ = SLINKCMD_START_ZIP_OUT;
1306  }
1307 #ifdef HAVE_LIBCRYPTO
1308  if (IsCapable(server, CAP_ENC))
1309  {
1310    /* Decryption settings */
1311    *buf++ = SLINKCMD_SET_CRYPT_IN_CIPHER;
1312    *buf++ = 0; /* /                     (upper 8-bits of len) */
1313    *buf++ = 1; /* \ cipher id is 1 byte (lower 8-bits of len) */
1314    *buf++ = lserver->in_cipher->cipherid;
1315    *buf++ = SLINKCMD_SET_CRYPT_IN_KEY;
1316    *buf++ = 0; /* keylen < 256 */
1317    *buf++ = lserver->in_cipher->keylen;
1318    memcpy(buf, lserver->in_key, lserver->in_cipher->keylen);
1319    buf += lserver->in_cipher->keylen;
1320    /* Encryption settings */
1321    *buf++ = SLINKCMD_SET_CRYPT_OUT_CIPHER;
1322    *buf++ = 0; /* /                     (upper 8-bits of len) */
1323    *buf++ = 1; /* \ cipher id is 1 byte (lower 8-bits of len) */
1324    *buf++ = lserver->out_cipher->cipherid;
1325    *buf++ = SLINKCMD_SET_CRYPT_OUT_KEY;
1326    *buf++ = 0; /* keylen < 256 */
1327    *buf++ = lserver->out_cipher->keylen;
1328    memcpy(buf, lserver->out_key, lserver->out_cipher->keylen);
1329    buf += lserver->out_cipher->keylen;
1330    *buf++ = SLINKCMD_START_CRYPT_IN;
1331    *buf++ = SLINKCMD_START_CRYPT_OUT;
1332  }
1333 #endif
1334
1335  /* pass the whole recvq to servlink */
1336  DLINK_FOREACH (ptr, lserver->buf_recvq.blocks.head)
1337  {
1338    block = ptr->data;
1339    *buf++ = SLINKCMD_INJECT_RECVQ;
1340    *buf++ = (block->size >> 8);
1341    *buf++ = (block->size & 0xff);
1342    memcpy(buf, &block->data[0], block->size);
1343    buf += block->size;
1344  }
1345
1346  dbuf_clear(&lserver->buf_recvq);
1347
1348  /* pass the whole sendq to servlink */
1349  DLINK_FOREACH (ptr, lserver->buf_sendq.blocks.head)
1350  {
1351    block = ptr->data;
1352    *buf++ = SLINKCMD_INJECT_SENDQ;
1353    *buf++ = (block->size >> 8);
1354    *buf++ = (block->size & 0xff);
1355    memcpy(buf, &block->data[0], block->size);
1356    buf += block->size;
1357  }
1358
1359  dbuf_clear(&lserver->buf_sendq);
1360
1361  /* start io */
1362  *buf++ = SLINKCMD_INIT;
1363
1364  /* schedule a write */
1365  send_queued_slink_write(server);
1366 }
1367
1368 /* fork_server()
1369 *
1370 * inputs       - struct Client *server
1371 * output       - success: 0 / failure: -1
1372 * side effect  - fork, and exec SERVLINK to handle this connection
1373 */
1374 static int
1375 fork_server(struct Client *server)
1376 {
1377 #ifndef HAVE_SOCKETPAIR
1378  return -1;
1379 #else
1380  int i;
1381  int slink_fds[2][2];
1382  /* 0? - ctrl  | 1? - data  
1383   * ?0 - child | ?1 - parent */
1384
1385  if (socketpair(AF_UNIX, SOCK_STREAM, 0, slink_fds[0]) < 0)
1386    return -1;
1387  if (socketpair(AF_UNIX, SOCK_STREAM, 0, slink_fds[1]) < 0)
1388    goto free_ctrl_fds;
1389
1390  if ((i = fork()) < 0)
1391  {
1392    close(slink_fds[1][0]);  close(slink_fds[1][1]);
1393    free_ctrl_fds:
1394    close(slink_fds[0][0]);  close(slink_fds[0][1]);
1395    return -1;
1396  }
1397
1398  if (i == 0)
1399  {
1400    char fd_str[3][6];   /* store 3x sizeof("65535") */
1401    char *kid_argv[7];
1402
1403 #ifdef O_ASYNC
1404    fcntl(server->localClient->fd.fd, F_SETFL,
1405          fcntl(server->localClient->fd.fd, F_GETFL, 0) & ~O_ASYNC);
1406 #endif
1407    close_fds(&server->localClient->fd);
1408    close(slink_fds[0][1]);
1409    close(slink_fds[1][1]);
1410
1411    sprintf(fd_str[0], "%d", slink_fds[0][0]);
1412    sprintf(fd_str[1], "%d", slink_fds[1][0]);
1413    sprintf(fd_str[2], "%d", server->localClient->fd.fd);
1414
1415    kid_argv[0] = "-slink";
1416    kid_argv[1] = kid_argv[2] = fd_str[0];  /* ctrl */
1417    kid_argv[3] = kid_argv[4] = fd_str[1];  /* data */
1418    kid_argv[5] = fd_str[2];    /* network */
1419    kid_argv[6] = NULL;
1420
1421    execv(ConfigFileEntry.servlink_path, kid_argv);
908  
909 <    _exit(1);
909 >    if (HasFlag(target_p, FLAGS_EOB))
910 >      sendto_one(client_p, ":%s EOB", ID_or_name(target_p, client_p));
911    }
912  
913 <  /* close the network fd and the child ends of the pipes */
1427 <  fd_close(&server->localClient->fd);
1428 <  close(slink_fds[0][0]);
1429 <  close(slink_fds[1][0]);
1430 <
1431 <  execute_callback(setup_socket_cb, slink_fds[0][1]);
1432 <  execute_callback(setup_socket_cb, slink_fds[1][1]);
1433 <
1434 <  fd_open(&server->localClient->ctrlfd, slink_fds[0][1], 1, "slink ctrl");
1435 <  fd_open(&server->localClient->fd, slink_fds[1][1], 1, "slink data");
1436 <
1437 <  read_ctrl_packet(&server->localClient->ctrlfd, server);
1438 <  read_packet(&server->localClient->fd, server);
1439 <
1440 <  return 0;
1441 < #endif
913 >  server_burst(client_p);
914   }
915  
916   /* server_burst()
# Line 1462 | Line 934 | server_burst(struct Client *client_p)
934    ** -orabidoo
935    */
936  
937 <  /* On a "lazy link" hubs send nothing.
1466 <   * Leafs always have to send nicks plus channels
1467 <   */
1468 <  if (IsCapable(client_p, CAP_LL))
1469 <  {
1470 <    if (!ServerInfo.hub)
1471 <    {
1472 <      /* burst all our info */
1473 <      burst_all(client_p);
1474 <
1475 <      /* Now, ask for channel info on all our current channels */
1476 <      cjoin_all(client_p);
1477 <    }
1478 <  }
1479 <  else
1480 <  {
1481 <    burst_all(client_p);
1482 <  }
937 >  burst_all(client_p);
938  
939    /* EOB stuff is now in burst_all */
940    /* Always send a PING after connect burst is done */
# Line 1488 | Line 943 | server_burst(struct Client *client_p)
943  
944   /* burst_all()
945   *
946 < * inputs       - pointer to server to send burst to
946 > * inputs       - pointer to server to send burst to
947   * output       - NONE
948   * side effects - complete burst of channels/nicks is sent to client_p
949   */
# Line 1506 | Line 961 | burst_all(struct Client *client_p)
961        burst_members(client_p, chptr);
962        send_channel_modes(client_p, chptr);
963  
964 <      if (IsCapable(client_p, CAP_TBURST) ||
965 <          IsCapable(client_p, CAP_TB))
1511 <        send_tb(client_p, chptr);
964 >      if (IsCapable(client_p, CAP_TBURST))
965 >        send_tb(client_p, chptr);
966      }
967    }
968  
# Line 1518 | Line 972 | burst_all(struct Client *client_p)
972    {
973      struct Client *target_p = ptr->data;
974  
975 <    if (!IsBursted(target_p) && target_p->from != client_p)
975 >    if (!HasFlag(target_p, FLAGS_BURSTED) && target_p->from != client_p)
976        sendnick_TS(client_p, target_p);
977 <    
978 <    ClearBursted(target_p);
977 >
978 >    DelFlag(target_p, FLAGS_BURSTED);
979    }
980  
1527  /* We send the time we started the burst, and let the remote host determine an EOB time,
1528  ** as otherwise we end up sending a EOB of 0   Sending here means it gets sent last -- fl
1529  */
1530  /* Its simpler to just send EOB and use the time its been connected.. --fl_ */
981    if (IsCapable(client_p, CAP_EOB))
982      sendto_one(client_p, ":%s EOB", ID_or_name(&me, client_p));
983   }
# Line 1539 | Line 989 | burst_all(struct Client *client_p)
989   *              - pointer to channel
990   * output       - NONE
991   * side effects - Called on a server burst when
992 < *                server is CAP_TB|CAP_TBURST capable
992 > *                server is CAP_TBURST capable
993   */
994   static void
995   send_tb(struct Client *client_p, struct Channel *chptr)
# Line 1558 | Line 1008 | send_tb(struct Client *client_p, struct
1008     * for further information   -Michael
1009     */
1010    if (chptr->topic_time != 0)
1011 <  {
1012 <    if (IsCapable(client_p, CAP_TBURST))
1013 <      sendto_one(client_p, ":%s TBURST %lu %s %lu %s :%s",
1014 <                 me.name, (unsigned long)chptr->channelts, chptr->chname,
1015 <                 (unsigned long)chptr->topic_time,
1016 <                 chptr->topic_info ? chptr->topic_info : "",
1567 <                 chptr->topic ? chptr->topic : "");
1568 <    else if (IsCapable(client_p, CAP_TB))
1569 <    {
1570 <      if (ConfigChannel.burst_topicwho)
1571 <      {
1572 <        sendto_one(client_p, ":%s TB %s %lu %s :%s",
1573 <                   me.name, chptr->chname,
1574 <                   (unsigned long)chptr->topic_time,
1575 <                   chptr->topic_info, chptr->topic ? chptr->topic : "");
1576 <      }
1577 <      else
1578 <      {
1579 <        sendto_one(client_p, ":%s TB %s %lu :%s",
1580 <                   me.name, chptr->chname,
1581 <                   (unsigned long)chptr->topic_time,
1582 <                   chptr->topic ? chptr->topic : "");
1583 <      }
1584 <    }
1585 <  }
1586 < }
1587 <
1588 < /* cjoin_all()
1589 < *
1590 < * inputs       - server to ask for channel info from
1591 < * output       - NONE
1592 < * side effects - CJOINS for all the leafs known channels is sent
1593 < */
1594 < static void
1595 < cjoin_all(struct Client *client_p)
1596 < {
1597 <  const dlink_node *gptr = NULL;
1598 <
1599 <  DLINK_FOREACH(gptr, global_channel_list.head)
1600 <  {
1601 <    const struct Channel *chptr = gptr->data;
1602 <    sendto_one(client_p, ":%s CBURST %s",
1603 <               me.name, chptr->chname);
1604 <  }
1605 < }
1606 <
1607 < /* burst_channel()
1608 < *
1609 < * inputs       - pointer to server to send sjoins to
1610 < *              - channel pointer
1611 < * output       - none
1612 < * side effects - All sjoins for channel(s) given by chptr are sent
1613 < *                for all channel members. ONLY called by hub on
1614 < *                behalf of a lazylink so client_p is always guarunteed
1615 < *                to be a LL leaf.
1616 < */
1617 < void
1618 < burst_channel(struct Client *client_p, struct Channel *chptr)
1619 < {
1620 <  burst_ll_members(client_p, chptr);
1621 <
1622 <  send_channel_modes(client_p, chptr);
1623 <  add_lazylinkchannel(client_p,chptr);
1624 <
1625 <  if (chptr->topic != NULL && chptr->topic_info != NULL)
1626 <  {
1627 <    sendto_one(client_p, ":%s TOPIC %s %s %lu :%s",
1628 <               me.name, chptr->chname, chptr->topic_info,
1629 <               (unsigned long)chptr->topic_time, chptr->topic);
1630 <  }
1631 < }
1632 <
1633 < /* add_lazlinkchannel()
1634 < *
1635 < * inputs       - pointer to directly connected leaf server
1636 < *                being introduced to this hub
1637 < *              - pointer to channel structure being introduced
1638 < * output       - NONE
1639 < * side effects - The channel pointed to by chptr is now known
1640 < *                to be on lazyleaf server given by local_server_p.
1641 < *                mark that in the bit map and add to the list
1642 < *                of channels to examine after this newly introduced
1643 < *                server is squit off.
1644 < */
1645 < static void
1646 < add_lazylinkchannel(struct Client *local_server_p, struct Channel *chptr)
1647 < {
1648 <  assert(MyConnect(local_server_p));
1649 <
1650 <  chptr->lazyLinkChannelExists |= local_server_p->localClient->serverMask;
1651 <  dlinkAdd(chptr, make_dlink_node(), &lazylink_channels);
1652 < }
1653 <
1654 < /* add_lazylinkclient()
1655 < *
1656 < * inputs       - pointer to directly connected leaf server
1657 < *                being introduced to this hub
1658 < *              - pointer to client being introduced
1659 < * output       - NONE
1660 < * side effects - The client pointed to by client_p is now known
1661 < *                to be on lazyleaf server given by local_server_p.
1662 < *                mark that in the bit map and add to the list
1663 < *                of clients to examine after this newly introduced
1664 < *                server is squit off.
1665 < */
1666 < void
1667 < add_lazylinkclient(struct Client *local_server_p, struct Client *client_p)
1668 < {
1669 <  assert(MyConnect(local_server_p));
1670 <  client_p->lazyLinkClientExists |= local_server_p->localClient->serverMask;
1671 < }
1672 <
1673 < /* remove_lazylink_flags()
1674 < *
1675 < * inputs       - pointer to server quitting
1676 < * output       - NONE
1677 < * side effects - All the channels on the lazylink channel list are examined
1678 < *                If they hold a bit corresponding to the servermask
1679 < *                attached to client_p, clear that bit. If this bitmask
1680 < *                goes to 0, then the channel is no longer known to
1681 < *                be on any lazylink server, and can be removed from the
1682 < *                link list.
1683 < *
1684 < *                Similar is done for lazylink clients
1685 < *
1686 < *                This function must be run by the HUB on any exiting
1687 < *                lazylink leaf server, while the pointer is still valid.
1688 < *                Hence must be run from client.c in exit_one_client()
1689 < *
1690 < *                The old code scanned all channels, this code only
1691 < *                scans channels/clients on the lazylink_channels
1692 < *                lazylink_clients lists.
1693 < */
1694 < void
1695 < remove_lazylink_flags(unsigned long mask)
1696 < {
1697 <  dlink_node *ptr;
1698 <  dlink_node *next_ptr;
1699 <  struct Channel *chptr;
1700 <  struct Client *target_p;
1701 <  unsigned long clear_mask;
1702 <
1703 <  if (!mask) /* On 0 mask, don't do anything */
1704 <   return;
1705 <
1706 <  clear_mask = ~mask;
1707 <  freeMask |= mask;
1708 <
1709 <  DLINK_FOREACH_SAFE(ptr, next_ptr, lazylink_channels.head)
1710 <  {
1711 <    chptr = ptr->data;
1712 <
1713 <    chptr->lazyLinkChannelExists &= clear_mask;
1714 <
1715 <    if (chptr->lazyLinkChannelExists == 0)
1716 <    {
1717 <      dlinkDelete(ptr, &lazylink_channels);
1718 <      free_dlink_node(ptr);
1719 <    }
1720 <  }
1721 <
1722 <  DLINK_FOREACH(ptr, global_client_list.head)
1723 <  {
1724 <    target_p = ptr->data;
1725 <    target_p->lazyLinkClientExists &= clear_mask;
1726 <  }
1011 >    sendto_one(client_p, ":%s TBURST %lu %s %lu %s :%s",
1012 >               ID_or_name(&me, client_p),
1013 >               (unsigned long)chptr->channelts, chptr->chname,
1014 >               (unsigned long)chptr->topic_time,
1015 >               chptr->topic_info,
1016 >               chptr->topic);
1017   }
1018  
1019   /* burst_members()
# Line 1745 | Line 1035 | burst_members(struct Client *client_p, s
1035      ms       = ptr->data;
1036      target_p = ms->client_p;
1037  
1038 <    if (!IsBursted(target_p))
1038 >    if (!HasFlag(target_p, FLAGS_BURSTED))
1039      {
1040 <      SetBursted(target_p);
1751 <
1752 <      if (target_p->from != client_p)
1753 <        sendnick_TS(client_p, target_p);
1754 <    }
1755 <  }
1756 < }
1757 <
1758 < /* burst_ll_members()
1759 < *
1760 < * inputs       - pointer to server to send members to
1761 < *              - dlink_list pointer to membership list to send
1762 < * output       - NONE
1763 < * side effects - This version also has to check the bitmap for lazylink
1764 < */
1765 < static void
1766 < burst_ll_members(struct Client *client_p, struct Channel *chptr)
1767 < {
1768 <  struct Client *target_p;
1769 <  struct Membership *ms;
1770 <  dlink_node *ptr;
1771 <
1772 <  DLINK_FOREACH(ptr, chptr->members.head)
1773 <  {
1774 <    ms       = ptr->data;
1775 <    target_p = ms->client_p;
1040 >      AddFlag(target_p, FLAGS_BURSTED);
1041  
1777    if ((target_p->lazyLinkClientExists & client_p->localClient->serverMask) == 0)
1778    {
1042        if (target_p->from != client_p)
1780      {
1781        add_lazylinkclient(client_p,target_p);
1043          sendnick_TS(client_p, target_p);
1783      }
1784    }
1785  }
1786 }
1787
1788 /* set_autoconn()
1789 *
1790 * inputs       - struct Client pointer to oper requesting change
1791 * output       - none
1792 * side effects - set autoconnect mode
1793 */
1794 void
1795 set_autoconn(struct Client *source_p, const char *name, int newval)
1796 {
1797  struct ConfItem *conf;
1798  struct AccessItem *aconf;
1799
1800  if (name != NULL)
1801  {
1802    conf = find_exact_name_conf(SERVER_TYPE, name, NULL, NULL);
1803    if (conf != NULL)
1804    {
1805      aconf = (struct AccessItem *)map_to_conf(conf);
1806      if (newval)
1807        SetConfAllowAutoConn(aconf);
1808      else
1809        ClearConfAllowAutoConn(aconf);
1810
1811      sendto_realops_flags(UMODE_ALL, L_ALL,
1812                           "%s has changed AUTOCONN for %s to %i",
1813                           source_p->name, name, newval);
1814      sendto_one(source_p,
1815                 ":%s NOTICE %s :AUTOCONN for %s is now set to %i",
1816                 me.name, source_p->name, name, newval);
1817    }
1818    else
1819    {
1820      sendto_one(source_p, ":%s NOTICE %s :Can't find %s",
1821                 me.name, source_p->name, name);
1044      }
1045    }
1824  else
1825  {
1826    sendto_one(source_p, ":%s NOTICE %s :Please specify a server name!",
1827               me.name, source_p->name);
1828  }
1829 }
1830
1831 void
1832 initServerMask(void)
1833 {
1834  freeMask = 0xFFFFFFFFUL;
1835 }
1836
1837 /* nextFreeMask()
1838 *
1839 * inputs       - NONE
1840 * output       - unsigned long next unused mask for use in LL
1841 * side effects -
1842 */
1843 unsigned long
1844 nextFreeMask(void)
1845 {
1846  int i;
1847  unsigned long mask = 1;
1848
1849  for (i = 0; i < 32; i++)
1850  {
1851    if (mask & freeMask)
1852    {
1853      freeMask &= ~mask;
1854      return(mask);
1855    }
1856
1857    mask <<= 1;
1858  }
1859
1860  return(0L); /* watch this special case ... */
1046   }
1047  
1048   /* New server connection code
# Line 1867 | Line 1052 | nextFreeMask(void)
1052  
1053   /* serv_connect() - initiate a server connection
1054   *
1055 < * inputs       - pointer to conf
1055 > * inputs       - pointer to conf
1056   *              - pointer to client doing the connect
1057   * output       -
1058   * side effects -
# Line 1882 | Line 1067 | nextFreeMask(void)
1067   * it suceeded or not, and 0 if it fails in here somewhere.
1068   */
1069   int
1070 < serv_connect(struct AccessItem *aconf, struct Client *by)
1070 > serv_connect(struct MaskItem *conf, struct Client *by)
1071   {
1887  struct ConfItem *conf;
1072    struct Client *client_p;
1073 <  char buf[HOSTIPLEN];
1073 >  char buf[HOSTIPLEN + 1];
1074  
1075    /* conversion structs */
1076    struct sockaddr_in *v4;
1077 <  /* Make sure aconf is useful */
1078 <  assert(aconf != NULL);
1895 <
1896 <  if(aconf == NULL)
1897 <    return (0);
1077 >  /* Make sure conf is useful */
1078 >  assert(conf != NULL);
1079  
1899  /* XXX should be passing struct ConfItem in the first place */
1900  conf = unmap_conf_item(aconf);
1080  
1081 <  /* log */
1082 <  irc_getnameinfo((struct sockaddr*)&aconf->ipnum, aconf->ipnum.ss_len,
1083 <                  buf, HOSTIPLEN, NULL, 0, NI_NUMERICHOST);
1905 <  ilog(L_NOTICE, "Connect to %s[%s] @%s", aconf->user, aconf->host,
1081 >  getnameinfo((struct sockaddr *)&conf->addr, conf->addr.ss_len,
1082 >              buf, sizeof(buf), NULL, 0, NI_NUMERICHOST);
1083 >  ilog(LOG_TYPE_IRCD, "Connect to %s[%s] @%s", conf->name, conf->host,
1084         buf);
1085  
1086    /* Still processing a DNS lookup? -> exit */
1087 <  if (aconf->dns_query != NULL)
1087 >  if (conf->dns_pending)
1088    {
1089 <    sendto_realops_flags(UMODE_ALL, L_OPER,
1090 <                         "Error connecting to %s: Error during DNS lookup", conf->name);
1089 >    sendto_realops_flags(UMODE_ALL, L_ALL, SEND_NOTICE,
1090 >                         "Error connecting to %s: DNS lookup for connect{} in progress.",
1091 >                         conf->name);
1092 >    return (0);
1093 >  }
1094 >
1095 >  if (conf->dns_failed)
1096 >  {
1097 >    sendto_realops_flags(UMODE_ALL, L_ALL, SEND_NOTICE,
1098 >                         "Error connecting to %s: DNS lookup for connect{} failed.",
1099 >                         conf->name);
1100      return (0);
1101    }
1102  
1103    /* Make sure this server isn't already connected
1104 <   * Note: aconf should ALWAYS be a valid C: line
1104 >   * Note: conf should ALWAYS be a valid C: line
1105     */
1106 <  if ((client_p = find_server(conf->name)) != NULL)
1107 <  {
1108 <    sendto_realops_flags(UMODE_ALL, L_ADMIN,
1109 <                         "Server %s already present from %s",
1110 <                         conf->name, get_client_name(client_p, SHOW_IP));
1111 <    sendto_realops_flags(UMODE_ALL, L_OPER,
1112 <                         "Server %s already present from %s",
1113 <                         conf->name, get_client_name(client_p, MASK_IP));
1106 >  if ((client_p = hash_find_server(conf->name)) != NULL)
1107 >  {
1108 >    sendto_realops_flags(UMODE_ALL, L_ADMIN, SEND_NOTICE,
1109 >                         "Server %s already present from %s",
1110 >                         conf->name, get_client_name(client_p, SHOW_IP));
1111 >    sendto_realops_flags(UMODE_ALL, L_OPER, SEND_NOTICE,
1112 >                         "Server %s already present from %s",
1113 >                         conf->name, get_client_name(client_p, MASK_IP));
1114      if (by && IsClient(by) && !MyClient(by))
1115        sendto_one(by, ":%s NOTICE %s :Server %s already present from %s",
1116 <                 me.name, by->name, conf->name,
1117 <                 get_client_name(client_p, MASK_IP));
1118 <    return (0);
1116 >                 me.name, by->name, conf->name,
1117 >                 get_client_name(client_p, MASK_IP));
1118 >    return 0;
1119    }
1120 <    
1120 >
1121    /* Create a local client */
1122    client_p = make_client(NULL);
1123  
1124    /* Copy in the server, hostname, fd */
1125    strlcpy(client_p->name, conf->name, sizeof(client_p->name));
1126 <  strlcpy(client_p->host, aconf->host, sizeof(client_p->host));
1126 >  strlcpy(client_p->host, conf->host, sizeof(client_p->host));
1127  
1128    /* We already converted the ip once, so lets use it - stu */
1129 <  strlcpy(client_p->sockhost, buf, HOSTIPLEN);
1129 >  strlcpy(client_p->sockhost, buf, sizeof(client_p->sockhost));
1130  
1131 <  /* create a socket for the server connection */
1132 <  if (comm_open(&client_p->localClient->fd, aconf->ipnum.ss.ss_family,
1131 >  /* create a socket for the server connection */
1132 >  if (comm_open(&client_p->localClient->fd, conf->addr.ss.ss_family,
1133                  SOCK_STREAM, 0, NULL) < 0)
1134    {
1135      /* Eek, failure to create the socket */
1136 <    report_error(L_ALL,
1137 <                 "opening stream socket to %s: %s", conf->name, errno);
1136 >    report_error(L_ALL, "opening stream socket to %s: %s",
1137 >                 conf->name, errno);
1138      SetDead(client_p);
1139      exit_client(client_p, &me, "Connection failed");
1140 <    return (0);
1140 >    return 0;
1141    }
1142  
1143    /* servernames are always guaranteed under HOSTLEN chars */
# Line 1959 | Line 1146 | serv_connect(struct AccessItem *aconf, s
1146    /* Attach config entries to client here rather than in
1147     * serv_connect_callback(). This to avoid null pointer references.
1148     */
1149 <  if (!attach_connect_block(client_p, conf->name, aconf->host))
1149 >  if (!attach_connect_block(client_p, conf->name, conf->host))
1150    {
1151 <    sendto_realops_flags(UMODE_ALL, L_ALL,
1152 <                         "Host %s is not enabled for connecting:no C/N-line",
1153 <                         conf->name);
1154 <    if (by && IsClient(by) && !MyClient(by))  
1151 >    sendto_realops_flags(UMODE_ALL, L_ALL, SEND_NOTICE,
1152 >                         "Host %s is not enabled for connecting: no connect{} block",
1153 >                         conf->name);
1154 >    if (by && IsClient(by) && !MyClient(by))
1155        sendto_one(by, ":%s NOTICE %s :Connect to host %s failed.",
1156 <                 me.name, by->name, client_p->name);
1156 >                 me.name, by->name, client_p->name);
1157      SetDead(client_p);
1158      exit_client(client_p, client_p, "Connection failed");
1159 <    return (0);
1159 >    return 0;
1160    }
1161  
1162    /* at this point we have a connection in progress and C/N lines
# Line 1988 | Line 1175 | serv_connect(struct AccessItem *aconf, s
1175    SetConnecting(client_p);
1176    dlinkAdd(client_p, &client_p->node, &global_client_list);
1177    /* from def_fam */
1178 <  client_p->localClient->aftype = aconf->aftype;
1178 >  client_p->localClient->aftype = conf->aftype;
1179  
1180    /* Now, initiate the connection */
1181 <  /* XXX assume that a non 0 type means a specific bind address
1181 >  /* XXX assume that a non 0 type means a specific bind address
1182     * for this connect.
1183     */
1184 <  switch (aconf->aftype)
1184 >  switch (conf->aftype)
1185    {
1186      case AF_INET:
1187 <      v4 = (struct sockaddr_in*)&aconf->my_ipnum;
1187 >      v4 = (struct sockaddr_in*)&conf->bind;
1188        if (v4->sin_addr.s_addr != 0)
1189        {
1190          struct irc_ssaddr ipn;
1191          memset(&ipn, 0, sizeof(struct irc_ssaddr));
1192          ipn.ss.ss_family = AF_INET;
1193          ipn.ss_port = 0;
1194 <        memcpy(&ipn, &aconf->my_ipnum, sizeof(struct irc_ssaddr));
1195 <        comm_connect_tcp(&client_p->localClient->fd, aconf->host, aconf->port,
1196 <                         (struct sockaddr *)&ipn, ipn.ss_len,
1197 <                         serv_connect_callback, client_p, aconf->aftype,
1198 <                         CONNECTTIMEOUT);
1194 >        memcpy(&ipn, &conf->bind, sizeof(struct irc_ssaddr));
1195 >        comm_connect_tcp(&client_p->localClient->fd, conf->host, conf->port,
1196 >                         (struct sockaddr *)&ipn, ipn.ss_len,
1197 >                         serv_connect_callback, client_p, conf->aftype,
1198 >                         CONNECTTIMEOUT);
1199        }
1200        else if (ServerInfo.specific_ipv4_vhost)
1201        {
# Line 2017 | Line 1204 | serv_connect(struct AccessItem *aconf, s
1204          ipn.ss.ss_family = AF_INET;
1205          ipn.ss_port = 0;
1206          memcpy(&ipn, &ServerInfo.ip, sizeof(struct irc_ssaddr));
1207 <        comm_connect_tcp(&client_p->localClient->fd, aconf->host, aconf->port,
1207 >        comm_connect_tcp(&client_p->localClient->fd, conf->host, conf->port,
1208                           (struct sockaddr *)&ipn, ipn.ss_len,
1209 <                         serv_connect_callback, client_p, aconf->aftype,
1210 <                         CONNECTTIMEOUT);
1209 >                         serv_connect_callback, client_p, conf->aftype,
1210 >                         CONNECTTIMEOUT);
1211        }
1212        else
1213 <        comm_connect_tcp(&client_p->localClient->fd, aconf->host, aconf->port,
1214 <                         NULL, 0, serv_connect_callback, client_p, aconf->aftype,
1213 >        comm_connect_tcp(&client_p->localClient->fd, conf->host, conf->port,
1214 >                         NULL, 0, serv_connect_callback, client_p, conf->aftype,
1215                           CONNECTTIMEOUT);
1216        break;
1217   #ifdef IPV6
1218      case AF_INET6:
1219        {
1220 <        struct irc_ssaddr ipn;
1221 <        struct sockaddr_in6 *v6;
1222 <        struct sockaddr_in6 *v6conf;
1223 <
1224 <        memset(&ipn, 0, sizeof(struct irc_ssaddr));
1225 <        v6conf = (struct sockaddr_in6 *)&aconf->my_ipnum;
1226 <        v6 = (struct sockaddr_in6 *)&ipn;
1227 <
1228 <        if (memcmp(&v6conf->sin6_addr, &v6->sin6_addr,
1229 <                   sizeof(struct in6_addr)) != 0)
1230 <        {
1231 <          memcpy(&ipn, &aconf->my_ipnum, sizeof(struct irc_ssaddr));
1232 <          ipn.ss.ss_family = AF_INET6;
1233 <          ipn.ss_port = 0;
1234 <          comm_connect_tcp(&client_p->localClient->fd,
1235 <                           aconf->host, aconf->port,
1236 <                           (struct sockaddr *)&ipn, ipn.ss_len,
1237 <                           serv_connect_callback, client_p,
1238 <                           aconf->aftype, CONNECTTIMEOUT);
1239 <        }
2053 <        else if (ServerInfo.specific_ipv6_vhost)
1220 >        struct irc_ssaddr ipn;
1221 >        struct sockaddr_in6 *v6;
1222 >        struct sockaddr_in6 *v6conf;
1223 >
1224 >        memset(&ipn, 0, sizeof(struct irc_ssaddr));
1225 >        v6conf = (struct sockaddr_in6 *)&conf->bind;
1226 >        v6 = (struct sockaddr_in6 *)&ipn;
1227 >
1228 >        if (memcmp(&v6conf->sin6_addr, &v6->sin6_addr, sizeof(struct in6_addr)) != 0)
1229 >        {
1230 >          memcpy(&ipn, &conf->bind, sizeof(struct irc_ssaddr));
1231 >          ipn.ss.ss_family = AF_INET6;
1232 >          ipn.ss_port = 0;
1233 >          comm_connect_tcp(&client_p->localClient->fd,
1234 >                           conf->host, conf->port,
1235 >                           (struct sockaddr *)&ipn, ipn.ss_len,
1236 >                           serv_connect_callback, client_p,
1237 >                           conf->aftype, CONNECTTIMEOUT);
1238 >        }
1239 >        else if (ServerInfo.specific_ipv6_vhost)
1240          {
1241 <          memcpy(&ipn, &ServerInfo.ip6, sizeof(struct irc_ssaddr));
1242 <          ipn.ss.ss_family = AF_INET6;
1243 <          ipn.ss_port = 0;
1244 <          comm_connect_tcp(&client_p->localClient->fd,
1245 <                           aconf->host, aconf->port,
1246 <                           (struct sockaddr *)&ipn, ipn.ss_len,
1247 <                           serv_connect_callback, client_p,
1248 <                           aconf->aftype, CONNECTTIMEOUT);
1249 <        }
1250 <        else
1251 <          comm_connect_tcp(&client_p->localClient->fd,
1252 <                           aconf->host, aconf->port,
1253 <                           NULL, 0, serv_connect_callback, client_p,
1254 <                           aconf->aftype, CONNECTTIMEOUT);
1241 >          memcpy(&ipn, &ServerInfo.ip6, sizeof(struct irc_ssaddr));
1242 >          ipn.ss.ss_family = AF_INET6;
1243 >          ipn.ss_port = 0;
1244 >          comm_connect_tcp(&client_p->localClient->fd,
1245 >                           conf->host, conf->port,
1246 >                           (struct sockaddr *)&ipn, ipn.ss_len,
1247 >                           serv_connect_callback, client_p,
1248 >                           conf->aftype, CONNECTTIMEOUT);
1249 >        }
1250 >        else
1251 >          comm_connect_tcp(&client_p->localClient->fd,
1252 >                           conf->host, conf->port,
1253 >                           NULL, 0, serv_connect_callback, client_p,
1254 >                           conf->aftype, CONNECTTIMEOUT);
1255        }
1256   #endif
1257    }
1258 <  return (1);
1258 >  return 1;
1259   }
1260  
1261 + #ifdef HAVE_LIBCRYPTO
1262 + static void
1263 + finish_ssl_server_handshake(struct Client *client_p)
1264 + {
1265 +  struct MaskItem *conf = NULL;
1266 +
1267 +  conf = find_conf_name(&client_p->localClient->confs,
1268 +                        client_p->name, CONF_SERVER);
1269 +  if (conf == NULL)
1270 +  {
1271 +    sendto_realops_flags(UMODE_ALL, L_ADMIN, SEND_NOTICE,
1272 +                         "Lost connect{} block for %s", get_client_name(client_p, HIDE_IP));
1273 +    sendto_realops_flags(UMODE_ALL, L_OPER, SEND_NOTICE,
1274 +                         "Lost connect{} block for %s", get_client_name(client_p, MASK_IP));
1275 +
1276 +    exit_client(client_p, &me, "Lost connect{} block");
1277 +    return;
1278 +  }
1279 +
1280 +  sendto_one(client_p, "PASS %s TS %d %s", conf->spasswd, TS_CURRENT, me.id);
1281 +
1282 +  send_capabilities(client_p, 0);
1283 +
1284 +  sendto_one(client_p, "SERVER %s 1 :%s%s",
1285 +             me.name, ConfigServerHide.hidden ? "(H) " : "",
1286 +             me.info);
1287 +
1288 +  /* If we've been marked dead because a send failed, just exit
1289 +   * here now and save everyone the trouble of us ever existing.
1290 +   */
1291 +  if (IsDead(client_p))
1292 +  {
1293 +      sendto_realops_flags(UMODE_ALL, L_ADMIN, SEND_NOTICE,
1294 +                           "%s[%s] went dead during handshake",
1295 +                           client_p->name,
1296 +                           client_p->host);
1297 +      sendto_realops_flags(UMODE_ALL, L_OPER, SEND_NOTICE,
1298 +                           "%s went dead during handshake", client_p->name);
1299 +      return;
1300 +  }
1301 +
1302 +  /* don't move to serv_list yet -- we haven't sent a burst! */
1303 +  /* If we get here, we're ok, so lets start reading some data */
1304 +  comm_setselect(&client_p->localClient->fd, COMM_SELECT_READ, read_packet, client_p, 0);
1305 + }
1306 +
1307 + static void
1308 + ssl_server_handshake(fde_t *fd, struct Client *client_p)
1309 + {
1310 +  X509 *cert = NULL;
1311 +  int ret = 0;
1312 +
1313 +  if ((ret = SSL_connect(client_p->localClient->fd.ssl)) <= 0)
1314 +  {
1315 +    switch (SSL_get_error(client_p->localClient->fd.ssl, ret))
1316 +    {
1317 +      case SSL_ERROR_WANT_WRITE:
1318 +        comm_setselect(&client_p->localClient->fd, COMM_SELECT_WRITE,
1319 +                       (PF *)ssl_server_handshake, client_p, 0);
1320 +        return;
1321 +      case SSL_ERROR_WANT_READ:
1322 +        comm_setselect(&client_p->localClient->fd, COMM_SELECT_READ,
1323 +                       (PF *)ssl_server_handshake, client_p, 0);
1324 +        return;
1325 +      default:
1326 +      {
1327 +        const char *sslerr = ERR_error_string(ERR_get_error(), NULL);
1328 +        sendto_realops_flags(UMODE_ALL, L_ALL, SEND_NOTICE,
1329 +                             "Error connecting to %s: %s", client_p->name,
1330 +                             sslerr ? sslerr : "unknown SSL error");
1331 +        exit_client(client_p, client_p, "Error during SSL handshake");
1332 +        return;
1333 +      }
1334 +    }
1335 +  }
1336 +
1337 +  if ((cert = SSL_get_peer_certificate(client_p->localClient->fd.ssl)))
1338 +  {
1339 +    int res = SSL_get_verify_result(client_p->localClient->fd.ssl);
1340 +    char buf[EVP_MAX_MD_SIZE * 2 + 1] = { '\0' };
1341 +    unsigned char md[EVP_MAX_MD_SIZE] = { '\0' };
1342 +
1343 +    if (res == X509_V_OK || res == X509_V_ERR_SELF_SIGNED_CERT_IN_CHAIN ||
1344 +        res == X509_V_ERR_UNABLE_TO_VERIFY_LEAF_SIGNATURE ||
1345 +        res == X509_V_ERR_DEPTH_ZERO_SELF_SIGNED_CERT)
1346 +    {
1347 +      unsigned int i = 0, n = 0;
1348 +
1349 +      if (X509_digest(cert, EVP_sha256(), md, &n))
1350 +      {
1351 +        for (; i < n; ++i)
1352 +          snprintf(buf + 2 * i, 3, "%02X", md[i]);
1353 +        client_p->certfp = xstrdup(buf);
1354 +      }
1355 +    }
1356 +    else
1357 +      ilog(LOG_TYPE_IRCD, "Server %s!%s@%s gave bad SSL client certificate: %d",
1358 +           client_p->name, client_p->username, client_p->host, res);
1359 +    X509_free(cert);
1360 +  }
1361 +
1362 +  finish_ssl_server_handshake(client_p);
1363 + }
1364 +
1365 + static void
1366 + ssl_connect_init(struct Client *client_p, struct MaskItem *conf, fde_t *fd)
1367 + {
1368 +  if ((client_p->localClient->fd.ssl = SSL_new(ServerInfo.client_ctx)) == NULL)
1369 +  {
1370 +    ilog(LOG_TYPE_IRCD, "SSL_new() ERROR! -- %s",
1371 +         ERR_error_string(ERR_get_error(), NULL));
1372 +    SetDead(client_p);
1373 +    exit_client(client_p, client_p, "SSL_new failed");
1374 +    return;
1375 +  }
1376 +
1377 +  SSL_set_fd(fd->ssl, fd->fd);
1378 +
1379 +  if (!EmptyString(conf->cipher_list))
1380 +    SSL_set_cipher_list(client_p->localClient->fd.ssl, conf->cipher_list);
1381 +
1382 +  ssl_server_handshake(NULL, client_p);
1383 + }
1384 + #endif
1385 +
1386   /* serv_connect_callback() - complete a server connection.
1387 < *
1387 > *
1388   * This routine is called after the server connection attempt has
1389   * completed. If unsucessful, an error is sent to ops and the client
1390   * is closed. If sucessful, it goes through the initialisation/check
# Line 2084 | Line 1395 | static void
1395   serv_connect_callback(fde_t *fd, int status, void *data)
1396   {
1397    struct Client *client_p = data;
1398 <  struct ConfItem *conf=NULL;
2088 <  struct AccessItem *aconf=NULL;
1398 >  struct MaskItem *conf = NULL;
1399  
1400    /* First, make sure its a real client! */
1401    assert(client_p != NULL);
# Line 2101 | Line 1411 | serv_connect_callback(fde_t *fd, int sta
1411       * Admins get to see any IP, mere opers don't *sigh*
1412       */
1413       if (ConfigServerHide.hide_server_ips)
1414 <       sendto_realops_flags(UMODE_ALL, L_ADMIN,
1414 >       sendto_realops_flags(UMODE_ALL, L_ADMIN, SEND_NOTICE,
1415                              "Error connecting to %s: %s",
1416                              client_p->name, comm_errstr(status));
1417       else
1418 <       sendto_realops_flags(UMODE_ALL, L_ADMIN,
1419 <                            "Error connecting to %s[%s]: %s", client_p->name,
1420 <                            client_p->host, comm_errstr(status));
1421 <
1422 <     sendto_realops_flags(UMODE_ALL, L_OPER,
1423 <                          "Error connecting to %s: %s",
1424 <                          client_p->name, comm_errstr(status));
1418 >       sendto_realops_flags(UMODE_ALL, L_ADMIN, SEND_NOTICE,
1419 >                            "Error connecting to %s[%s]: %s", client_p->name,
1420 >                            client_p->host, comm_errstr(status));
1421 >
1422 >     sendto_realops_flags(UMODE_ALL, L_OPER, SEND_NOTICE,
1423 >                          "Error connecting to %s: %s",
1424 >                          client_p->name, comm_errstr(status));
1425  
1426       /* If a fd goes bad, call dead_link() the socket is no
1427        * longer valid for reading or writing.
# Line 2123 | Line 1433 | serv_connect_callback(fde_t *fd, int sta
1433    /* COMM_OK, so continue the connection procedure */
1434    /* Get the C/N lines */
1435    conf = find_conf_name(&client_p->localClient->confs,
1436 <                        client_p->name, SERVER_TYPE);
1436 >                        client_p->name, CONF_SERVER);
1437    if (conf == NULL)
1438    {
1439 <    sendto_realops_flags(UMODE_ALL, L_ADMIN,
1440 <                         "Lost connect{} block for %s", get_client_name(client_p, HIDE_IP));
1441 <    sendto_realops_flags(UMODE_ALL, L_OPER,
1442 <                         "Lost connect{} block for %s", get_client_name(client_p, MASK_IP));
1439 >    sendto_realops_flags(UMODE_ALL, L_ADMIN, SEND_NOTICE,
1440 >                         "Lost connect{} block for %s", get_client_name(client_p, HIDE_IP));
1441 >    sendto_realops_flags(UMODE_ALL, L_OPER, SEND_NOTICE,
1442 >                         "Lost connect{} block for %s", get_client_name(client_p, MASK_IP));
1443  
1444      exit_client(client_p, &me, "Lost connect{} block");
1445      return;
1446    }
1447  
2138  aconf = (struct AccessItem *)map_to_conf(conf);
1448    /* Next, send the initial handshake */
1449    SetHandshake(client_p);
1450  
1451   #ifdef HAVE_LIBCRYPTO
1452 <  /* Handle all CRYPTLINK links in cryptlink_init */
2144 <  if (IsConfCryptLink(aconf))
1452 >  if (IsConfSSL(conf))
1453    {
1454 <    cryptlink_init(client_p, conf, fd);
1454 >    ssl_connect_init(client_p, conf, fd);
1455      return;
1456    }
1457   #endif
1458  
1459 <  /* jdc -- Check and send spasswd, not passwd. */
2152 <  if (!EmptyString(aconf->spasswd) && (me.id[0] != '\0'))
2153 <      /* Send TS 6 form only if id */
2154 <    sendto_one(client_p, "PASS %s TS %d %s",
2155 <               aconf->spasswd, TS_CURRENT, me.id);
2156 <  else
2157 <    sendto_one(client_p, "PASS %s TS 5",
2158 <               aconf->spasswd);
1459 >  sendto_one(client_p, "PASS %s TS %d %s", conf->spasswd, TS_CURRENT, me.id);
1460  
1461 <  /* Pass my info to the new server
2161 <   *
2162 <   * If trying to negotiate LazyLinks, pass on CAP_LL
2163 <   * If this is a HUB, pass on CAP_HUB
2164 <   * Pass on ZIP if supported
2165 <   * Pass on TB if supported.
2166 <   * - Dianora
2167 <   */
2168 <  send_capabilities(client_p, aconf, (ServerInfo.hub ? CAP_HUB : 0)
2169 <                    | (IsConfLazyLink(aconf) ? CAP_LL : 0)
2170 <                    | (IsConfCompressed(aconf) ? CAP_ZIP : 0)
2171 <                    | (IsConfTopicBurst(aconf) ? CAP_TBURST|CAP_TB : 0), 0);
1461 >  send_capabilities(client_p, 0);
1462  
1463 <  sendto_one(client_p, "SERVER %s 1 :%s%s",
1464 <             my_name_for_link(conf),
2175 <             ConfigServerHide.hidden ? "(H) " : "",
2176 <             me.info);
1463 >  sendto_one(client_p, "SERVER %s 1 :%s%s", me.name,
1464 >             ConfigServerHide.hidden ? "(H) " : "", me.info);
1465  
1466    /* If we've been marked dead because a send failed, just exit
1467     * here now and save everyone the trouble of us ever existing.
1468     */
1469 <  if (IsDead(client_p))
1469 >  if (IsDead(client_p))
1470    {
1471 <      sendto_realops_flags(UMODE_ALL, L_ADMIN,
1472 <                           "%s[%s] went dead during handshake",
1471 >      sendto_realops_flags(UMODE_ALL, L_ADMIN, SEND_NOTICE,
1472 >                           "%s[%s] went dead during handshake",
1473                             client_p->name,
1474 <                           client_p->host);
1475 <      sendto_realops_flags(UMODE_ALL, L_OPER,
1476 <                           "%s went dead during handshake", client_p->name);
1474 >                           client_p->host);
1475 >      sendto_realops_flags(UMODE_ALL, L_OPER, SEND_NOTICE,
1476 >                           "%s went dead during handshake", client_p->name);
1477        return;
1478    }
1479  
# Line 2205 | Line 1493 | find_servconn_in_progress(const char *na
1493      cptr = ptr->data;
1494  
1495      if (cptr && cptr->name[0])
1496 <      if (match(cptr->name, name) || match(name, cptr->name))
1496 >      if (!match(name, cptr->name))
1497          return cptr;
1498    }
2211  
2212  return NULL;
2213 }
2214
2215 #ifdef HAVE_LIBCRYPTO
2216 /*
2217 * sends a CRYPTLINK SERV command.
2218 */
2219 void
2220 cryptlink_init(struct Client *client_p, struct ConfItem *conf, fde_t *fd)
2221 {
2222  struct AccessItem *aconf;
2223  char *encrypted;
2224  unsigned char *key_to_send;
2225  char randkey[CIPHERKEYLEN];
2226  int enc_len;
2227
2228  /* get key */
2229  if ((!ServerInfo.rsa_private_key) ||
2230      (!RSA_check_key(ServerInfo.rsa_private_key)) )
2231  {
2232    cryptlink_error(client_p, "SERV", "Invalid RSA private key",
2233                                      "Invalid RSA private key");
2234    return;
2235  }
1499  
1500 <  aconf = (struct AccessItem *)map_to_conf(conf);
2238 <
2239 <  if (aconf->rsa_public_key == NULL)
2240 <  {
2241 <    cryptlink_error(client_p, "SERV", "Invalid RSA public key",
2242 <                                      "Invalid RSA public key");
2243 <    return;
2244 <  }
2245 <
2246 <  if (get_randomness((unsigned char *)randkey, CIPHERKEYLEN) != 1)
2247 <  {
2248 <    cryptlink_error(client_p, "SERV", "Couldn't generate keyphrase",
2249 <                                      "Couldn't generate keyphrase");
2250 <    return;
2251 <  }
2252 <
2253 <  encrypted = MyMalloc(RSA_size(ServerInfo.rsa_private_key));
2254 <  enc_len   = RSA_public_encrypt(CIPHERKEYLEN,
2255 <                                 (unsigned char *)randkey,
2256 <                                 (unsigned char *)encrypted,
2257 <                                 aconf->rsa_public_key,
2258 <                                 RSA_PKCS1_PADDING);
2259 <
2260 <  memcpy(client_p->localClient->in_key, randkey, CIPHERKEYLEN);
2261 <
2262 <  if (enc_len <= 0)
2263 <  {
2264 <    report_crypto_errors();
2265 <    MyFree(encrypted);
2266 <    cryptlink_error(client_p, "SERV", "Couldn't encrypt data",
2267 <                                      "Couldn't encrypt data");
2268 <    return;
2269 <  }
2270 <
2271 <  if (!(base64_block(&key_to_send, encrypted, enc_len)))
2272 <  {
2273 <    MyFree(encrypted);
2274 <    cryptlink_error(client_p, "SERV", "Couldn't base64 encode key",
2275 <                                      "Couldn't base64 encode key");
2276 <    return;
2277 <  }
2278 <
2279 <  send_capabilities(client_p, aconf, (ServerInfo.hub ? CAP_HUB : 0)
2280 <                    | (IsConfLazyLink(aconf) ? CAP_LL : 0)
2281 <                    | (IsConfCompressed(aconf) ? CAP_ZIP : 0)
2282 <                    | (IsConfTopicBurst(aconf) ? CAP_TBURST|CAP_TB : 0), CAP_ENC_MASK);
2283 <
2284 <  if (me.id[0])
2285 <    sendto_one(client_p, "PASS . TS %d %s", TS_CURRENT, me.id);
2286 <
2287 <  sendto_one(client_p, "CRYPTLINK SERV %s %s :%s%s",
2288 <             my_name_for_link(conf), key_to_send,
2289 <             ConfigServerHide.hidden ? "(H) " : "", me.info);
2290 <
2291 <  SetHandshake(client_p);
2292 <  SetWaitAuth(client_p);
2293 <
2294 <  MyFree(encrypted);
2295 <  MyFree(key_to_send);
2296 <
2297 <  if (IsDead(client_p))
2298 <    cryptlink_error(client_p, "SERV", "Went dead during handshake",
2299 <                                      "Went dead during handshake");
2300 <  else if (fd != NULL)
2301 <    /* If we get here, we're ok, so lets start reading some data */
2302 <    comm_setselect(fd, COMM_SELECT_READ, read_packet, client_p, 0);
2303 < }
2304 <
2305 < void
2306 < cryptlink_error(struct Client *client_p, const char *type,
2307 <                const char *reason, const char *client_reason)
2308 < {
2309 <  sendto_realops_flags(UMODE_ALL, L_ADMIN, "%s: CRYPTLINK %s error - %s",
2310 <                       get_client_name(client_p, SHOW_IP), type, reason);
2311 <  sendto_realops_flags(UMODE_ALL, L_OPER,  "%s: CRYPTLINK %s error - %s",
2312 <                       get_client_name(client_p, MASK_IP), type, reason);
2313 <  ilog(L_ERROR, "%s: CRYPTLINK %s error - %s",
2314 <       get_client_name(client_p, SHOW_IP), type, reason);
2315 <
2316 <  /* If client_reason isn't NULL, then exit the client with the message
2317 <   * defined in the call.
2318 <   */
2319 <  if ((client_reason != NULL) && (!IsDead(client_p)))
2320 <    exit_client(client_p, &me, client_reason);
2321 < }
2322 <
2323 < static char base64_chars[] =
2324 <        "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=";
2325 <
2326 < static char base64_values[] =
2327 < {
2328 < /* 00-15   */ -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1,
2329 < /* 16-31   */ -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1,
2330 < /* 32-47   */ -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 62, -1, -1, -1, 63,
2331 < /* 48-63   */ 52, 53, 54, 55, 56, 57, 58, 59, 60, 61, -1, -1, -1,  0, -1, -1,
2332 < /* 64-79   */ -1,  0,  1,  2,  3,  4,  5,  6,  7,  8,  9, 10, 11, 12, 13, 14,
2333 < /* 80-95   */ 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, -1, -1, -1, -1, -1,
2334 < /* 96-111  */ -1, 26, 27, 28, 29, 30, 31, 32, 33, 34, 35, 36, 37, 38, 39, 40,
2335 < /* 112-127 */ 41, 42, 43, 44, 45, 46, 47, 48, 49, 50, 51, -1, -1, -1, -1, -1,
2336 < /* 128-143 */ -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1,
2337 < /* 144-159 */ -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1,
2338 < /* 160-175 */ -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1,
2339 < /* 186-191 */ -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1,
2340 < /* 192-207 */ -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1,
2341 < /* 208-223 */ -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1,
2342 < /* 224-239 */ -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1,
2343 < /* 240-255 */ -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1
2344 < };
2345 <
2346 < /*
2347 < * base64_block will allocate and return a new block of memory
2348 < * using MyMalloc().  It should be freed after use.
2349 < */
2350 < int
2351 < base64_block(unsigned char **output, char *data, int len)
2352 < {
2353 <  unsigned char *out;
2354 <  unsigned char *in = (unsigned char*)data;
2355 <  unsigned long int q_in;
2356 <  int i;
2357 <  int count = 0;
2358 <
2359 <  out = MyMalloc(((((len + 2) - ((len + 2) % 3)) / 3) * 4) + 1);
2360 <
2361 <  /* process 24 bits at a time */
2362 <  for( i = 0; i < len; i += 3)
2363 <  {
2364 <    q_in = 0;
2365 <
2366 <    if ( i + 2 < len )
2367 <    {
2368 <      q_in  = (in[i+2] & 0xc0) << 2;
2369 <      q_in |=  in[i+2];
2370 <    }
2371 <
2372 <    if ( i + 1 < len )
2373 <    {
2374 <      q_in |= (in[i+1] & 0x0f) << 10;
2375 <      q_in |= (in[i+1] & 0xf0) << 12;
2376 <    }
2377 <
2378 <    q_in |= (in[i]   & 0x03) << 20;
2379 <    q_in |=  in[i]           << 22;
2380 <
2381 <    q_in &= 0x3f3f3f3f;
2382 <
2383 <    out[count++] = base64_chars[((q_in >> 24)       )];
2384 <    out[count++] = base64_chars[((q_in >> 16) & 0xff)];
2385 <    out[count++] = base64_chars[((q_in >>  8) & 0xff)];
2386 <    out[count++] = base64_chars[((q_in      ) & 0xff)];
2387 <  }
2388 <  if ( (i - len) > 0 )
2389 <  {
2390 <    out[count-1] = '=';
2391 <    if ( (i - len) > 1 )
2392 <      out[count-2] = '=';
2393 <  }
2394 <
2395 <  out[count] = '\0';
2396 <  *output = out;
2397 <  return (count);
2398 < }
2399 <
2400 < /*
2401 < * unbase64_block will allocate and return a new block of memory
2402 < * using MyMalloc().  It should be freed after use.
2403 < */
2404 < int
2405 < unbase64_block(unsigned char **output, char *data, int len)
2406 < {
2407 <  unsigned char *out;
2408 <  unsigned char *in = (unsigned char*)data;
2409 <  unsigned long int q_in;
2410 <  int i;
2411 <  int count = 0;
2412 <
2413 <  if ((len % 4) != 0)
2414 <    return (0);
2415 <
2416 <  out = MyMalloc(((len / 4) * 3) + 1);
2417 <
2418 <  /* process 32 bits at a time */
2419 <  for( i = 0; (i + 3) < len; i+=4)
2420 <  {
2421 <    /* compress input (chars a, b, c and d) as follows:
2422 <     * (after converting ascii -> base64 value)
2423 <     *
2424 <     * |00000000aaaaaabbbbbbccccccdddddd|
2425 <     * |  765432  107654  321076  543210|
2426 <     */
2427 <
2428 <    q_in = 0;
2429 <
2430 <    if (base64_values[in[i+3]] > -1)
2431 <      q_in |= base64_values[in[i+3]]      ;
2432 <    if (base64_values[in[i+2]] > -1)
2433 <      q_in |= base64_values[in[i+2]] <<  6;
2434 <    if (base64_values[in[i+1]] > -1)
2435 <      q_in |= base64_values[in[i+1]] << 12;
2436 <    if (base64_values[in[i  ]] > -1)
2437 <      q_in |= base64_values[in[i  ]] << 18;
2438 <
2439 <    out[count++] = (q_in >> 16) & 0xff;
2440 <    out[count++] = (q_in >>  8) & 0xff;
2441 <    out[count++] = (q_in      ) & 0xff;
2442 <  }
2443 <
2444 <  if (in[i-1] == '=') count--;
2445 <  if (in[i-2] == '=') count--;
2446 <
2447 <  out[count] = '\0';
2448 <  *output = out;
2449 <  return (count);
1500 >  return NULL;
1501   }
2451
2452 #endif /* HAVE_LIBCRYPTO */
2453

Diff Legend

Removed lines
+ Added lines
< Changed lines (old)
> Changed lines (new)