trunk/src/ircd.c

/*
 *  ircd-hybrid: an advanced, lightweight Internet Relay Chat Daemon (ircd)
 *
 *  Copyright (c) 1997-2015 ircd-hybrid development team
 *
 *  This program is free software; you can redistribute it and/or modify
 *  it under the terms of the GNU General Public License as published by
 *  the Free Software Foundation; either version 2 of the License, or
 *  (at your option) any later version.
 *
 *  This program is distributed in the hope that it will be useful,
 *  but WITHOUT ANY WARRANTY; without even the implied warranty of
 *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 *  GNU General Public License for more details.
 *
 *  You should have received a copy of the GNU General Public License
 *  along with this program; if not, write to the Free Software
 *  Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301
 *  USA
 */

/*! \file ircd.c
 * \brief Starts up and runs the ircd.
 * \version $Id$
 */

#include "stdinc.h"
#include "user.h"
#include "list.h"
#include "ircd.h"
#include "channel.h"
#include "client.h"
#include "event.h"
#include "fdlist.h"
#include "hash.h"
#include "id.h"
#include "irc_string.h"
#include "ircd_signal.h"
#include "motd.h"
#include "conf.h"
#include "hostmask.h"
#include "parse.h"
#include "res.h"
#include "restart.h"
#include "rng_mt.h"
#include "auth.h"
#include "s_bsd.h"
#include "log.h"
#include "server.h"      /* try_connections */
#include "send.h"
#include "whowas.h"
#include "modules.h"
#include "memory.h"
#include "mempool.h"
#include "ircd_getopt.h"
#include "watch.h"
#include "conf_db.h"
#include "conf_class.h"
#include "ipcache.h"
#include "isupport.h"


#ifdef HAVE_LIBGEOIP
GeoIP *geoip_ctx;
#endif

struct SetOptions GlobalSetOptions;  /* /quote set variables */
struct Counter Count;
struct ServerState_t server_state;
struct ServerStatistics ServerStats;
struct timeval SystemTime;
struct Connection meConnection;  /* That's also part of me */
struct Client me = { .connection = &meConnection };  /* That's me */

char **myargv;
const char *logFileName = LPATH;
const char *pidFileName = PPATH;

unsigned int dorehash;
unsigned int doremotd;
unsigned int splitmode;
unsigned int splitchecking;
unsigned int split_users;
unsigned int split_servers;

static struct event event_cleanup_tklines =
{
  .name = "cleanup_tklines",
  .handler = cleanup_tklines,
  .when = CLEANUP_TKLINES_TIME
};

static struct event event_try_connections =
{
  .name = "try_connections",
  .handler = try_connections,
  .when = STARTUP_CONNECTIONS_TIME
};

static struct event event_comm_checktimeouts =
{
  .name = "comm_checktimeouts",
  .handler = comm_checktimeouts,
  .when = 1
};

static struct event event_save_all_databases =
{
  .name = "save_all_databases",
  .handler = save_all_databases,
  .when = DATABASE_UPDATE_TIMEOUT
};

struct event event_write_links_file =
{
  .name = "write_links_file",
  .handler = write_links_file,
};


/*
 * print_startup - print startup information
 */
static void
print_startup(int pid)
{
  printf("ircd: version %s(%s)\n", ircd_version, serno);
  printf("ircd: pid %d\n", pid);
  printf("ircd: running in %s mode from %s\n", !server_state.foreground ? "background"
         : "foreground", ConfigGeneral.dpath);
}

static void
make_daemon(void)
{
  int pid;

  if ((pid = fork()) < 0)
  {
    perror("fork");
    exit(EXIT_FAILURE);
  }
  else if (pid > 0)
  {
    print_startup(pid);
    exit(EXIT_SUCCESS);
  }

  setsid();
}

static int printVersion = 0;

static struct lgetopt myopts[] =
{
  {"configfile", &ConfigGeneral.configfile,
   STRING, "File to use for ircd.conf"},
  {"klinefile",  &ConfigGeneral.klinefile,
   STRING, "File to use for kline database"},
  {"dlinefile",  &ConfigGeneral.dlinefile,
   STRING, "File to use for dline database"},
  {"xlinefile",  &ConfigGeneral.xlinefile,
   STRING, "File to use for xline database"},
  {"resvfile",  &ConfigGeneral.resvfile,
   STRING, "File to use for resv database"},
  {"logfile",    &logFileName,
   STRING, "File to use for ircd.log"},
  {"pidfile",    &pidFileName,
   STRING, "File to use for process ID"},
  {"foreground", &server_state.foreground,
   YESNO, "Run in foreground (don't detach)"},
  {"version",    &printVersion,
   YESNO, "Print version and exit"},
  {"help", NULL, USAGE, "Print this text"},
  {NULL, NULL, STRING, NULL},
};

void
set_time(void)
{
  struct timeval newtime = { .tv_sec = 0, .tv_usec = 0 };

  if (gettimeofday(&newtime, NULL) == -1)
  {
    ilog(LOG_TYPE_IRCD, "Clock Failure (%s), TS can be corrupted",
         strerror(errno));
    sendto_realops_flags(UMODE_SERVNOTICE, L_ALL, SEND_NOTICE,
                         "Clock Failure (%s), TS can be corrupted",
                         strerror(errno));
    server_die("Clock Failure", 1);
  }

  if (newtime.tv_sec < CurrentTime)
  {
    ilog(LOG_TYPE_IRCD, "System clock is running backwards - (%lu < %lu)",
         (unsigned long)newtime.tv_sec, (unsigned long)CurrentTime);
    sendto_realops_flags(UMODE_DEBUG, L_ALL, SEND_NOTICE,
                         "System clock is running backwards - (%lu < %lu)",
                         (unsigned long)newtime.tv_sec,
                         (unsigned long)CurrentTime);
    set_back_events(CurrentTime - newtime.tv_sec);
  }

  SystemTime.tv_sec  = newtime.tv_sec;
  SystemTime.tv_usec = newtime.tv_usec;
}

static void
io_loop(void)
{
  while (1)
  {
    if (listing_client_list.head)
    {
      dlink_node *node = NULL, *node_next = NULL;
      DLINK_FOREACH_SAFE(node, node_next, listing_client_list.head)
        safe_list_channels(node->data, 0);
    }

    /* Run pending events */
    event_run();

    comm_select();
    exit_aborted_clients();
    free_exited_clients();

    /* Check to see whether we have to rehash the configuration .. */
    if (dorehash)
    {
      conf_rehash(1);
      dorehash = 0;
    }

    if (doremotd)
    {
      motd_recache();
      sendto_realops_flags(UMODE_SERVNOTICE, L_ALL, SEND_NOTICE,
                           "Got signal SIGUSR1, reloading motd file(s)");
      doremotd = 0;
    }
  }
}

/* initalialize_global_set_options()
 *
 * inputs       - none
 * output       - none
 * side effects - This sets all global set options needed
 */
static void
initialize_global_set_options(void)
{
  GlobalSetOptions.maxclients = ConfigServerInfo.default_max_clients;
  GlobalSetOptions.autoconn = 1;
  GlobalSetOptions.spam_time = MIN_JOIN_LEAVE_TIME;
  GlobalSetOptions.spam_num = MAX_JOIN_LEAVE_COUNT;
  GlobalSetOptions.floodcount = ConfigGeneral.default_floodcount;
  GlobalSetOptions.joinfloodcount = ConfigChannel.default_join_flood_count;
  GlobalSetOptions.joinfloodtime = ConfigChannel.default_join_flood_time;

  split_servers = ConfigChannel.default_split_server_count;
  split_users   = ConfigChannel.default_split_user_count;

  if (split_users && split_servers && (ConfigChannel.no_create_on_split ||
                                       ConfigChannel.no_join_on_split))
  {
    splitmode     = 1;
    splitchecking = 1;
  }

  GlobalSetOptions.ident_timeout = IDENT_TIMEOUT;
}

/* initialize_server_capabs()
 *
 * inputs       - none
 * output       - none
 */
static void
initialize_server_capabs(void)
{
  add_capability("QS", CAPAB_QS);
  add_capability("EOB", CAPAB_EOB);
  add_capability("CLUSTER", CAPAB_CLUSTER);
  add_capability("SVS", CAPAB_SVS);
  add_capability("CHW", CAPAB_CHW);
  add_capability("HOPS", CAPAB_HOPS);
}

/* write_pidfile()
 *
 * inputs       - filename+path of pid file
 * output       - NONE
 * side effects - write the pid of the ircd to filename
 */
static void
write_pidfile(const char *filename)
{
  FILE *fb;

  if ((fb = fopen(filename, "w")))
  {
    char buff[IRCD_BUFSIZE];
    unsigned int pid = (unsigned int)getpid();

    snprintf(buff, sizeof(buff), "%u\n", pid);

    if (fputs(buff, fb) == -1)
      ilog(LOG_TYPE_IRCD, "Error writing to pid file %s: %s",
           filename, strerror(errno));

    fclose(fb);
  }
  else
    ilog(LOG_TYPE_IRCD, "Error opening pid file %s: %s",
         filename, strerror(errno));
}

/* check_pidfile()
 *
 * inputs       - filename+path of pid file
 * output       - none
 * side effects - reads pid from pidfile and checks if ircd is in process
 *                list. if it is, gracefully exits
 * -kre
 */
static void
check_pidfile(const char *filename)
{
  FILE *fb;
  char buff[IRCD_BUFSIZE];
  pid_t pidfromfile;

  if ((fb = fopen(filename, "r")))
  {
    if (!fgets(buff, 20, fb))
      ilog(LOG_TYPE_IRCD, "Error reading from pid file %s: %s",
           filename, strerror(errno));
    else
    {
      pidfromfile = atoi(buff);

      if (!kill(pidfromfile, 0))
      {
        /* log(L_ERROR, "Server is already running"); */
        printf("ircd: daemon is already running\n");
        exit(-1);
      }
    }

    fclose(fb);
  }
  else if (errno != ENOENT)
    ilog(LOG_TYPE_IRCD, "Error opening pid file %s: %s",
         filename, strerror(errno));
}

/* setup_corefile()
 *
 * inputs       - nothing
 * output       - nothing
 * side effects - setups corefile to system limits.
 * -kre
 */
static void
setup_corefile(void)
{
#ifdef HAVE_SYS_RESOURCE_H
  struct rlimit rlim; /* resource limits */

  /* Set corefilesize to maximum */
  if (!getrlimit(RLIMIT_CORE, &rlim))
  {
    rlim.rlim_cur = rlim.rlim_max;
    setrlimit(RLIMIT_CORE, &rlim);
  }
#endif
}

#ifdef HAVE_LIBCRYPTO
static int
always_accept_verify_cb(int preverify_ok, X509_STORE_CTX *x509_ctx)
{
  return 1;
}
#endif

/* init_ssl()
 *
 * inputs       - nothing
 * output       - nothing
 * side effects - setups SSL context.
 */
static void
ssl_init(void)
{
#ifdef HAVE_LIBCRYPTO
  SSL_load_error_strings();
  SSLeay_add_ssl_algorithms();

  if (!(ConfigServerInfo.server_ctx = SSL_CTX_new(SSLv23_server_method())))
  {
    const char *s = ERR_lib_error_string(ERR_get_error());

    fprintf(stderr, "ERROR: Could not initialize the SSL Server context -- %s\n", s);
    ilog(LOG_TYPE_IRCD, "ERROR: Could not initialize the SSL Server context -- %s", s);
    exit(EXIT_FAILURE);
    return;  /* Not reached */
  }

  SSL_CTX_set_options(ConfigServerInfo.server_ctx, SSL_OP_NO_SSLv2|SSL_OP_NO_SSLv3|SSL_OP_NO_TICKET);
  SSL_CTX_set_options(ConfigServerInfo.server_ctx, SSL_OP_SINGLE_DH_USE|SSL_OP_CIPHER_SERVER_PREFERENCE);
  SSL_CTX_set_verify(ConfigServerInfo.server_ctx, SSL_VERIFY_PEER|SSL_VERIFY_CLIENT_ONCE,
                     always_accept_verify_cb);
  SSL_CTX_set_session_cache_mode(ConfigServerInfo.server_ctx, SSL_SESS_CACHE_OFF);
  SSL_CTX_set_cipher_list(ConfigServerInfo.server_ctx, "EECDH+HIGH:EDH+HIGH:HIGH:!aNULL");

#if OPENSSL_VERSION_NUMBER >= 0x009080FFL && !defined(OPENSSL_NO_ECDH)
  {
    EC_KEY *key = EC_KEY_new_by_curve_name(NID_X9_62_prime256v1);

    if (key)
    {
      SSL_CTX_set_tmp_ecdh(ConfigServerInfo.server_ctx, key);
      EC_KEY_free(key);
    }
  }

  SSL_CTX_set_options(ConfigServerInfo.server_ctx, SSL_OP_SINGLE_ECDH_USE);
#endif

  if (!(ConfigServerInfo.client_ctx = SSL_CTX_new(SSLv23_client_method())))
  {
    const char *s = ERR_lib_error_string(ERR_get_error());

    fprintf(stderr, "ERROR: Could not initialize the SSL Client context -- %s\n", s);
    ilog(LOG_TYPE_IRCD, "ERROR: Could not initialize the SSL Client context -- %s", s);
    exit(EXIT_FAILURE);
    return;  /* Not reached */
  }

  SSL_CTX_set_options(ConfigServerInfo.client_ctx, SSL_OP_NO_SSLv2|SSL_OP_NO_SSLv3|SSL_OP_NO_TICKET);
  SSL_CTX_set_options(ConfigServerInfo.client_ctx, SSL_OP_SINGLE_DH_USE);
  SSL_CTX_set_verify(ConfigServerInfo.client_ctx, SSL_VERIFY_PEER|SSL_VERIFY_CLIENT_ONCE,
                     always_accept_verify_cb);
  SSL_CTX_set_session_cache_mode(ConfigServerInfo.client_ctx, SSL_SESS_CACHE_OFF);
#endif /* HAVE_LIBCRYPTO */
}

int
main(int argc, char *argv[])
{
  /* Check to see if the user is running us as root, which is a nono */
  if (!geteuid())
  {
    fprintf(stderr, "ERROR: This server won't run as root/superuser\n");
    return -1;
  }

  /* Setup corefile size immediately after boot -kre */
  setup_corefile();

  /* Save server boot time right away, so getrusage works correctly */
  set_time();

  /* It's not random, but it ought to be a little harder to guess */
  init_genrand(SystemTime.tv_sec ^ (SystemTime.tv_usec | (getpid() << 20)));

  dlinkAdd(&me, &me.node, &global_client_list);

  ConfigGeneral.dpath      = DPATH;
  ConfigGeneral.spath      = SPATH;
  ConfigGeneral.mpath      = MPATH;
  ConfigGeneral.configfile = CPATH;    /* Server configuration file */
  ConfigGeneral.klinefile  = KPATH;    /* Server kline file         */
  ConfigGeneral.xlinefile  = XPATH;    /* Server xline file         */
  ConfigGeneral.dlinefile  = DLPATH;   /* dline file                */
  ConfigGeneral.resvfile   = RESVPATH; /* resv file                 */

  myargv = argv;
  umask(077);  /* umask 077: u=rwx,g=,o= */

  parseargs(&argc, &argv, myopts);

  if (printVersion)
  {
    printf("ircd: version %s(%s)\n", ircd_version, serno);
    exit(EXIT_SUCCESS);
  }

  if (chdir(ConfigGeneral.dpath))
  {
    perror("chdir");
    exit(EXIT_FAILURE);
  }

  ssl_init();

  if (!server_state.foreground)
  {
    make_daemon();
    close_standard_fds(); /* this needs to be before init_netio()! */
  }
  else
    print_startup(getpid());

  setup_signals();

  /* We need this to initialise the fd array before anything else */
  fdlist_init();
  log_set_file(LOG_TYPE_IRCD, 0, logFileName);

  init_netio();         /* This needs to be setup early ! -- adrian */

  /* Check if there is pidfile and daemon already running */
  check_pidfile(pidFileName);

  mp_pool_init();
  init_dlink_nodes();
  isupport_init();
  dbuf_init();
  hash_init();
  ipcache_init();
  client_init();
  class_init();
  whowas_init();
  watch_init();
  auth_init();          /* Initialise the auth code */
  init_resolver();      /* Needs to be setup before the io loop */
  modules_init();
  read_conf_files(1);   /* cold start init conf files */
  initialize_server_capabs();   /* Set up default_server_capabs */
  initialize_global_set_options();  /* Has to be called after read_conf_files() */
  channel_init();
  read_links_file();
  motd_init();
  user_modes_init();
#ifdef HAVE_LIBGEOIP
  geoip_ctx = GeoIP_new(GEOIP_MEMORY_CACHE);
#endif

  if (EmptyString(ConfigServerInfo.name))
  {
    ilog(LOG_TYPE_IRCD, "ERROR: No server name specified in serverinfo block.");
    exit(EXIT_FAILURE);
  }

  strlcpy(me.name, ConfigServerInfo.name, sizeof(me.name));

  /* serverinfo{} description must exist.  If not, error out.*/
  if (EmptyString(ConfigServerInfo.description))
  {
    ilog(LOG_TYPE_IRCD, "ERROR: No server description specified in serverinfo block.");
    exit(EXIT_FAILURE);
  }

  strlcpy(me.info, ConfigServerInfo.description, sizeof(me.info));

  if (EmptyString(ConfigServerInfo.sid))
  {
    ilog(LOG_TYPE_IRCD, "Generating server ID");
    generate_sid();
  }
  else
  {
    strlcpy(me.id, ConfigServerInfo.sid, sizeof(me.id));
  }

  me.from = &me;
  me.servptr = &me;
  me.connection->lasttime = CurrentTime;
  me.connection->since = CurrentTime;
  me.connection->firsttime = CurrentTime;

  SetMe(&me);
  make_server(&me);

  hash_add_id(&me);
  hash_add_client(&me);

  dlinkAdd(&me, make_dlink_node(), &global_server_list);

  init_uid();

  load_kline_database();
  load_dline_database();
  load_xline_database();
  load_resv_database();

  load_all_modules(1);
  load_conf_modules();
  load_core_modules(1);

  write_pidfile(pidFileName);

  ilog(LOG_TYPE_IRCD, "Server Ready");

  event_addish(&event_cleanup_tklines, NULL);

  /* We want try_connections to be called as soon as possible now! -- adrian */
  /* No, 'cause after a restart it would cause all sorts of nick collides */
  event_addish(&event_try_connections, NULL);

  /* Setup the timeout check. I'll shift it later :)  -- adrian */
  event_add(&event_comm_checktimeouts, NULL);

  event_addish(&event_save_all_databases, NULL);

  if (ConfigServerHide.links_delay > 0)
  {
    event_write_links_file.when = ConfigServerHide.links_delay;
    event_addish(&event_write_links_file, NULL);
  }
  else
    ConfigServerHide.links_disabled = 1;

  if (splitmode)
    event_addish(&splitmode_event, NULL);

  io_loop();
  return 0;
}
Revision:	6354
Committed:	Fri Aug 14 17:53:44 2015 UTC (10 years ago) by michael
Content type:	text/x-csrc
File size:	16234 byte(s)
Log Message:	- Rename server capabilities flags from CAP_* to CAPAB_*
#	User	Rev	Content
1	adx	30	/*
2	michael	2916	* ircd-hybrid: an advanced, lightweight Internet Relay Chat Daemon (ircd)
3	adx	30	*
4	michael	5347	* Copyright (c) 1997-2015 ircd-hybrid development team
5	adx	30	*
6			* This program is free software; you can redistribute it and/or modify
7			* it under the terms of the GNU General Public License as published by
8			* the Free Software Foundation; either version 2 of the License, or
9			* (at your option) any later version.
10			*
11			* This program is distributed in the hope that it will be useful,
12			* but WITHOUT ANY WARRANTY; without even the implied warranty of
13			* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
14			* GNU General Public License for more details.
15			*
16			* You should have received a copy of the GNU General Public License
17			* along with this program; if not, write to the Free Software
18	michael	4565	* Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301
19	adx	30	* USA
20			*/
21
22	michael	2916	/*! \file ircd.c
23			* \brief Starts up and runs the ircd.
24			* \version $Id$
25			*/
26
27	adx	30	#include "stdinc.h"
28	michael	3347	#include "user.h"
29	michael	1011	#include "list.h"
30	adx	30	#include "ircd.h"
31			#include "channel.h"
32			#include "client.h"
33			#include "event.h"
34			#include "fdlist.h"
35			#include "hash.h"
36	michael	6161	#include "id.h"
37	adx	30	#include "irc_string.h"
38			#include "ircd_signal.h"
39			#include "motd.h"
40	michael	1632	#include "conf.h"
41	adx	30	#include "hostmask.h"
42			#include "parse.h"
43	michael	3322	#include "res.h"
44	adx	30	#include "restart.h"
45	michael	982	#include "rng_mt.h"
46	michael	3324	#include "auth.h"
47	adx	30	#include "s_bsd.h"
48	michael	1309	#include "log.h"
49	michael	3347	#include "server.h" /* try_connections */
50	adx	30	#include "send.h"
51			#include "whowas.h"
52			#include "modules.h"
53			#include "memory.h"
54	michael	1654	#include "mempool.h"
55	adx	30	#include "ircd_getopt.h"
56	michael	876	#include "watch.h"
57	michael	1622	#include "conf_db.h"
58	michael	1632	#include "conf_class.h"
59	michael	4325	#include "ipcache.h"
60	michael	6185	#include "isupport.h"
61	adx	30
62	michael	1858
63			#ifdef HAVE_LIBGEOIP
64			GeoIP *geoip_ctx;
65			#endif
66	michael	2872
67	michael	5737	struct SetOptions GlobalSetOptions; /* /quote set variables */
68	michael	5602	struct Counter Count;
69			struct ServerState_t server_state;
70			struct ServerStatistics ServerStats;
71	adx	30	struct timeval SystemTime;
72	michael	5737	struct Connection meConnection; /* That's also part of me */
73	michael	5470	struct Client me = { .connection = &meConnection }; /* That's me */
74	adx	30
75	michael	5460	char **myargv;
76	adx	30	const char *logFileName = LPATH;
77			const char *pidFileName = PPATH;
78
79	michael	5460	unsigned int dorehash;
80			unsigned int doremotd;
81	michael	1013	unsigned int splitmode;
82			unsigned int splitchecking;
83			unsigned int split_users;
84	adx	30	unsigned int split_servers;
85
86	michael	4094	static struct event event_cleanup_tklines =
87			{
88			.name = "cleanup_tklines",
89			.handler = cleanup_tklines,
90			.when = CLEANUP_TKLINES_TIME
91			};
92
93			static struct event event_try_connections =
94			{
95			.name = "try_connections",
96			.handler = try_connections,
97			.when = STARTUP_CONNECTIONS_TIME
98			};
99
100			static struct event event_comm_checktimeouts =
101			{
102			.name = "comm_checktimeouts",
103			.handler = comm_checktimeouts,
104			.when = 1
105			};
106
107			static struct event event_save_all_databases =
108			{
109			.name = "save_all_databases",
110			.handler = save_all_databases,
111			.when = DATABASE_UPDATE_TIMEOUT
112			};
113
114			struct event event_write_links_file =
115			{
116			.name = "write_links_file",
117			.handler = write_links_file,
118			};
119
120
121	adx	30	/*
122			* print_startup - print startup information
123			*/
124			static void
125			print_startup(int pid)
126			{
127	michael	2646	printf("ircd: version %s(%s)\n", ircd_version, serno);
128	adx	30	printf("ircd: pid %d\n", pid);
129			printf("ircd: running in %s mode from %s\n", !server_state.foreground ? "background"
130	michael	4340	: "foreground", ConfigGeneral.dpath);
131	adx	30	}
132
133			static void
134			make_daemon(void)
135			{
136			int pid;
137
138			if ((pid = fork()) < 0)
139			{
140			perror("fork");
141			exit(EXIT_FAILURE);
142			}
143			else if (pid > 0)
144			{
145			print_startup(pid);
146			exit(EXIT_SUCCESS);
147			}
148
149			setsid();
150			}
151
152			static int printVersion = 0;
153
154	michael	3215	static struct lgetopt myopts[] =
155			{
156	michael	4340	{"configfile", &ConfigGeneral.configfile,
157	adx	30	STRING, "File to use for ircd.conf"},
158	michael	4340	{"klinefile", &ConfigGeneral.klinefile,
159	michael	1718	STRING, "File to use for kline database"},
160	michael	4340	{"dlinefile", &ConfigGeneral.dlinefile,
161	michael	1718	STRING, "File to use for dline database"},
162	michael	4340	{"xlinefile", &ConfigGeneral.xlinefile,
163	michael	1718	STRING, "File to use for xline database"},
164	michael	4340	{"resvfile", &ConfigGeneral.resvfile,
165	michael	1718	STRING, "File to use for resv database"},
166	michael	2916	{"logfile", &logFileName,
167	adx	30	STRING, "File to use for ircd.log"},
168			{"pidfile", &pidFileName,
169			STRING, "File to use for process ID"},
170	michael	2916	{"foreground", &server_state.foreground,
171	adx	30	YESNO, "Run in foreground (don't detach)"},
172	michael	2916	{"version", &printVersion,
173	adx	30	YESNO, "Print version and exit"},
174			{"help", NULL, USAGE, "Print this text"},
175			{NULL, NULL, STRING, NULL},
176			};
177
178			void
179			set_time(void)
180			{
181	michael	2978	struct timeval newtime = { .tv_sec = 0, .tv_usec = 0 };
182	adx	30
183			if (gettimeofday(&newtime, NULL) == -1)
184			{
185	michael	1247	ilog(LOG_TYPE_IRCD, "Clock Failure (%s), TS can be corrupted",
186	adx	30	strerror(errno));
187	michael	6318	sendto_realops_flags(UMODE_SERVNOTICE, L_ALL, SEND_NOTICE,
188	adx	30	"Clock Failure (%s), TS can be corrupted",
189			strerror(errno));
190	michael	3167	server_die("Clock Failure", 1);
191	adx	30	}
192
193			if (newtime.tv_sec < CurrentTime)
194			{
195	michael	2980	ilog(LOG_TYPE_IRCD, "System clock is running backwards - (%lu < %lu)",
196			(unsigned long)newtime.tv_sec, (unsigned long)CurrentTime);
197			sendto_realops_flags(UMODE_DEBUG, L_ALL, SEND_NOTICE,
198			"System clock is running backwards - (%lu < %lu)",
199			(unsigned long)newtime.tv_sec,
200			(unsigned long)CurrentTime);
201	adx	30	set_back_events(CurrentTime - newtime.tv_sec);
202			}
203
204			SystemTime.tv_sec = newtime.tv_sec;
205			SystemTime.tv_usec = newtime.tv_usec;
206			}
207
208			static void
209			io_loop(void)
210			{
211	michael	3215	while (1)
212	adx	30	{
213			if (listing_client_list.head)
214			{
215	michael	4815	dlink_node node = NULL, node_next = NULL;
216			DLINK_FOREACH_SAFE(node, node_next, listing_client_list.head)
217			safe_list_channels(node->data, 0);
218	adx	30	}
219
220	michael	4094	/* Run pending events */
221			event_run();
222	adx	30
223			comm_select();
224			exit_aborted_clients();
225			free_exited_clients();
226
227			/* Check to see whether we have to rehash the configuration .. */
228			if (dorehash)
229			{
230	michael	4982	conf_rehash(1);
231	adx	30	dorehash = 0;
232			}
233	michael	3215
234	adx	30	if (doremotd)
235			{
236	michael	2150	motd_recache();
237	michael	6318	sendto_realops_flags(UMODE_SERVNOTICE, L_ALL, SEND_NOTICE,
238	michael	3065	"Got signal SIGUSR1, reloading motd file(s)");
239	adx	30	doremotd = 0;
240			}
241			}
242			}
243
244			/* initalialize_global_set_options()
245			*
246			* inputs - none
247			* output - none
248	michael	2916	* side effects - This sets all global set options needed
249	adx	30	*/
250			static void
251			initialize_global_set_options(void)
252			{
253	michael	5489	GlobalSetOptions.maxclients = ConfigServerInfo.default_max_clients;
254	michael	5499	GlobalSetOptions.autoconn = 1;
255	adx	30	GlobalSetOptions.spam_time = MIN_JOIN_LEAVE_TIME;
256	michael	5499	GlobalSetOptions.spam_num = MAX_JOIN_LEAVE_COUNT;
257			GlobalSetOptions.floodcount = ConfigGeneral.default_floodcount;
258	michael	5489	GlobalSetOptions.joinfloodcount = ConfigChannel.default_join_flood_count;
259			GlobalSetOptions.joinfloodtime = ConfigChannel.default_join_flood_time;
260	adx	30
261			split_servers = ConfigChannel.default_split_server_count;
262			split_users = ConfigChannel.default_split_user_count;
263
264			if (split_users && split_servers && (ConfigChannel.no_create_on_split \|\|
265			ConfigChannel.no_join_on_split))
266			{
267			splitmode = 1;
268			splitchecking = 1;
269			}
270
271			GlobalSetOptions.ident_timeout = IDENT_TIMEOUT;
272			}
273
274			/* initialize_server_capabs()
275			*
276			* inputs - none
277			* output - none
278			*/
279			static void
280			initialize_server_capabs(void)
281			{
282	michael	6354	add_capability("QS", CAPAB_QS);
283			add_capability("EOB", CAPAB_EOB);
284			add_capability("CLUSTER", CAPAB_CLUSTER);
285			add_capability("SVS", CAPAB_SVS);
286			add_capability("CHW", CAPAB_CHW);
287			add_capability("HOPS", CAPAB_HOPS);
288	adx	30	}
289
290			/* write_pidfile()
291			*
292			* inputs - filename+path of pid file
293			* output - NONE
294			* side effects - write the pid of the ircd to filename
295			*/
296			static void
297			write_pidfile(const char *filename)
298			{
299	michael	1325	FILE *fb;
300	adx	30
301	michael	1325	if ((fb = fopen(filename, "w")))
302	adx	30	{
303	michael	2691	char buff[IRCD_BUFSIZE];
304	adx	30	unsigned int pid = (unsigned int)getpid();
305
306	michael	1325	snprintf(buff, sizeof(buff), "%u\n", pid);
307
308	michael	4736	if (fputs(buff, fb) == -1)
309	michael	5737	ilog(LOG_TYPE_IRCD, "Error writing to pid file %s: %s",
310			filename, strerror(errno));
311	adx	30
312	michael	1325	fclose(fb);
313	adx	30	}
314			else
315	michael	5566	ilog(LOG_TYPE_IRCD, "Error opening pid file %s: %s",
316	michael	4748	filename, strerror(errno));
317	adx	30	}
318
319			/* check_pidfile()
320			*
321			* inputs - filename+path of pid file
322			* output - none
323			* side effects - reads pid from pidfile and checks if ircd is in process
324			* list. if it is, gracefully exits
325			* -kre
326			*/
327			static void
328			check_pidfile(const char *filename)
329			{
330	michael	1325	FILE *fb;
331	michael	2691	char buff[IRCD_BUFSIZE];
332	adx	30	pid_t pidfromfile;
333
334	michael	1325	if ((fb = fopen(filename, "r")))
335	adx	30	{
336	michael	4733	if (!fgets(buff, 20, fb))
337	michael	6260	ilog(LOG_TYPE_IRCD, "Error reading from pid file %s: %s",
338			filename, strerror(errno));
339	adx	30	else
340			{
341			pidfromfile = atoi(buff);
342
343			if (!kill(pidfromfile, 0))
344			{
345			/* log(L_ERROR, "Server is already running"); */
346			printf("ircd: daemon is already running\n");
347			exit(-1);
348			}
349			}
350
351	michael	1325	fclose(fb);
352	adx	30	}
353			else if (errno != ENOENT)
354	michael	6260	ilog(LOG_TYPE_IRCD, "Error opening pid file %s: %s",
355			filename, strerror(errno));
356	adx	30	}
357
358			/* setup_corefile()
359			*
360			* inputs - nothing
361			* output - nothing
362			* side effects - setups corefile to system limits.
363			* -kre
364			*/
365			static void
366			setup_corefile(void)
367			{
368			#ifdef HAVE_SYS_RESOURCE_H
369			struct rlimit rlim; /* resource limits */
370
371			/* Set corefilesize to maximum */
372			if (!getrlimit(RLIMIT_CORE, &rlim))
373			{
374			rlim.rlim_cur = rlim.rlim_max;
375			setrlimit(RLIMIT_CORE, &rlim);
376			}
377			#endif
378			}
379
380	michael	2228	#ifdef HAVE_LIBCRYPTO
381			static int
382			always_accept_verify_cb(int preverify_ok, X509_STORE_CTX *x509_ctx)
383			{
384			return 1;
385			}
386			#endif
387
388	adx	30	/* init_ssl()
389			*
390			* inputs - nothing
391			* output - nothing
392			* side effects - setups SSL context.
393			*/
394			static void
395	michael	1798	ssl_init(void)
396	adx	30	{
397			#ifdef HAVE_LIBCRYPTO
398			SSL_load_error_strings();
399			SSLeay_add_ssl_algorithms();
400
401	michael	4733	if (!(ConfigServerInfo.server_ctx = SSL_CTX_new(SSLv23_server_method())))
402	adx	30	{
403	michael	4129	const char *s = ERR_lib_error_string(ERR_get_error());
404	adx	30
405	michael	4129	fprintf(stderr, "ERROR: Could not initialize the SSL Server context -- %s\n", s);
406	michael	4763	ilog(LOG_TYPE_IRCD, "ERROR: Could not initialize the SSL Server context -- %s", s);
407	michael	4497	exit(EXIT_FAILURE);
408	michael	4751	return; /* Not reached */
409	adx	30	}
410
411	michael	4730	SSL_CTX_set_options(ConfigServerInfo.server_ctx, SSL_OP_NO_SSLv2\|SSL_OP_NO_SSLv3\|SSL_OP_NO_TICKET);
412	michael	4593	SSL_CTX_set_options(ConfigServerInfo.server_ctx, SSL_OP_SINGLE_DH_USE\|SSL_OP_CIPHER_SERVER_PREFERENCE);
413	michael	4340	SSL_CTX_set_verify(ConfigServerInfo.server_ctx, SSL_VERIFY_PEER\|SSL_VERIFY_CLIENT_ONCE,
414	michael	2228	always_accept_verify_cb);
415	michael	4730	SSL_CTX_set_session_cache_mode(ConfigServerInfo.server_ctx, SSL_SESS_CACHE_OFF);
416	michael	4892	SSL_CTX_set_cipher_list(ConfigServerInfo.server_ctx, "EECDH+HIGH:EDH+HIGH:HIGH:!aNULL");
417	adx	30
418	michael	4744	#if OPENSSL_VERSION_NUMBER >= 0x009080FFL && !defined(OPENSSL_NO_ECDH)
419	michael	4070	{
420			EC_KEY *key = EC_KEY_new_by_curve_name(NID_X9_62_prime256v1);
421
422			if (key)
423			{
424	michael	4340	SSL_CTX_set_tmp_ecdh(ConfigServerInfo.server_ctx, key);
425	michael	4070	EC_KEY_free(key);
426			}
427			}
428
429	michael	4340	SSL_CTX_set_options(ConfigServerInfo.server_ctx, SSL_OP_SINGLE_ECDH_USE);
430	michael	4070	#endif
431
432	michael	4733	if (!(ConfigServerInfo.client_ctx = SSL_CTX_new(SSLv23_client_method())))
433	michael	1303	{
434	michael	4129	const char *s = ERR_lib_error_string(ERR_get_error());
435	michael	1303
436	michael	4129	fprintf(stderr, "ERROR: Could not initialize the SSL Client context -- %s\n", s);
437	michael	4763	ilog(LOG_TYPE_IRCD, "ERROR: Could not initialize the SSL Client context -- %s", s);
438	michael	4497	exit(EXIT_FAILURE);
439	michael	4751	return; /* Not reached */
440	michael	1303	}
441
442	michael	4730	SSL_CTX_set_options(ConfigServerInfo.client_ctx, SSL_OP_NO_SSLv2\|SSL_OP_NO_SSLv3\|SSL_OP_NO_TICKET);
443	michael	4340	SSL_CTX_set_options(ConfigServerInfo.client_ctx, SSL_OP_SINGLE_DH_USE);
444			SSL_CTX_set_verify(ConfigServerInfo.client_ctx, SSL_VERIFY_PEER\|SSL_VERIFY_CLIENT_ONCE,
445	michael	2228	always_accept_verify_cb);
446	michael	4730	SSL_CTX_set_session_cache_mode(ConfigServerInfo.client_ctx, SSL_SESS_CACHE_OFF);
447	adx	30	#endif /* HAVE_LIBCRYPTO */
448			}
449
450			int
451			main(int argc, char *argv[])
452			{
453	michael	2253	/* Check to see if the user is running us as root, which is a nono */
454	michael	4733	if (!geteuid())
455	adx	30	{
456	michael	3525	fprintf(stderr, "ERROR: This server won't run as root/superuser\n");
457	michael	982	return -1;
458	adx	30	}
459
460			/* Setup corefile size immediately after boot -kre */
461			setup_corefile();
462
463	michael	5545	/* Save server boot time right away, so getrusage works correctly */
464	adx	30	set_time();
465
466	michael	5545	/* It's not random, but it ought to be a little harder to guess */
467	michael	982	init_genrand(SystemTime.tv_sec ^ (SystemTime.tv_usec \| (getpid() << 20)));
468
469	michael	5545	dlinkAdd(&me, &me.node, &global_client_list);
470
471	michael	4340	ConfigGeneral.dpath = DPATH;
472			ConfigGeneral.spath = SPATH;
473			ConfigGeneral.mpath = MPATH;
474			ConfigGeneral.configfile = CPATH; /* Server configuration file */
475			ConfigGeneral.klinefile = KPATH; /* Server kline file */
476			ConfigGeneral.xlinefile = XPATH; /* Server xline file */
477			ConfigGeneral.dlinefile = DLPATH; /* dline file */
478			ConfigGeneral.resvfile = RESVPATH; /* resv file */
479	michael	1702
480	adx	30	myargv = argv;
481	michael	5723	umask(077); /* umask 077: u=rwx,g=,o= */
482	adx	30
483			parseargs(&argc, &argv, myopts);
484
485			if (printVersion)
486			{
487	michael	2646	printf("ircd: version %s(%s)\n", ircd_version, serno);
488	adx	30	exit(EXIT_SUCCESS);
489			}
490
491	michael	4340	if (chdir(ConfigGeneral.dpath))
492	adx	30	{
493			perror("chdir");
494			exit(EXIT_FAILURE);
495			}
496
497	michael	1798	ssl_init();
498	adx	30
499			if (!server_state.foreground)
500			{
501			make_daemon();
502			close_standard_fds(); /* this needs to be before init_netio()! */
503			}
504			else
505			print_startup(getpid());
506
507			setup_signals();
508
509			/* We need this to initialise the fd array before anything else */
510			fdlist_init();
511	michael	1831	log_set_file(LOG_TYPE_IRCD, 0, logFileName);
512	michael	4415
513	michael	2632	init_netio(); /* This needs to be setup early ! -- adrian */
514	michael	2253
515	adx	30	/* Check if there is pidfile and daemon already running */
516			check_pidfile(pidFileName);
517
518	michael	1654	mp_pool_init();
519	adx	30	init_dlink_nodes();
520	michael	6185	isupport_init();
521	adx	30	dbuf_init();
522	michael	1798	hash_init();
523	michael	4319	ipcache_init();
524	michael	1798	client_init();
525	michael	1632	class_init();
526	michael	1358	whowas_init();
527	michael	876	watch_init();
528	michael	1798	auth_init(); /* Initialise the auth code */
529	michael	998	init_resolver(); /* Needs to be setup before the io loop */
530	michael	1404	modules_init();
531	adx	30	read_conf_files(1); /* cold start init conf files */
532			initialize_server_capabs(); /* Set up default_server_capabs */
533	michael	5489	initialize_global_set_options(); /* Has to be called after read_conf_files() */
534	michael	1798	channel_init();
535	michael	2216	read_links_file();
536	michael	2150	motd_init();
537	michael	6189	user_modes_init();
538	michael	1858	#ifdef HAVE_LIBGEOIP
539			geoip_ctx = GeoIP_new(GEOIP_MEMORY_CACHE);
540			#endif
541	adx	30
542	michael	4340	if (EmptyString(ConfigServerInfo.name))
543	michael	1115	{
544	michael	1247	ilog(LOG_TYPE_IRCD, "ERROR: No server name specified in serverinfo block.");
545	michael	1115	exit(EXIT_FAILURE);
546			}
547
548	michael	4340	strlcpy(me.name, ConfigServerInfo.name, sizeof(me.name));
549	adx	30
550			/* serverinfo{} description must exist. If not, error out.*/
551	michael	4340	if (EmptyString(ConfigServerInfo.description))
552	adx	30	{
553	michael	1247	ilog(LOG_TYPE_IRCD, "ERROR: No server description specified in serverinfo block.");
554	adx	30	exit(EXIT_FAILURE);
555			}
556	michael	885
557	michael	4340	strlcpy(me.info, ConfigServerInfo.description, sizeof(me.info));
558	adx	30
559	michael	6156	if (EmptyString(ConfigServerInfo.sid))
560			{
561			ilog(LOG_TYPE_IRCD, "Generating server ID");
562			generate_sid();
563			}
564			else
565			{
566			strlcpy(me.id, ConfigServerInfo.sid, sizeof(me.id));
567			}
568
569	michael	5545	me.from = &me;
570			me.servptr = &me;
571			me.connection->lasttime = CurrentTime;
572			me.connection->since = CurrentTime;
573	michael	4588	me.connection->firsttime = CurrentTime;
574	adx	30
575			SetMe(&me);
576			make_server(&me);
577
578	michael	1115	hash_add_id(&me);
579	adx	30	hash_add_client(&me);
580	michael	2916
581	michael	4209	dlinkAdd(&me, make_dlink_node(), &global_server_list);
582	adx	30
583	michael	6156	init_uid();
584
585	michael	1622	load_kline_database();
586			load_dline_database();
587			load_xline_database();
588			load_resv_database();
589
590	adx	30	load_all_modules(1);
591			load_conf_modules();
592			load_core_modules(1);
593	michael	1115
594	adx	30	write_pidfile(pidFileName);
595
596	michael	1247	ilog(LOG_TYPE_IRCD, "Server Ready");
597	adx	30
598	michael	4094	event_addish(&event_cleanup_tklines, NULL);
599	adx	30
600			/* We want try_connections to be called as soon as possible now! -- adrian */
601			/* No, 'cause after a restart it would cause all sorts of nick collides */
602	michael	4094	event_addish(&event_try_connections, NULL);
603	adx	30
604			/* Setup the timeout check. I'll shift it later :) -- adrian */
605	michael	4399	event_add(&event_comm_checktimeouts, NULL);
606	adx	30
607	michael	4094	event_addish(&event_save_all_databases, NULL);
608	michael	1625
609	adx	30	if (ConfigServerHide.links_delay > 0)
610	michael	4094	{
611			event_write_links_file.when = ConfigServerHide.links_delay;
612			event_addish(&event_write_links_file, NULL);
613			}
614	adx	30	else
615			ConfigServerHide.links_disabled = 1;
616
617			if (splitmode)
618	michael	4133	event_addish(&splitmode_event, NULL);
619	adx	30
620			io_loop();
621	michael	885	return 0;
622	adx	30	}