1 |
|
/* |
2 |
< |
* ircd-hybrid: an advanced Internet Relay Chat Daemon(ircd). |
3 |
< |
* s_serv.c: Server related functions. |
2 |
> |
* ircd-hybrid: an advanced, lightweight Internet Relay Chat Daemon (ircd) |
3 |
|
* |
4 |
< |
* Copyright (C) 2005 by the past and present ircd coders, and others. |
4 |
> |
* Copyright (c) 1997-2014 ircd-hybrid development team |
5 |
|
* |
6 |
|
* This program is free software; you can redistribute it and/or modify |
7 |
|
* it under the terms of the GNU General Public License as published by |
17 |
|
* along with this program; if not, write to the Free Software |
18 |
|
* Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 |
19 |
|
* USA |
20 |
< |
* |
21 |
< |
* $Id$ |
20 |
> |
*/ |
21 |
> |
|
22 |
> |
/*! \file s_serv.c |
23 |
> |
* \brief Server related functions. |
24 |
> |
* \version $Id$ |
25 |
|
*/ |
26 |
|
|
27 |
|
#include "stdinc.h" |
33 |
|
#include "channel.h" |
34 |
|
#include "channel_mode.h" |
35 |
|
#include "client.h" |
34 |
– |
#include "common.h" |
35 |
– |
#include "dbuf.h" |
36 |
|
#include "event.h" |
37 |
|
#include "fdlist.h" |
38 |
|
#include "hash.h" |
39 |
|
#include "irc_string.h" |
40 |
– |
#include "sprintf_irc.h" |
40 |
|
#include "ircd.h" |
41 |
|
#include "ircd_defs.h" |
42 |
|
#include "s_bsd.h" |
43 |
|
#include "numeric.h" |
44 |
|
#include "packet.h" |
45 |
|
#include "irc_res.h" |
46 |
< |
#include "s_conf.h" |
46 |
> |
#include "conf.h" |
47 |
|
#include "s_serv.h" |
48 |
< |
#include "s_log.h" |
48 |
> |
#include "log.h" |
49 |
> |
#include "s_misc.h" |
50 |
|
#include "s_user.h" |
51 |
|
#include "send.h" |
52 |
|
#include "memory.h" |
53 |
< |
#include "channel.h" /* chcap_usage_counts stuff...*/ |
53 |
> |
#include "channel.h" |
54 |
> |
#include "parse.h" |
55 |
|
|
56 |
|
#define MIN_CONN_FREQ 300 |
57 |
|
|
58 |
+ |
dlink_list flatten_links; |
59 |
|
static dlink_list cap_list = { NULL, NULL, 0 }; |
60 |
|
static void server_burst(struct Client *); |
59 |
– |
static int fork_server(struct Client *); |
61 |
|
static void burst_all(struct Client *); |
62 |
|
static void send_tb(struct Client *client_p, struct Channel *chptr); |
63 |
|
|
64 |
|
static CNCB serv_connect_callback; |
65 |
|
|
65 |
– |
static void start_io(struct Client *); |
66 |
|
static void burst_members(struct Client *, struct Channel *); |
67 |
|
|
68 |
– |
static SlinkRplHnd slink_error; |
69 |
– |
static SlinkRplHnd slink_zipstats; |
70 |
– |
|
71 |
– |
|
72 |
– |
#ifdef HAVE_LIBCRYPTO |
73 |
– |
struct EncCapability CipherTable[] = |
74 |
– |
{ |
75 |
– |
#ifdef HAVE_EVP_BF_CFB |
76 |
– |
{ "BF/168", CAP_ENC_BF_168, 24, CIPHER_BF }, |
77 |
– |
{ "BF/128", CAP_ENC_BF_128, 16, CIPHER_BF }, |
78 |
– |
#endif |
79 |
– |
#ifdef HAVE_EVP_CAST5_CFB |
80 |
– |
{ "CAST/128", CAP_ENC_CAST_128, 16, CIPHER_CAST }, |
81 |
– |
#endif |
82 |
– |
#ifdef HAVE_EVP_IDEA_CFB |
83 |
– |
{ "IDEA/128", CAP_ENC_IDEA_128, 16, CIPHER_IDEA }, |
84 |
– |
#endif |
85 |
– |
#ifdef HAVE_EVP_RC5_32_12_16_CFB |
86 |
– |
{ "RC5.16/128", CAP_ENC_RC5_16_128, 16, CIPHER_RC5_16 }, |
87 |
– |
{ "RC5.12/128", CAP_ENC_RC5_12_128, 16, CIPHER_RC5_12 }, |
88 |
– |
{ "RC5.8/128", CAP_ENC_RC5_8_128, 16, CIPHER_RC5_8 }, |
89 |
– |
#endif |
90 |
– |
#ifdef HAVE_EVP_DES_EDE3_CFB |
91 |
– |
{ "3DES/168", CAP_ENC_3DES_168, 24, CIPHER_3DES }, |
92 |
– |
#endif |
93 |
– |
#ifdef HAVE_EVP_DES_CFB |
94 |
– |
{ "DES/56", CAP_ENC_DES_56, 8, CIPHER_DES }, |
95 |
– |
#endif |
96 |
– |
{ 0, 0, 0, 0 } |
97 |
– |
}; |
98 |
– |
#endif |
99 |
– |
|
100 |
– |
struct SlinkRplDef slinkrpltab[] = { |
101 |
– |
{ SLINKRPL_ERROR, slink_error, SLINKRPL_FLAG_DATA }, |
102 |
– |
{ SLINKRPL_ZIPSTATS, slink_zipstats, SLINKRPL_FLAG_DATA }, |
103 |
– |
{ 0, 0, 0 }, |
104 |
– |
}; |
105 |
– |
|
106 |
– |
|
107 |
– |
void |
108 |
– |
slink_error(unsigned int rpl, unsigned int len, unsigned char *data, |
109 |
– |
struct Client *server_p) |
110 |
– |
{ |
111 |
– |
assert(rpl == SLINKRPL_ERROR); |
112 |
– |
assert(len < 256); |
113 |
– |
|
114 |
– |
data[len-1] = '\0'; |
115 |
– |
|
116 |
– |
sendto_realops_flags(UMODE_ALL, L_ALL, "SlinkError for %s: %s", |
117 |
– |
server_p->name, data); |
118 |
– |
/* XXX should this be exit_client? */ |
119 |
– |
exit_client(server_p, &me, "servlink error -- terminating link"); |
120 |
– |
} |
121 |
– |
|
122 |
– |
void |
123 |
– |
slink_zipstats(unsigned int rpl, unsigned int len, unsigned char *data, |
124 |
– |
struct Client *server_p) |
125 |
– |
{ |
126 |
– |
struct ZipStats zipstats; |
127 |
– |
uint64_t in = 0, in_wire = 0, out = 0, out_wire = 0; |
128 |
– |
int i = 0; |
129 |
– |
|
130 |
– |
assert(rpl == SLINKRPL_ZIPSTATS); |
131 |
– |
assert(len == 16); |
132 |
– |
assert(IsCapable(server_p, CAP_ZIP)); |
133 |
– |
|
134 |
– |
/* Yes, it needs to be done this way, no we cannot let the compiler |
135 |
– |
* work with the pointer to the structure. This works around a GCC |
136 |
– |
* bug on SPARC that affects all versions at the time of this writing. |
137 |
– |
* I will feed you to the creatures living in RMS's beard if you do |
138 |
– |
* not leave this as is, without being sure that you are not causing |
139 |
– |
* regression for most of our installed SPARC base. |
140 |
– |
* -jmallett, 04/27/2002 |
141 |
– |
*/ |
142 |
– |
memcpy(&zipstats, &server_p->localClient->zipstats, sizeof(struct ZipStats)); |
143 |
– |
|
144 |
– |
in |= (data[i++] << 24); |
145 |
– |
in |= (data[i++] << 16); |
146 |
– |
in |= (data[i++] << 8); |
147 |
– |
in |= (data[i++] ); |
148 |
– |
|
149 |
– |
in_wire |= (data[i++] << 24); |
150 |
– |
in_wire |= (data[i++] << 16); |
151 |
– |
in_wire |= (data[i++] << 8); |
152 |
– |
in_wire |= (data[i++] ); |
153 |
– |
|
154 |
– |
out |= (data[i++] << 24); |
155 |
– |
out |= (data[i++] << 16); |
156 |
– |
out |= (data[i++] << 8); |
157 |
– |
out |= (data[i++] ); |
158 |
– |
|
159 |
– |
out_wire |= (data[i++] << 24); |
160 |
– |
out_wire |= (data[i++] << 16); |
161 |
– |
out_wire |= (data[i++] << 8); |
162 |
– |
out_wire |= (data[i++] ); |
163 |
– |
|
164 |
– |
/* This macro adds b to a if a plus b is not an overflow, and sets the |
165 |
– |
* value of a to b if it is. |
166 |
– |
* Add and Set if No Overflow. |
167 |
– |
*/ |
168 |
– |
#define ASNO(a, b) a = (a + b >= a ? a + b : b) |
169 |
– |
|
170 |
– |
ASNO(zipstats.in, in); |
171 |
– |
ASNO(zipstats.out, out); |
172 |
– |
ASNO(zipstats.in_wire, in_wire); |
173 |
– |
ASNO(zipstats.out_wire, out_wire); |
174 |
– |
|
175 |
– |
if (zipstats.in > 0) |
176 |
– |
zipstats.in_ratio = (((double)(zipstats.in - zipstats.in_wire) / |
177 |
– |
(double)zipstats.in) * 100.00); |
178 |
– |
else |
179 |
– |
zipstats.in_ratio = 0; |
180 |
– |
|
181 |
– |
if (zipstats.out > 0) |
182 |
– |
zipstats.out_ratio = (((double)(zipstats.out - zipstats.out_wire) / |
183 |
– |
(double)zipstats.out) * 100.00); |
184 |
– |
else |
185 |
– |
zipstats.out_ratio = 0; |
186 |
– |
|
187 |
– |
memcpy(&server_p->localClient->zipstats, &zipstats, sizeof(struct ZipStats)); |
188 |
– |
} |
189 |
– |
|
190 |
– |
void |
191 |
– |
collect_zipstats(void *unused) |
192 |
– |
{ |
193 |
– |
dlink_node *ptr = NULL; |
194 |
– |
|
195 |
– |
DLINK_FOREACH(ptr, serv_list.head) |
196 |
– |
{ |
197 |
– |
struct Client *target_p = ptr->data; |
198 |
– |
|
199 |
– |
if (IsCapable(target_p, CAP_ZIP)) |
200 |
– |
{ |
201 |
– |
/* only bother if we haven't already got something queued... */ |
202 |
– |
if (!target_p->localClient->slinkq) |
203 |
– |
{ |
204 |
– |
target_p->localClient->slinkq = MyMalloc(1); /* sigh.. */ |
205 |
– |
target_p->localClient->slinkq[0] = SLINKCMD_ZIPSTATS; |
206 |
– |
target_p->localClient->slinkq_ofs = 0; |
207 |
– |
target_p->localClient->slinkq_len = 1; |
208 |
– |
send_queued_slink_write(target_p); |
209 |
– |
} |
210 |
– |
} |
211 |
– |
} |
212 |
– |
} |
213 |
– |
|
214 |
– |
#ifdef HAVE_LIBCRYPTO |
215 |
– |
struct EncCapability * |
216 |
– |
check_cipher(struct Client *client_p, struct AccessItem *aconf) |
217 |
– |
{ |
218 |
– |
struct EncCapability *epref = NULL; |
219 |
– |
|
220 |
– |
/* Use connect{} specific info if available */ |
221 |
– |
if (aconf->cipher_preference) |
222 |
– |
epref = aconf->cipher_preference; |
223 |
– |
else if (ConfigFileEntry.default_cipher_preference) |
224 |
– |
epref = ConfigFileEntry.default_cipher_preference; |
225 |
– |
|
226 |
– |
/* |
227 |
– |
* If the server supports the capability in hand, return the matching |
228 |
– |
* conf struct. Otherwise, return NULL (an error). |
229 |
– |
*/ |
230 |
– |
if (epref && IsCapableEnc(client_p, epref->cap)) |
231 |
– |
return epref; |
232 |
– |
|
233 |
– |
return NULL; |
234 |
– |
} |
235 |
– |
#endif /* HAVE_LIBCRYPTO */ |
236 |
– |
|
68 |
|
/* |
69 |
|
* write_links_file |
70 |
|
* |
74 |
|
* but in no particular order. |
75 |
|
*/ |
76 |
|
void |
77 |
< |
write_links_file(void* notused) |
77 |
> |
write_links_file(void *notused) |
78 |
|
{ |
79 |
< |
MessageFileLine *next_mptr = 0; |
80 |
< |
MessageFileLine *mptr = 0; |
81 |
< |
MessageFileLine *currentMessageLine = 0; |
251 |
< |
MessageFileLine *newMessageLine = 0; |
252 |
< |
MessageFile *MessageFileptr; |
253 |
< |
const char *p; |
254 |
< |
FBFILE *file; |
255 |
< |
char buff[512]; |
256 |
< |
dlink_node *ptr; |
257 |
< |
|
258 |
< |
MessageFileptr = &ConfigFileEntry.linksfile; |
79 |
> |
FILE *file = NULL; |
80 |
> |
dlink_node *ptr = NULL, *ptr_next = NULL; |
81 |
> |
char buff[IRCD_BUFSIZE] = { '\0' }; |
82 |
|
|
83 |
< |
if ((file = fbopen(MessageFileptr->fileName, "w")) == NULL) |
83 |
> |
if ((file = fopen(LIPATH, "w")) == NULL) |
84 |
|
return; |
85 |
|
|
86 |
< |
for (mptr = MessageFileptr->contentsOfFile; mptr; mptr = next_mptr) |
86 |
> |
DLINK_FOREACH_SAFE(ptr, ptr_next, flatten_links.head) |
87 |
|
{ |
88 |
< |
next_mptr = mptr->next; |
89 |
< |
MyFree(mptr); |
88 |
> |
dlinkDelete(ptr, &flatten_links); |
89 |
> |
MyFree(ptr->data); |
90 |
> |
free_dlink_node(ptr); |
91 |
|
} |
92 |
|
|
269 |
– |
MessageFileptr->contentsOfFile = NULL; |
270 |
– |
currentMessageLine = NULL; |
271 |
– |
|
93 |
|
DLINK_FOREACH(ptr, global_serv_list.head) |
94 |
|
{ |
95 |
< |
size_t nbytes = 0; |
275 |
< |
struct Client *target_p = ptr->data; |
95 |
> |
const struct Client *target_p = ptr->data; |
96 |
|
|
97 |
< |
/* skip ourselves, we send ourselves in /links */ |
98 |
< |
if (IsMe(target_p)) |
97 |
> |
/* |
98 |
> |
* Skip hidden servers, aswell as ourselves, since we already send |
99 |
> |
* ourselves in /links |
100 |
> |
*/ |
101 |
> |
if (IsHidden(target_p) || IsMe(target_p)) |
102 |
|
continue; |
103 |
|
|
104 |
< |
/* skip hidden servers */ |
282 |
< |
if (IsHidden(target_p) && !ConfigServerHide.disable_hidden) |
104 |
> |
if (HasFlag(target_p, FLAGS_SERVICE) && ConfigServerHide.hide_services) |
105 |
|
continue; |
106 |
|
|
107 |
< |
if (target_p->info[0]) |
108 |
< |
p = target_p->info; |
287 |
< |
else |
288 |
< |
p = "(Unknown Location)"; |
289 |
< |
|
290 |
< |
newMessageLine = MyMalloc(sizeof(MessageFileLine)); |
291 |
< |
|
292 |
< |
/* Attempt to format the file in such a way it follows the usual links output |
107 |
> |
/* |
108 |
> |
* Attempt to format the file in such a way it follows the usual links output |
109 |
|
* ie "servername uplink :hops info" |
110 |
|
* Mostly for aesthetic reasons - makes it look pretty in mIRC ;) |
111 |
|
* - madmax |
112 |
|
*/ |
113 |
+ |
snprintf(buff, sizeof(buff), "%s %s :1 %s", target_p->name, |
114 |
+ |
me.name, target_p->info); |
115 |
+ |
dlinkAddTail(xstrdup(buff), make_dlink_node(), &flatten_links); |
116 |
+ |
snprintf(buff, sizeof(buff), "%s %s :1 %s\n", target_p->name, |
117 |
+ |
me.name, target_p->info); |
118 |
|
|
119 |
< |
/* |
120 |
< |
* For now, check this ircsprintf wont overflow - it shouldnt on a |
300 |
< |
* default config but it is configurable.. |
301 |
< |
* This should be changed to an snprintf at some point, but I'm wanting to |
302 |
< |
* know if this is a cause of a bug - cryogen |
303 |
< |
*/ |
304 |
< |
assert(strlen(target_p->name) + strlen(me.name) + 6 + strlen(p) <= |
305 |
< |
MESSAGELINELEN); |
306 |
< |
ircsprintf(newMessageLine->line, "%s %s :1 %s", |
307 |
< |
target_p->name, me.name, p); |
308 |
< |
newMessageLine->next = NULL; |
119 |
> |
fputs(buff, file); |
120 |
> |
} |
121 |
|
|
122 |
< |
if (MessageFileptr->contentsOfFile) |
123 |
< |
{ |
124 |
< |
if (currentMessageLine) |
125 |
< |
currentMessageLine->next = newMessageLine; |
126 |
< |
currentMessageLine = newMessageLine; |
127 |
< |
} |
128 |
< |
else |
129 |
< |
{ |
130 |
< |
MessageFileptr->contentsOfFile = newMessageLine; |
131 |
< |
currentMessageLine = newMessageLine; |
132 |
< |
} |
122 |
> |
fclose(file); |
123 |
> |
} |
124 |
> |
|
125 |
> |
void |
126 |
> |
read_links_file(void) |
127 |
> |
{ |
128 |
> |
FILE *file = NULL; |
129 |
> |
char *p = NULL; |
130 |
> |
char buff[IRCD_BUFSIZE] = { '\0' }; |
131 |
> |
|
132 |
> |
if ((file = fopen(LIPATH, "r")) == NULL) |
133 |
> |
return; |
134 |
|
|
135 |
< |
nbytes = ircsprintf(buff, "%s %s :1 %s\n", target_p->name, me.name, p); |
136 |
< |
fbputs(buff, file, nbytes); |
135 |
> |
while (fgets(buff, sizeof(buff), file)) |
136 |
> |
{ |
137 |
> |
if ((p = strchr(buff, '\n')) != NULL) |
138 |
> |
*p = '\0'; |
139 |
> |
|
140 |
> |
dlinkAddTail(xstrdup(buff), make_dlink_node(), &flatten_links); |
141 |
|
} |
142 |
|
|
143 |
< |
fbclose(file); |
143 |
> |
fclose(file); |
144 |
|
} |
145 |
|
|
146 |
|
/* hunt_server() |
164 |
|
*/ |
165 |
|
int |
166 |
|
hunt_server(struct Client *client_p, struct Client *source_p, const char *command, |
167 |
< |
int server, int parc, char *parv[]) |
167 |
> |
const int server, const int parc, char *parv[]) |
168 |
|
{ |
169 |
|
struct Client *target_p = NULL; |
170 |
|
struct Client *target_tmp = NULL; |
171 |
|
dlink_node *ptr; |
172 |
|
int wilds; |
173 |
|
|
174 |
< |
/* Assume it's me, if no server |
175 |
< |
*/ |
176 |
< |
if (parc <= server || EmptyString(parv[server]) || |
177 |
< |
match(me.name, parv[server]) || |
178 |
< |
match(parv[server], me.name) || |
179 |
< |
!strcmp(parv[server], me.id)) |
363 |
< |
return(HUNTED_ISME); |
174 |
> |
/* Assume it's me, if no server */ |
175 |
> |
if (parc <= server || EmptyString(parv[server])) |
176 |
> |
return HUNTED_ISME; |
177 |
> |
|
178 |
> |
if (!strcmp(parv[server], me.id) || !match(parv[server], me.name)) |
179 |
> |
return HUNTED_ISME; |
180 |
|
|
181 |
|
/* These are to pickup matches that would cause the following |
182 |
|
* message to go in the wrong direction while doing quick fast |
183 |
|
* non-matching lookups. |
184 |
|
*/ |
185 |
|
if (MyClient(source_p)) |
186 |
< |
target_p = find_client(parv[server]); |
186 |
> |
target_p = hash_find_client(parv[server]); |
187 |
|
else |
188 |
|
target_p = find_person(client_p, parv[server]); |
189 |
|
|
191 |
|
if (target_p->from == source_p->from && !MyConnect(target_p)) |
192 |
|
target_p = NULL; |
193 |
|
|
194 |
< |
if (target_p == NULL && (target_p = find_server(parv[server]))) |
194 |
> |
if (target_p == NULL && (target_p = hash_find_server(parv[server]))) |
195 |
|
if (target_p->from == source_p->from && !MyConnect(target_p)) |
196 |
|
target_p = NULL; |
197 |
|
|
198 |
< |
collapse(parv[server]); |
383 |
< |
wilds = (strchr(parv[server], '?') || strchr(parv[server], '*')); |
198 |
> |
wilds = has_wildcards(parv[server]); |
199 |
|
|
200 |
|
/* Again, if there are no wild cards involved in the server |
201 |
|
* name, use the hash lookup |
204 |
|
{ |
205 |
|
if (!wilds) |
206 |
|
{ |
207 |
< |
if (!(target_p = find_server(parv[server]))) |
207 |
> |
if (!(target_p = hash_find_server(parv[server]))) |
208 |
|
{ |
209 |
< |
sendto_one(source_p, form_str(ERR_NOSUCHSERVER), |
210 |
< |
me.name, parv[0], parv[server]); |
396 |
< |
return(HUNTED_NOSUCH); |
209 |
> |
sendto_one_numeric(source_p, &me, ERR_NOSUCHSERVER, parv[server]); |
210 |
> |
return HUNTED_NOSUCH; |
211 |
|
} |
212 |
|
} |
213 |
|
else |
216 |
|
{ |
217 |
|
target_tmp = ptr->data; |
218 |
|
|
219 |
< |
if (match(parv[server], target_tmp->name)) |
219 |
> |
if (!match(parv[server], target_tmp->name)) |
220 |
|
{ |
221 |
|
if (target_tmp->from == source_p->from && !MyConnect(target_tmp)) |
222 |
|
continue; |
233 |
|
{ |
234 |
|
if(!IsRegistered(target_p)) |
235 |
|
{ |
236 |
< |
sendto_one(source_p, form_str(ERR_NOSUCHSERVER), |
423 |
< |
me.name, parv[0], parv[server]); |
236 |
> |
sendto_one_numeric(source_p, &me, ERR_NOSUCHSERVER, parv[server]); |
237 |
|
return HUNTED_NOSUCH; |
238 |
|
} |
239 |
|
|
240 |
|
if (IsMe(target_p) || MyClient(target_p)) |
241 |
|
return HUNTED_ISME; |
242 |
|
|
243 |
< |
if (!match(target_p->name, parv[server])) |
243 |
> |
if (match(target_p->name, parv[server])) |
244 |
|
parv[server] = target_p->name; |
245 |
|
|
246 |
|
/* This is a little kludgy but should work... */ |
247 |
< |
if (IsClient(source_p) && |
435 |
< |
((MyConnect(target_p) && IsCapable(target_p, CAP_TS6)) || |
436 |
< |
(!MyConnect(target_p) && IsCapable(target_p->from, CAP_TS6)))) |
437 |
< |
parv[0] = ID(source_p); |
438 |
< |
|
439 |
< |
sendto_one(target_p, command, parv[0], |
247 |
> |
sendto_one(target_p, command, ID_or_name(source_p, target_p), |
248 |
|
parv[1], parv[2], parv[3], parv[4], |
249 |
|
parv[5], parv[6], parv[7], parv[8]); |
250 |
< |
return(HUNTED_PASS); |
251 |
< |
} |
250 |
> |
return HUNTED_PASS; |
251 |
> |
} |
252 |
|
|
253 |
< |
sendto_one(source_p, form_str(ERR_NOSUCHSERVER), |
254 |
< |
me.name, parv[0], parv[server]); |
447 |
< |
return(HUNTED_NOSUCH); |
253 |
> |
sendto_one_numeric(source_p, &me, ERR_NOSUCHSERVER, parv[server]); |
254 |
> |
return HUNTED_NOSUCH; |
255 |
|
} |
256 |
|
|
257 |
|
/* try_connections() |
267 |
|
void |
268 |
|
try_connections(void *unused) |
269 |
|
{ |
270 |
< |
dlink_node *ptr; |
271 |
< |
struct ConfItem *conf; |
465 |
< |
struct AccessItem *aconf; |
466 |
< |
struct ClassItem *cltmp; |
270 |
> |
dlink_node *ptr = NULL; |
271 |
> |
struct MaskItem *conf; |
272 |
|
int confrq; |
273 |
|
|
274 |
|
/* TODO: change this to set active flag to 0 when added to event! --Habeeb */ |
278 |
|
DLINK_FOREACH(ptr, server_items.head) |
279 |
|
{ |
280 |
|
conf = ptr->data; |
476 |
– |
aconf = map_to_conf(conf); |
281 |
|
|
282 |
< |
/* Also when already connecting! (update holdtimes) --SRB |
282 |
> |
assert(conf->type == CONF_SERVER); |
283 |
> |
|
284 |
> |
/* Also when already connecting! (update holdtimes) --SRB |
285 |
|
*/ |
286 |
< |
if (!(aconf->status & CONF_SERVER) || !aconf->port || |
481 |
< |
!(IsConfAllowAutoConn(aconf))) |
286 |
> |
if (!conf->port ||!IsConfAllowAutoConn(conf)) |
287 |
|
continue; |
288 |
|
|
484 |
– |
cltmp = map_to_conf(aconf->class_ptr); |
289 |
|
|
290 |
|
/* Skip this entry if the use of it is still on hold until |
291 |
|
* future. Otherwise handle this entry (and set it on hold |
293 |
|
* made one successfull connection... [this algorithm is |
294 |
|
* a bit fuzzy... -- msa >;) ] |
295 |
|
*/ |
296 |
< |
if (aconf->hold > CurrentTime) |
296 |
> |
if (conf->until > CurrentTime) |
297 |
|
continue; |
298 |
|
|
299 |
< |
if (cltmp == NULL) |
299 |
> |
if (conf->class == NULL) |
300 |
|
confrq = DEFAULT_CONNECTFREQUENCY; |
301 |
|
else |
302 |
|
{ |
303 |
< |
confrq = ConFreq(cltmp); |
304 |
< |
if (confrq < MIN_CONN_FREQ ) |
305 |
< |
confrq = MIN_CONN_FREQ; |
303 |
> |
confrq = conf->class->con_freq; |
304 |
> |
if (confrq < MIN_CONN_FREQ) |
305 |
> |
confrq = MIN_CONN_FREQ; |
306 |
|
} |
307 |
|
|
308 |
< |
aconf->hold = CurrentTime + confrq; |
308 |
> |
conf->until = CurrentTime + confrq; |
309 |
|
|
310 |
|
/* Found a CONNECT config with port specified, scan clients |
311 |
|
* and see if this server is already connected? |
312 |
|
*/ |
313 |
< |
if (find_server(conf->name) != NULL) |
313 |
> |
if (hash_find_server(conf->name) != NULL) |
314 |
|
continue; |
315 |
|
|
316 |
< |
if (CurrUserCount(cltmp) < MaxTotal(cltmp)) |
316 |
> |
if (conf->class->ref_count < conf->class->max_total) |
317 |
|
{ |
318 |
|
/* Go to the end of the list, if not already last */ |
319 |
|
if (ptr->next != NULL) |
334 |
|
* -- adrian |
335 |
|
*/ |
336 |
|
if (ConfigServerHide.hide_server_ips) |
337 |
< |
sendto_realops_flags(UMODE_ALL, L_ALL, "Connection to %s activated.", |
337 |
> |
sendto_realops_flags(UMODE_ALL, L_ALL, SEND_NOTICE, |
338 |
> |
"Connection to %s activated.", |
339 |
|
conf->name); |
340 |
|
else |
341 |
< |
sendto_realops_flags(UMODE_ALL, L_ALL, "Connection to %s[%s] activated.", |
342 |
< |
conf->name, aconf->host); |
341 |
> |
sendto_realops_flags(UMODE_ALL, L_ALL, SEND_NOTICE, |
342 |
> |
"Connection to %s[%s] activated.", |
343 |
> |
conf->name, conf->host); |
344 |
|
|
345 |
< |
serv_connect(aconf, NULL); |
345 |
> |
serv_connect(conf, NULL); |
346 |
|
/* We connect only one at time... */ |
347 |
|
return; |
348 |
|
} |
371 |
|
} |
372 |
|
|
373 |
|
int |
374 |
< |
check_server(const char *name, struct Client *client_p, int cryptlink) |
374 |
> |
check_server(const char *name, struct Client *client_p) |
375 |
|
{ |
376 |
|
dlink_node *ptr; |
377 |
< |
struct ConfItem *conf = NULL; |
378 |
< |
struct ConfItem *server_conf = NULL; |
573 |
< |
struct AccessItem *server_aconf = NULL; |
574 |
< |
struct AccessItem *aconf = NULL; |
377 |
> |
struct MaskItem *conf = NULL; |
378 |
> |
struct MaskItem *server_conf = NULL; |
379 |
|
int error = -1; |
380 |
|
|
381 |
|
assert(client_p != NULL); |
382 |
|
|
579 |
– |
if (client_p == NULL) |
580 |
– |
return(error); |
581 |
– |
|
582 |
– |
if (strlen(name) > HOSTLEN) |
583 |
– |
return(-4); |
584 |
– |
|
383 |
|
/* loop through looking for all possible connect items that might work */ |
384 |
|
DLINK_FOREACH(ptr, server_items.head) |
385 |
|
{ |
386 |
|
conf = ptr->data; |
589 |
– |
aconf = map_to_conf(conf); |
387 |
|
|
388 |
< |
if (!match(name, conf->name)) |
388 |
> |
if (match(name, conf->name)) |
389 |
|
continue; |
390 |
|
|
391 |
|
error = -3; |
392 |
|
|
393 |
|
/* XXX: Fix me for IPv6 */ |
394 |
|
/* XXX sockhost is the IPv4 ip as a string */ |
395 |
< |
if (match(aconf->host, client_p->host) || |
396 |
< |
match(aconf->host, client_p->sockhost)) |
395 |
> |
if (!match(conf->host, client_p->host) || |
396 |
> |
!match(conf->host, client_p->sockhost)) |
397 |
|
{ |
398 |
|
error = -2; |
602 |
– |
#ifdef HAVE_LIBCRYPTO |
603 |
– |
if (cryptlink && IsConfCryptLink(aconf)) |
604 |
– |
{ |
605 |
– |
if (aconf->rsa_public_key) |
606 |
– |
server_conf = conf; |
607 |
– |
} |
608 |
– |
else if (!(cryptlink || IsConfCryptLink(aconf))) |
609 |
– |
#endif /* HAVE_LIBCRYPTO */ |
610 |
– |
{ |
611 |
– |
/* A NULL password is as good as a bad one */ |
612 |
– |
if (EmptyString(client_p->localClient->passwd)) |
613 |
– |
return(-2); |
614 |
– |
|
615 |
– |
/* code in s_conf.c should not have allowed this to be NULL */ |
616 |
– |
if (aconf->passwd == NULL) |
617 |
– |
return(-2); |
399 |
|
|
400 |
< |
if (IsConfEncrypted(aconf)) |
401 |
< |
{ |
402 |
< |
if (strcmp(aconf->passwd, |
403 |
< |
(const char *)crypt(client_p->localClient->passwd, |
404 |
< |
aconf->passwd)) == 0) |
405 |
< |
server_conf = conf; |
406 |
< |
} |
407 |
< |
else |
627 |
< |
{ |
628 |
< |
if (strcmp(aconf->passwd, client_p->localClient->passwd) == 0) |
629 |
< |
server_conf = conf; |
630 |
< |
} |
631 |
< |
} |
400 |
> |
if (!match_conf_password(client_p->localClient->passwd, conf)) |
401 |
> |
return -2; |
402 |
> |
|
403 |
> |
if (!EmptyString(conf->certfp)) |
404 |
> |
if (EmptyString(client_p->certfp) || strcasecmp(client_p->certfp, conf->certfp)) |
405 |
> |
return -4; |
406 |
> |
|
407 |
> |
server_conf = conf; |
408 |
|
} |
409 |
|
} |
410 |
|
|
411 |
|
if (server_conf == NULL) |
412 |
< |
return(error); |
412 |
> |
return error; |
413 |
|
|
414 |
|
attach_conf(client_p, server_conf); |
415 |
|
|
640 |
– |
/* Now find all leaf or hub config items for this server */ |
641 |
– |
DLINK_FOREACH(ptr, hub_items.head) |
642 |
– |
{ |
643 |
– |
conf = ptr->data; |
644 |
– |
|
645 |
– |
if (!match(name, conf->name)) |
646 |
– |
continue; |
647 |
– |
attach_conf(client_p, conf); |
648 |
– |
} |
649 |
– |
|
650 |
– |
DLINK_FOREACH(ptr, leaf_items.head) |
651 |
– |
{ |
652 |
– |
conf = ptr->data; |
653 |
– |
|
654 |
– |
if (!match(name, conf->name)) |
655 |
– |
continue; |
656 |
– |
attach_conf(client_p, conf); |
657 |
– |
} |
658 |
– |
|
659 |
– |
server_aconf = map_to_conf(server_conf); |
660 |
– |
|
661 |
– |
#ifdef HAVE_LIBZ /* otherwise, clear it unconditionally */ |
662 |
– |
if (!IsConfCompressed(server_aconf)) |
663 |
– |
#endif |
664 |
– |
ClearCap(client_p, CAP_ZIP); |
665 |
– |
if (!IsConfCryptLink(server_aconf)) |
666 |
– |
ClearCap(client_p, CAP_ENC); |
667 |
– |
if (!IsConfTopicBurst(server_aconf)) |
668 |
– |
{ |
669 |
– |
ClearCap(client_p, CAP_TB); |
670 |
– |
ClearCap(client_p, CAP_TBURST); |
671 |
– |
} |
416 |
|
|
417 |
< |
if (aconf != NULL) |
417 |
> |
if (server_conf != NULL) |
418 |
|
{ |
419 |
|
struct sockaddr_in *v4; |
420 |
|
#ifdef IPV6 |
421 |
|
struct sockaddr_in6 *v6; |
422 |
|
#endif |
423 |
< |
switch (aconf->aftype) |
423 |
> |
switch (server_conf->aftype) |
424 |
|
{ |
425 |
|
#ifdef IPV6 |
426 |
< |
case AF_INET6: |
427 |
< |
v6 = (struct sockaddr_in6 *)&aconf->ipnum; |
426 |
> |
case AF_INET6: |
427 |
> |
v6 = (struct sockaddr_in6 *)&server_conf->addr; |
428 |
|
|
429 |
|
if (IN6_IS_ADDR_UNSPECIFIED(&v6->sin6_addr)) |
430 |
< |
memcpy(&aconf->ipnum, &client_p->localClient->ip, sizeof(struct irc_ssaddr)); |
430 |
> |
memcpy(&server_conf->addr, &client_p->localClient->ip, sizeof(struct irc_ssaddr)); |
431 |
|
break; |
432 |
|
#endif |
433 |
|
case AF_INET: |
434 |
< |
v4 = (struct sockaddr_in *)&aconf->ipnum; |
434 |
> |
v4 = (struct sockaddr_in *)&server_conf->addr; |
435 |
|
|
436 |
|
if (v4->sin_addr.s_addr == INADDR_NONE) |
437 |
< |
memcpy(&aconf->ipnum, &client_p->localClient->ip, sizeof(struct irc_ssaddr)); |
437 |
> |
memcpy(&server_conf->addr, &client_p->localClient->ip, sizeof(struct irc_ssaddr)); |
438 |
|
break; |
439 |
|
} |
440 |
|
} |
441 |
|
|
442 |
< |
return(0); |
442 |
> |
return 0; |
443 |
|
} |
444 |
|
|
445 |
|
/* add_capability() |
456 |
|
{ |
457 |
|
struct Capability *cap = MyMalloc(sizeof(*cap)); |
458 |
|
|
459 |
< |
DupString(cap->name, capab_name); |
459 |
> |
cap->name = xstrdup(capab_name); |
460 |
|
cap->cap = cap_flag; |
461 |
|
dlinkAdd(cap, &cap->node, &cap_list); |
462 |
|
|
485 |
|
{ |
486 |
|
if (irccmp(cap->name, capab_name) == 0) |
487 |
|
{ |
488 |
< |
default_server_capabs &= ~(cap->cap); |
489 |
< |
dlinkDelete(ptr, &cap_list); |
490 |
< |
MyFree(cap->name); |
491 |
< |
cap->name = NULL; |
748 |
< |
MyFree(cap); |
488 |
> |
default_server_capabs &= ~(cap->cap); |
489 |
> |
dlinkDelete(ptr, &cap_list); |
490 |
> |
MyFree(cap->name); |
491 |
> |
MyFree(cap); |
492 |
|
} |
493 |
|
} |
494 |
|
} |
503 |
|
* output - 0 if not found CAPAB otherwise |
504 |
|
* side effects - none |
505 |
|
*/ |
506 |
< |
int |
506 |
> |
unsigned int |
507 |
|
find_capability(const char *capab) |
508 |
|
{ |
509 |
|
const dlink_node *ptr = NULL; |
522 |
|
/* send_capabilities() |
523 |
|
* |
524 |
|
* inputs - Client pointer to send to |
782 |
– |
* - Pointer to AccessItem (for crypt) |
525 |
|
* - int flag of capabilities that this server can send |
784 |
– |
* - int flag of encryption capabilities |
526 |
|
* output - NONE |
527 |
|
* side effects - send the CAPAB line to a server -orabidoo |
528 |
|
* |
529 |
|
*/ |
530 |
|
void |
531 |
< |
send_capabilities(struct Client *client_p, struct AccessItem *aconf, |
791 |
< |
int cap_can_send, int enc_can_send) |
531 |
> |
send_capabilities(struct Client *client_p, int cap_can_send) |
532 |
|
{ |
533 |
|
struct Capability *cap=NULL; |
534 |
|
char msgbuf[IRCD_BUFSIZE]; |
535 |
|
char *t; |
536 |
|
int tl; |
537 |
|
dlink_node *ptr; |
798 |
– |
#ifdef HAVE_LIBCRYPTO |
799 |
– |
const struct EncCapability *epref = NULL; |
800 |
– |
char *capend; |
801 |
– |
int sent_cipher = 0; |
802 |
– |
#endif |
538 |
|
|
539 |
|
t = msgbuf; |
540 |
|
|
544 |
|
|
545 |
|
if (cap->cap & (cap_can_send|default_server_capabs)) |
546 |
|
{ |
547 |
< |
tl = ircsprintf(t, "%s ", cap->name); |
547 |
> |
tl = sprintf(t, "%s ", cap->name); |
548 |
|
t += tl; |
549 |
|
} |
550 |
|
} |
816 |
– |
#ifdef HAVE_LIBCRYPTO |
817 |
– |
if (enc_can_send) |
818 |
– |
{ |
819 |
– |
capend = t; |
820 |
– |
strcpy(t, "ENC:"); |
821 |
– |
t += 4; |
822 |
– |
|
823 |
– |
/* use connect{} specific info if available */ |
824 |
– |
if (aconf->cipher_preference) |
825 |
– |
epref = aconf->cipher_preference; |
826 |
– |
else if (ConfigFileEntry.default_cipher_preference) |
827 |
– |
epref = ConfigFileEntry.default_cipher_preference; |
828 |
– |
|
829 |
– |
if (epref && (epref->cap & enc_can_send)) |
830 |
– |
{ |
831 |
– |
/* Leave the space -- it is removed later. */ |
832 |
– |
tl = ircsprintf(t, "%s ", epref->name); |
833 |
– |
t += tl; |
834 |
– |
sent_cipher = 1; |
835 |
– |
} |
551 |
|
|
837 |
– |
if (!sent_cipher) |
838 |
– |
t = capend; /* truncate string before ENC:, below */ |
839 |
– |
} |
840 |
– |
#endif |
552 |
|
*(t - 1) = '\0'; |
553 |
|
sendto_one(client_p, "CAPAB :%s", msgbuf); |
554 |
|
} |
555 |
|
|
556 |
|
/* sendnick_TS() |
557 |
< |
* |
557 |
> |
* |
558 |
|
* inputs - client (server) to send nick towards |
559 |
|
* - client to send nick for |
560 |
|
* output - NONE |
563 |
|
void |
564 |
|
sendnick_TS(struct Client *client_p, struct Client *target_p) |
565 |
|
{ |
566 |
< |
static char ubuf[12]; |
566 |
> |
char ubuf[IRCD_BUFSIZE]; |
567 |
|
|
568 |
|
if (!IsClient(target_p)) |
569 |
|
return; |
570 |
|
|
571 |
< |
send_umode(NULL, target_p, 0, IsOperHiddenAdmin(target_p) ? |
861 |
< |
SEND_UMODES & ~UMODE_ADMIN : SEND_UMODES, ubuf); |
571 |
> |
send_umode(NULL, target_p, 0, SEND_UMODES, ubuf); |
572 |
|
|
573 |
|
if (ubuf[0] == '\0') |
574 |
|
{ |
576 |
|
ubuf[1] = '\0'; |
577 |
|
} |
578 |
|
|
579 |
< |
/* XXX Both of these need to have a :me.name or :mySID!?!?! */ |
580 |
< |
if (HasID(target_p) && IsCapable(client_p, CAP_TS6)) |
579 |
> |
if (IsCapable(client_p, CAP_SVS)) |
580 |
> |
sendto_one(client_p, ":%s UID %s %d %lu %s %s %s %s %s %s :%s", |
581 |
> |
target_p->servptr->id, |
582 |
> |
target_p->name, target_p->hopcount + 1, |
583 |
> |
(unsigned long) target_p->tsinfo, |
584 |
> |
ubuf, target_p->username, target_p->host, |
585 |
> |
(MyClient(target_p) && IsIPSpoof(target_p)) ? |
586 |
> |
"0" : target_p->sockhost, target_p->id, |
587 |
> |
target_p->svid, target_p->info); |
588 |
> |
else |
589 |
|
sendto_one(client_p, ":%s UID %s %d %lu %s %s %s %s %s :%s", |
590 |
|
target_p->servptr->id, |
591 |
|
target_p->name, target_p->hopcount + 1, |
593 |
|
ubuf, target_p->username, target_p->host, |
594 |
|
(MyClient(target_p) && IsIPSpoof(target_p)) ? |
595 |
|
"0" : target_p->sockhost, target_p->id, target_p->info); |
596 |
< |
else |
597 |
< |
sendto_one(client_p, "NICK %s %d %lu %s %s %s %s :%s", |
598 |
< |
target_p->name, target_p->hopcount + 1, |
599 |
< |
(unsigned long) target_p->tsinfo, |
600 |
< |
ubuf, target_p->username, target_p->host, |
601 |
< |
target_p->servptr->name, target_p->info); |
602 |
< |
|
603 |
< |
if (IsConfAwayBurst((struct AccessItem *)map_to_conf(client_p->serv->sconf))) |
886 |
< |
if (!EmptyString(target_p->away)) |
887 |
< |
sendto_one(client_p, ":%s AWAY :%s", target_p->name, |
888 |
< |
target_p->away); |
596 |
> |
|
597 |
> |
if (!EmptyString(target_p->certfp)) |
598 |
> |
sendto_one(client_p, ":%s CERTFP %s", |
599 |
> |
ID_or_name(target_p, client_p), target_p->certfp); |
600 |
> |
|
601 |
> |
if (target_p->away[0]) |
602 |
> |
sendto_one(client_p, ":%s AWAY :%s", ID_or_name(target_p, client_p), |
603 |
> |
target_p->away); |
604 |
|
|
605 |
|
} |
606 |
|
|
612 |
|
* side effects - build up string representing capabilities of server listed |
613 |
|
*/ |
614 |
|
const char * |
615 |
< |
show_capabilities(struct Client *target_p) |
615 |
> |
show_capabilities(const struct Client *target_p) |
616 |
|
{ |
617 |
< |
static char msgbuf[IRCD_BUFSIZE]; |
618 |
< |
char *t = msgbuf; |
904 |
< |
dlink_node *ptr; |
617 |
> |
static char msgbuf[IRCD_BUFSIZE] = ""; |
618 |
> |
const dlink_node *ptr = NULL; |
619 |
|
|
620 |
< |
t += ircsprintf(msgbuf, "TS "); |
620 |
> |
strlcpy(msgbuf, "TS", sizeof(msgbuf)); |
621 |
|
|
622 |
|
DLINK_FOREACH(ptr, cap_list.head) |
623 |
|
{ |
624 |
|
const struct Capability *cap = ptr->data; |
625 |
|
|
626 |
< |
if (IsCapable(target_p, cap->cap)) |
627 |
< |
t += ircsprintf(t, "%s ", cap->name); |
626 |
> |
if (!IsCapable(target_p, cap->cap)) |
627 |
> |
continue; |
628 |
> |
|
629 |
> |
strlcat(msgbuf, " ", sizeof(msgbuf)); |
630 |
> |
strlcat(msgbuf, cap->name, sizeof(msgbuf)); |
631 |
|
} |
915 |
– |
#ifdef HAVE_LIBCRYPTO |
916 |
– |
if (IsCapable(target_p, CAP_ENC) && |
917 |
– |
target_p->localClient->in_cipher && |
918 |
– |
target_p->localClient->out_cipher) |
919 |
– |
t += ircsprintf(t, "ENC:%s ", |
920 |
– |
target_p->localClient->in_cipher->name); |
921 |
– |
#endif |
922 |
– |
*(t - 1) = '\0'; |
632 |
|
|
633 |
< |
return(msgbuf); |
633 |
> |
return msgbuf; |
634 |
|
} |
635 |
|
|
636 |
|
/* make_server() |
659 |
|
server_estab(struct Client *client_p) |
660 |
|
{ |
661 |
|
struct Client *target_p; |
662 |
< |
struct ConfItem *conf; |
954 |
< |
struct AccessItem *aconf=NULL; |
662 |
> |
struct MaskItem *conf = NULL; |
663 |
|
char *host; |
664 |
|
const char *inpath; |
665 |
|
static char inpath_ip[HOSTLEN * 2 + USERLEN + 6]; |
666 |
|
dlink_node *ptr; |
667 |
+ |
#ifdef HAVE_LIBCRYPTO |
668 |
+ |
const COMP_METHOD *compression = NULL, *expansion = NULL; |
669 |
+ |
#endif |
670 |
|
|
671 |
|
assert(client_p != NULL); |
672 |
|
|
675 |
|
inpath = get_client_name(client_p, MASK_IP); /* "refresh" inpath with host */ |
676 |
|
host = client_p->name; |
677 |
|
|
678 |
< |
if ((conf = find_conf_name(&client_p->localClient->confs, host, SERVER_TYPE)) |
678 |
> |
if ((conf = find_conf_name(&client_p->localClient->confs, host, CONF_SERVER)) |
679 |
|
== NULL) |
680 |
|
{ |
681 |
|
/* This shouldn't happen, better tell the ops... -A1kmm */ |
682 |
< |
sendto_realops_flags(UMODE_ALL, L_ALL, "Warning: Lost connect{} block " |
682 |
> |
sendto_realops_flags(UMODE_ALL, L_ALL, SEND_NOTICE, |
683 |
> |
"Warning: Lost connect{} block " |
684 |
|
"for server %s(this shouldn't happen)!", host); |
685 |
|
exit_client(client_p, &me, "Lost connect{} block!"); |
686 |
|
return; |
695 |
|
/* If there is something in the serv_list, it might be this |
696 |
|
* connecting server.. |
697 |
|
*/ |
698 |
< |
if (!ServerInfo.hub && serv_list.head) |
698 |
> |
if (!ServerInfo.hub && serv_list.head) |
699 |
|
{ |
700 |
|
if (client_p != serv_list.head->data || serv_list.head->next) |
701 |
|
{ |
706 |
|
} |
707 |
|
} |
708 |
|
|
709 |
< |
aconf = map_to_conf(conf); |
998 |
< |
|
999 |
< |
if (IsUnknown(client_p) && !IsConfCryptLink(aconf)) |
709 |
> |
if (IsUnknown(client_p)) |
710 |
|
{ |
711 |
< |
/* jdc -- 1. Use EmptyString(), not [0] index reference. |
712 |
< |
* 2. Check aconf->spasswd, not aconf->passwd. |
713 |
< |
*/ |
1004 |
< |
if (!EmptyString(aconf->spasswd)) |
1005 |
< |
sendto_one(client_p, "PASS %s TS %d %s", |
1006 |
< |
aconf->spasswd, TS_CURRENT, me.id); |
1007 |
< |
|
1008 |
< |
/* Pass my info to the new server |
1009 |
< |
* |
1010 |
< |
* Pass on ZIP if supported |
1011 |
< |
* Pass on TB if supported. |
1012 |
< |
* - Dianora |
1013 |
< |
*/ |
711 |
> |
sendto_one(client_p, "PASS %s TS %d %s", conf->spasswd, TS_CURRENT, me.id); |
712 |
> |
|
713 |
> |
send_capabilities(client_p, 0); |
714 |
|
|
1015 |
– |
send_capabilities(client_p, aconf, |
1016 |
– |
(IsConfCompressed(aconf) ? CAP_ZIP : 0) |
1017 |
– |
| (IsConfTopicBurst(aconf) ? CAP_TBURST|CAP_TB : 0), 0); |
1018 |
– |
|
1019 |
– |
/* SERVER is the last command sent before switching to ziplinks. |
1020 |
– |
* We set TCPNODELAY on the socket to make sure it gets sent out |
1021 |
– |
* on the wire immediately. Otherwise, it could be sitting in |
1022 |
– |
* a kernel buffer when we start sending zipped data, and the |
1023 |
– |
* parser on the receiving side can't hand both unzipped and zipped |
1024 |
– |
* data in one packet. --Rodder |
1025 |
– |
* |
1026 |
– |
* currently we only need to call send_queued_write, |
1027 |
– |
* Nagle is already disabled at this point --adx |
1028 |
– |
*/ |
715 |
|
sendto_one(client_p, "SERVER %s 1 :%s%s", |
716 |
|
me.name, ConfigServerHide.hidden ? "(H) " : "", me.info); |
1031 |
– |
send_queued_write(client_p); |
1032 |
– |
} |
1033 |
– |
|
1034 |
– |
/* Hand the server off to servlink now */ |
1035 |
– |
if (IsCapable(client_p, CAP_ENC) || IsCapable(client_p, CAP_ZIP)) |
1036 |
– |
{ |
1037 |
– |
if (fork_server(client_p) < 0) |
1038 |
– |
{ |
1039 |
– |
sendto_realops_flags(UMODE_ALL, L_ADMIN, |
1040 |
– |
"Warning: fork failed for server %s -- check servlink_path (%s)", |
1041 |
– |
get_client_name(client_p, HIDE_IP), ConfigFileEntry.servlink_path); |
1042 |
– |
sendto_realops_flags(UMODE_ALL, L_OPER, "Warning: fork failed for server " |
1043 |
– |
"%s -- check servlink_path (%s)", |
1044 |
– |
get_client_name(client_p, MASK_IP), |
1045 |
– |
ConfigFileEntry.servlink_path); |
1046 |
– |
exit_client(client_p, &me, "fork failed"); |
1047 |
– |
return; |
1048 |
– |
} |
1049 |
– |
|
1050 |
– |
start_io(client_p); |
1051 |
– |
SetServlink(client_p); |
717 |
|
} |
718 |
|
|
719 |
|
sendto_one(client_p, "SVINFO %d %d 0 :%lu", TS_CURRENT, TS_MIN, |
720 |
|
(unsigned long)CurrentTime); |
721 |
|
|
722 |
< |
/* assumption here is if they passed the correct TS version, they also passed an SID */ |
1058 |
< |
if (IsCapable(client_p, CAP_TS6)) |
722 |
> |
if (HasID(client_p)) |
723 |
|
hash_add_id(client_p); |
724 |
|
|
725 |
|
/* XXX Does this ever happen? I don't think so -db */ |
726 |
< |
detach_conf(client_p, OPER_TYPE); |
726 |
> |
detach_conf(client_p, CONF_OPER); |
727 |
|
|
728 |
|
/* *WARNING* |
729 |
|
** In the following code in place of plain server's |
763 |
|
make_server(client_p); |
764 |
|
|
765 |
|
/* fixing eob timings.. -gnp */ |
766 |
< |
client_p->firsttime = CurrentTime; |
766 |
> |
client_p->localClient->firsttime = CurrentTime; |
767 |
|
|
768 |
< |
/* Show the real host/IP to admins */ |
769 |
< |
sendto_realops_flags(UMODE_ALL, L_ADMIN, |
1106 |
< |
"Link with %s established: (%s) link", |
1107 |
< |
inpath_ip,show_capabilities(client_p)); |
1108 |
< |
/* Now show the masked hostname/IP to opers */ |
1109 |
< |
sendto_realops_flags(UMODE_ALL, L_OPER, |
1110 |
< |
"Link with %s established: (%s) link", |
1111 |
< |
inpath,show_capabilities(client_p)); |
1112 |
< |
ilog(L_NOTICE, "Link with %s established: (%s) link", |
1113 |
< |
inpath_ip, show_capabilities(client_p)); |
768 |
> |
if (find_matching_name_conf(CONF_SERVICE, client_p->name, NULL, NULL, 0)) |
769 |
> |
AddFlag(client_p, FLAGS_SERVICE); |
770 |
|
|
771 |
< |
client_p->serv->sconf = conf; |
772 |
< |
|
773 |
< |
if (HasServlink(client_p)) |
771 |
> |
/* Show the real host/IP to admins */ |
772 |
> |
#ifdef HAVE_LIBCRYPTO |
773 |
> |
if (client_p->localClient->fd.ssl) |
774 |
|
{ |
775 |
< |
/* we won't overflow FD_DESC_SZ here, as it can hold |
776 |
< |
* client_p->name + 64 |
777 |
< |
*/ |
778 |
< |
fd_note(&client_p->localClient->fd, "slink data: %s", client_p->name); |
779 |
< |
fd_note(&client_p->localClient->ctrlfd, "slink ctrl: %s", client_p->name); |
775 |
> |
compression = SSL_get_current_compression(client_p->localClient->fd.ssl); |
776 |
> |
expansion = SSL_get_current_expansion(client_p->localClient->fd.ssl); |
777 |
> |
|
778 |
> |
sendto_realops_flags(UMODE_ALL, L_ADMIN, SEND_NOTICE, |
779 |
> |
"Link with %s established: [SSL: %s, Compression/Expansion method: %s/%s] (Capabilities: %s)", |
780 |
> |
inpath_ip, ssl_get_cipher(client_p->localClient->fd.ssl), |
781 |
> |
compression ? SSL_COMP_get_name(compression) : "NONE", |
782 |
> |
expansion ? SSL_COMP_get_name(expansion) : "NONE", |
783 |
> |
show_capabilities(client_p)); |
784 |
> |
/* Now show the masked hostname/IP to opers */ |
785 |
> |
sendto_realops_flags(UMODE_ALL, L_OPER, SEND_NOTICE, |
786 |
> |
"Link with %s established: [SSL: %s, Compression/Expansion method: %s/%s] (Capabilities: %s)", |
787 |
> |
inpath, ssl_get_cipher(client_p->localClient->fd.ssl), |
788 |
> |
compression ? SSL_COMP_get_name(compression) : "NONE", |
789 |
> |
expansion ? SSL_COMP_get_name(expansion) : "NONE", |
790 |
> |
show_capabilities(client_p)); |
791 |
> |
ilog(LOG_TYPE_IRCD, "Link with %s established: [SSL: %s, Compression/Expansion method: %s/%s] (Capabilities: %s)", |
792 |
> |
inpath_ip, ssl_get_cipher(client_p->localClient->fd.ssl), |
793 |
> |
compression ? SSL_COMP_get_name(compression) : "NONE", |
794 |
> |
expansion ? SSL_COMP_get_name(expansion) : "NONE", |
795 |
> |
show_capabilities(client_p)); |
796 |
|
} |
797 |
|
else |
798 |
< |
fd_note(&client_p->localClient->fd, "Server: %s", client_p->name); |
1127 |
< |
|
1128 |
< |
/* Old sendto_serv_but_one() call removed because we now |
1129 |
< |
** need to send different names to different servers |
1130 |
< |
** (domain name matching) Send new server to other servers. |
1131 |
< |
*/ |
1132 |
< |
DLINK_FOREACH(ptr, serv_list.head) |
798 |
> |
#endif |
799 |
|
{ |
800 |
< |
target_p = ptr->data; |
800 |
> |
sendto_realops_flags(UMODE_ALL, L_ADMIN, SEND_NOTICE, |
801 |
> |
"Link with %s established: (Capabilities: %s)", |
802 |
> |
inpath_ip, show_capabilities(client_p)); |
803 |
> |
/* Now show the masked hostname/IP to opers */ |
804 |
> |
sendto_realops_flags(UMODE_ALL, L_OPER, SEND_NOTICE, |
805 |
> |
"Link with %s established: (Capabilities: %s)", |
806 |
> |
inpath, show_capabilities(client_p)); |
807 |
> |
ilog(LOG_TYPE_IRCD, "Link with %s established: (Capabilities: %s)", |
808 |
> |
inpath_ip, show_capabilities(client_p)); |
809 |
> |
} |
810 |
> |
|
811 |
> |
fd_note(&client_p->localClient->fd, "Server: %s", client_p->name); |
812 |
> |
|
813 |
> |
sendto_server(client_p, NOCAPS, NOCAPS, ":%s SID %s 2 %s :%s%s", |
814 |
> |
me.id, client_p->name, client_p->id, |
815 |
> |
IsHidden(client_p) ? "(H) " : "", client_p->info); |
816 |
|
|
817 |
< |
if (target_p == client_p) |
818 |
< |
continue; |
819 |
< |
|
820 |
< |
if (IsCapable(target_p, CAP_TS6) && HasID(client_p)) |
821 |
< |
sendto_one(target_p, ":%s SID %s 2 %s :%s%s", |
822 |
< |
me.id, client_p->name, client_p->id, |
823 |
< |
IsHidden(client_p) ? "(H) " : "", |
824 |
< |
client_p->info); |
825 |
< |
else |
826 |
< |
sendto_one(target_p,":%s SERVER %s 2 :%s%s", |
827 |
< |
me.name, client_p->name, |
828 |
< |
IsHidden(client_p) ? "(H) " : "", |
829 |
< |
client_p->info); |
830 |
< |
} |
831 |
< |
|
832 |
< |
/* Pass on my client information to the new server |
833 |
< |
** |
834 |
< |
** First, pass only servers (idea is that if the link gets |
1154 |
< |
** cancelled beacause the server was already there, |
1155 |
< |
** there are no NICK's to be cancelled...). Of course, |
1156 |
< |
** if cancellation occurs, all this info is sent anyway, |
1157 |
< |
** and I guess the link dies when a read is attempted...? --msa |
1158 |
< |
** |
1159 |
< |
** Note: Link cancellation to occur at this point means |
1160 |
< |
** that at least two servers from my fragment are building |
1161 |
< |
** up connection this other fragment at the same time, it's |
1162 |
< |
** a race condition, not the normal way of operation... |
1163 |
< |
** |
1164 |
< |
** ALSO NOTE: using the get_client_name for server names-- |
1165 |
< |
** see previous *WARNING*!!! (Also, original inpath |
1166 |
< |
** is destroyed...) |
1167 |
< |
*/ |
817 |
> |
/* |
818 |
> |
* Pass on my client information to the new server |
819 |
> |
* |
820 |
> |
* First, pass only servers (idea is that if the link gets |
821 |
> |
* cancelled beacause the server was already there, |
822 |
> |
* there are no NICK's to be cancelled...). Of course, |
823 |
> |
* if cancellation occurs, all this info is sent anyway, |
824 |
> |
* and I guess the link dies when a read is attempted...? --msa |
825 |
> |
* |
826 |
> |
* Note: Link cancellation to occur at this point means |
827 |
> |
* that at least two servers from my fragment are building |
828 |
> |
* up connection this other fragment at the same time, it's |
829 |
> |
* a race condition, not the normal way of operation... |
830 |
> |
* |
831 |
> |
* ALSO NOTE: using the get_client_name for server names-- |
832 |
> |
* see previous *WARNING*!!! (Also, original inpath |
833 |
> |
* is destroyed...) |
834 |
> |
*/ |
835 |
|
|
836 |
|
DLINK_FOREACH_PREV(ptr, global_serv_list.tail) |
837 |
|
{ |
841 |
|
if (IsMe(target_p) || target_p->from == client_p) |
842 |
|
continue; |
843 |
|
|
844 |
< |
if (IsCapable(client_p, CAP_TS6)) |
845 |
< |
{ |
846 |
< |
if (HasID(target_p)) |
847 |
< |
sendto_one(client_p, ":%s SID %s %d %s :%s%s", |
1181 |
< |
ID(target_p->servptr), target_p->name, target_p->hopcount+1, |
1182 |
< |
target_p->id, IsHidden(target_p) ? "(H) " : "", |
1183 |
< |
target_p->info); |
1184 |
< |
else /* introducing non-ts6 server */ |
1185 |
< |
sendto_one(client_p, ":%s SERVER %s %d :%s%s", |
1186 |
< |
ID(target_p->servptr), target_p->name, target_p->hopcount+1, |
1187 |
< |
IsHidden(target_p) ? "(H) " : "", target_p->info); |
1188 |
< |
} |
1189 |
< |
else |
1190 |
< |
sendto_one(client_p, ":%s SERVER %s %d :%s%s", |
1191 |
< |
target_p->servptr->name, target_p->name, target_p->hopcount+1, |
1192 |
< |
IsHidden(target_p) ? "(H) " : "", target_p->info); |
1193 |
< |
} |
1194 |
< |
|
1195 |
< |
server_burst(client_p); |
1196 |
< |
} |
1197 |
< |
|
1198 |
< |
static void |
1199 |
< |
start_io(struct Client *server) |
1200 |
< |
{ |
1201 |
< |
struct LocalUser *lserver = server->localClient; |
1202 |
< |
int alloclen = 1; |
1203 |
< |
char *buf; |
1204 |
< |
dlink_node *ptr; |
1205 |
< |
struct dbuf_block *block; |
1206 |
< |
|
1207 |
< |
/* calculate how many bytes to allocate */ |
1208 |
< |
if (IsCapable(server, CAP_ZIP)) |
1209 |
< |
alloclen += 6; |
1210 |
< |
#ifdef HAVE_LIBCRYPTO |
1211 |
< |
if (IsCapable(server, CAP_ENC)) |
1212 |
< |
alloclen += 16 + lserver->in_cipher->keylen + lserver->out_cipher->keylen; |
1213 |
< |
#endif |
1214 |
< |
alloclen += dbuf_length(&lserver->buf_recvq); |
1215 |
< |
alloclen += dlink_list_length(&lserver->buf_recvq.blocks) * 3; |
1216 |
< |
alloclen += dbuf_length(&lserver->buf_sendq); |
1217 |
< |
alloclen += dlink_list_length(&lserver->buf_sendq.blocks) * 3; |
1218 |
< |
|
1219 |
< |
/* initialize servlink control sendq */ |
1220 |
< |
lserver->slinkq = buf = MyMalloc(alloclen); |
1221 |
< |
lserver->slinkq_ofs = 0; |
1222 |
< |
lserver->slinkq_len = alloclen; |
1223 |
< |
|
1224 |
< |
if (IsCapable(server, CAP_ZIP)) |
1225 |
< |
{ |
1226 |
< |
/* ziplink */ |
1227 |
< |
*buf++ = SLINKCMD_SET_ZIP_OUT_LEVEL; |
1228 |
< |
*buf++ = 0; /* | */ |
1229 |
< |
*buf++ = 1; /* \ len is 1 */ |
1230 |
< |
*buf++ = ConfigFileEntry.compression_level; |
1231 |
< |
*buf++ = SLINKCMD_START_ZIP_IN; |
1232 |
< |
*buf++ = SLINKCMD_START_ZIP_OUT; |
1233 |
< |
} |
1234 |
< |
#ifdef HAVE_LIBCRYPTO |
1235 |
< |
if (IsCapable(server, CAP_ENC)) |
1236 |
< |
{ |
1237 |
< |
/* Decryption settings */ |
1238 |
< |
*buf++ = SLINKCMD_SET_CRYPT_IN_CIPHER; |
1239 |
< |
*buf++ = 0; /* / (upper 8-bits of len) */ |
1240 |
< |
*buf++ = 1; /* \ cipher id is 1 byte (lower 8-bits of len) */ |
1241 |
< |
*buf++ = lserver->in_cipher->cipherid; |
1242 |
< |
*buf++ = SLINKCMD_SET_CRYPT_IN_KEY; |
1243 |
< |
*buf++ = 0; /* keylen < 256 */ |
1244 |
< |
*buf++ = lserver->in_cipher->keylen; |
1245 |
< |
memcpy(buf, lserver->in_key, lserver->in_cipher->keylen); |
1246 |
< |
buf += lserver->in_cipher->keylen; |
1247 |
< |
/* Encryption settings */ |
1248 |
< |
*buf++ = SLINKCMD_SET_CRYPT_OUT_CIPHER; |
1249 |
< |
*buf++ = 0; /* / (upper 8-bits of len) */ |
1250 |
< |
*buf++ = 1; /* \ cipher id is 1 byte (lower 8-bits of len) */ |
1251 |
< |
*buf++ = lserver->out_cipher->cipherid; |
1252 |
< |
*buf++ = SLINKCMD_SET_CRYPT_OUT_KEY; |
1253 |
< |
*buf++ = 0; /* keylen < 256 */ |
1254 |
< |
*buf++ = lserver->out_cipher->keylen; |
1255 |
< |
memcpy(buf, lserver->out_key, lserver->out_cipher->keylen); |
1256 |
< |
buf += lserver->out_cipher->keylen; |
1257 |
< |
*buf++ = SLINKCMD_START_CRYPT_IN; |
1258 |
< |
*buf++ = SLINKCMD_START_CRYPT_OUT; |
1259 |
< |
} |
1260 |
< |
#endif |
1261 |
< |
|
1262 |
< |
/* pass the whole recvq to servlink */ |
1263 |
< |
DLINK_FOREACH (ptr, lserver->buf_recvq.blocks.head) |
1264 |
< |
{ |
1265 |
< |
block = ptr->data; |
1266 |
< |
*buf++ = SLINKCMD_INJECT_RECVQ; |
1267 |
< |
*buf++ = (block->size >> 8); |
1268 |
< |
*buf++ = (block->size & 0xff); |
1269 |
< |
memcpy(buf, &block->data[0], block->size); |
1270 |
< |
buf += block->size; |
1271 |
< |
} |
1272 |
< |
|
1273 |
< |
dbuf_clear(&lserver->buf_recvq); |
844 |
> |
sendto_one(client_p, ":%s SID %s %d %s :%s%s", |
845 |
> |
ID(target_p->servptr), target_p->name, target_p->hopcount+1, |
846 |
> |
target_p->id, IsHidden(target_p) ? "(H) " : "", |
847 |
> |
target_p->info); |
848 |
|
|
849 |
< |
/* pass the whole sendq to servlink */ |
850 |
< |
DLINK_FOREACH (ptr, lserver->buf_sendq.blocks.head) |
1277 |
< |
{ |
1278 |
< |
block = ptr->data; |
1279 |
< |
*buf++ = SLINKCMD_INJECT_SENDQ; |
1280 |
< |
*buf++ = (block->size >> 8); |
1281 |
< |
*buf++ = (block->size & 0xff); |
1282 |
< |
memcpy(buf, &block->data[0], block->size); |
1283 |
< |
buf += block->size; |
849 |
> |
if (HasFlag(target_p, FLAGS_EOB)) |
850 |
> |
sendto_one(client_p, ":%s EOB", ID_or_name(target_p, client_p)); |
851 |
|
} |
852 |
|
|
853 |
< |
dbuf_clear(&lserver->buf_sendq); |
1287 |
< |
|
1288 |
< |
/* start io */ |
1289 |
< |
*buf++ = SLINKCMD_INIT; |
1290 |
< |
|
1291 |
< |
/* schedule a write */ |
1292 |
< |
send_queued_slink_write(server); |
1293 |
< |
} |
1294 |
< |
|
1295 |
< |
/* fork_server() |
1296 |
< |
* |
1297 |
< |
* inputs - struct Client *server |
1298 |
< |
* output - success: 0 / failure: -1 |
1299 |
< |
* side effect - fork, and exec SERVLINK to handle this connection |
1300 |
< |
*/ |
1301 |
< |
static int |
1302 |
< |
fork_server(struct Client *server) |
1303 |
< |
{ |
1304 |
< |
#ifndef HAVE_SOCKETPAIR |
1305 |
< |
return -1; |
1306 |
< |
#else |
1307 |
< |
int i; |
1308 |
< |
int slink_fds[2][2]; |
1309 |
< |
/* 0? - ctrl | 1? - data |
1310 |
< |
* ?0 - child | ?1 - parent */ |
1311 |
< |
|
1312 |
< |
if (socketpair(AF_UNIX, SOCK_STREAM, 0, slink_fds[0]) < 0) |
1313 |
< |
return -1; |
1314 |
< |
if (socketpair(AF_UNIX, SOCK_STREAM, 0, slink_fds[1]) < 0) |
1315 |
< |
goto free_ctrl_fds; |
1316 |
< |
|
1317 |
< |
if ((i = fork()) < 0) |
1318 |
< |
{ |
1319 |
< |
close(slink_fds[1][0]); close(slink_fds[1][1]); |
1320 |
< |
free_ctrl_fds: |
1321 |
< |
close(slink_fds[0][0]); close(slink_fds[0][1]); |
1322 |
< |
return -1; |
1323 |
< |
} |
1324 |
< |
|
1325 |
< |
if (i == 0) |
1326 |
< |
{ |
1327 |
< |
char fd_str[3][6]; /* store 3x sizeof("65535") */ |
1328 |
< |
char *kid_argv[7]; |
1329 |
< |
|
1330 |
< |
#ifdef O_ASYNC |
1331 |
< |
fcntl(server->localClient->fd.fd, F_SETFL, |
1332 |
< |
fcntl(server->localClient->fd.fd, F_GETFL, 0) & ~O_ASYNC); |
1333 |
< |
#endif |
1334 |
< |
close_fds(&server->localClient->fd); |
1335 |
< |
close(slink_fds[0][1]); |
1336 |
< |
close(slink_fds[1][1]); |
1337 |
< |
|
1338 |
< |
sprintf(fd_str[0], "%d", slink_fds[0][0]); |
1339 |
< |
sprintf(fd_str[1], "%d", slink_fds[1][0]); |
1340 |
< |
sprintf(fd_str[2], "%d", server->localClient->fd.fd); |
1341 |
< |
|
1342 |
< |
kid_argv[0] = "-slink"; |
1343 |
< |
kid_argv[1] = kid_argv[2] = fd_str[0]; /* ctrl */ |
1344 |
< |
kid_argv[3] = kid_argv[4] = fd_str[1]; /* data */ |
1345 |
< |
kid_argv[5] = fd_str[2]; /* network */ |
1346 |
< |
kid_argv[6] = NULL; |
1347 |
< |
|
1348 |
< |
execv(ConfigFileEntry.servlink_path, kid_argv); |
1349 |
< |
|
1350 |
< |
_exit(1); |
1351 |
< |
} |
1352 |
< |
|
1353 |
< |
/* close the network fd and the child ends of the pipes */ |
1354 |
< |
fd_close(&server->localClient->fd); |
1355 |
< |
close(slink_fds[0][0]); |
1356 |
< |
close(slink_fds[1][0]); |
1357 |
< |
|
1358 |
< |
execute_callback(setup_socket_cb, slink_fds[0][1]); |
1359 |
< |
execute_callback(setup_socket_cb, slink_fds[1][1]); |
1360 |
< |
|
1361 |
< |
fd_open(&server->localClient->ctrlfd, slink_fds[0][1], 1, "slink ctrl"); |
1362 |
< |
fd_open(&server->localClient->fd, slink_fds[1][1], 1, "slink data"); |
1363 |
< |
|
1364 |
< |
read_ctrl_packet(&server->localClient->ctrlfd, server); |
1365 |
< |
read_packet(&server->localClient->fd, server); |
1366 |
< |
|
1367 |
< |
return 0; |
1368 |
< |
#endif |
853 |
> |
server_burst(client_p); |
854 |
|
} |
855 |
|
|
856 |
|
/* server_burst() |
883 |
|
|
884 |
|
/* burst_all() |
885 |
|
* |
886 |
< |
* inputs - pointer to server to send burst to |
886 |
> |
* inputs - pointer to server to send burst to |
887 |
|
* output - NONE |
888 |
|
* side effects - complete burst of channels/nicks is sent to client_p |
889 |
|
*/ |
901 |
|
burst_members(client_p, chptr); |
902 |
|
send_channel_modes(client_p, chptr); |
903 |
|
|
904 |
< |
if (IsCapable(client_p, CAP_TBURST) || |
905 |
< |
IsCapable(client_p, CAP_TB)) |
1421 |
< |
send_tb(client_p, chptr); |
904 |
> |
if (IsCapable(client_p, CAP_TBURST)) |
905 |
> |
send_tb(client_p, chptr); |
906 |
|
} |
907 |
|
} |
908 |
|
|
912 |
|
{ |
913 |
|
struct Client *target_p = ptr->data; |
914 |
|
|
915 |
< |
if (!IsBursted(target_p) && target_p->from != client_p) |
915 |
> |
if (!HasFlag(target_p, FLAGS_BURSTED) && target_p->from != client_p) |
916 |
|
sendnick_TS(client_p, target_p); |
917 |
< |
|
918 |
< |
ClearBursted(target_p); |
917 |
> |
|
918 |
> |
DelFlag(target_p, FLAGS_BURSTED); |
919 |
|
} |
920 |
|
|
1437 |
– |
/* We send the time we started the burst, and let the remote host determine an EOB time, |
1438 |
– |
** as otherwise we end up sending a EOB of 0 Sending here means it gets sent last -- fl |
1439 |
– |
*/ |
1440 |
– |
/* Its simpler to just send EOB and use the time its been connected.. --fl_ */ |
921 |
|
if (IsCapable(client_p, CAP_EOB)) |
922 |
|
sendto_one(client_p, ":%s EOB", ID_or_name(&me, client_p)); |
923 |
|
} |
929 |
|
* - pointer to channel |
930 |
|
* output - NONE |
931 |
|
* side effects - Called on a server burst when |
932 |
< |
* server is CAP_TB|CAP_TBURST capable |
932 |
> |
* server is CAP_TBURST capable |
933 |
|
*/ |
934 |
|
static void |
935 |
|
send_tb(struct Client *client_p, struct Channel *chptr) |
948 |
|
* for further information -Michael |
949 |
|
*/ |
950 |
|
if (chptr->topic_time != 0) |
951 |
< |
{ |
952 |
< |
if (IsCapable(client_p, CAP_TBURST)) |
953 |
< |
sendto_one(client_p, ":%s TBURST %lu %s %lu %s :%s", |
954 |
< |
me.name, (unsigned long)chptr->channelts, chptr->chname, |
955 |
< |
(unsigned long)chptr->topic_time, |
956 |
< |
chptr->topic_info ? chptr->topic_info : "", |
1477 |
< |
chptr->topic ? chptr->topic : ""); |
1478 |
< |
else if (IsCapable(client_p, CAP_TB)) |
1479 |
< |
{ |
1480 |
< |
if (ConfigChannel.burst_topicwho) |
1481 |
< |
{ |
1482 |
< |
sendto_one(client_p, ":%s TB %s %lu %s :%s", |
1483 |
< |
me.name, chptr->chname, |
1484 |
< |
(unsigned long)chptr->topic_time, |
1485 |
< |
chptr->topic_info, chptr->topic ? chptr->topic : ""); |
1486 |
< |
} |
1487 |
< |
else |
1488 |
< |
{ |
1489 |
< |
sendto_one(client_p, ":%s TB %s %lu :%s", |
1490 |
< |
me.name, chptr->chname, |
1491 |
< |
(unsigned long)chptr->topic_time, |
1492 |
< |
chptr->topic ? chptr->topic : ""); |
1493 |
< |
} |
1494 |
< |
} |
1495 |
< |
} |
951 |
> |
sendto_one(client_p, ":%s TBURST %lu %s %lu %s :%s", |
952 |
> |
ID_or_name(&me, client_p), |
953 |
> |
(unsigned long)chptr->channelts, chptr->chname, |
954 |
> |
(unsigned long)chptr->topic_time, |
955 |
> |
chptr->topic_info, |
956 |
> |
chptr->topic); |
957 |
|
} |
958 |
|
|
959 |
|
/* burst_members() |
975 |
|
ms = ptr->data; |
976 |
|
target_p = ms->client_p; |
977 |
|
|
978 |
< |
if (!IsBursted(target_p)) |
978 |
> |
if (!HasFlag(target_p, FLAGS_BURSTED)) |
979 |
|
{ |
980 |
< |
SetBursted(target_p); |
980 |
> |
AddFlag(target_p, FLAGS_BURSTED); |
981 |
|
|
982 |
|
if (target_p->from != client_p) |
983 |
|
sendnick_TS(client_p, target_p); |
992 |
|
|
993 |
|
/* serv_connect() - initiate a server connection |
994 |
|
* |
995 |
< |
* inputs - pointer to conf |
995 |
> |
* inputs - pointer to conf |
996 |
|
* - pointer to client doing the connect |
997 |
|
* output - |
998 |
|
* side effects - |
1007 |
|
* it suceeded or not, and 0 if it fails in here somewhere. |
1008 |
|
*/ |
1009 |
|
int |
1010 |
< |
serv_connect(struct AccessItem *aconf, struct Client *by) |
1010 |
> |
serv_connect(struct MaskItem *conf, struct Client *by) |
1011 |
|
{ |
1551 |
– |
struct ConfItem *conf; |
1012 |
|
struct Client *client_p; |
1013 |
< |
char buf[HOSTIPLEN]; |
1013 |
> |
char buf[HOSTIPLEN + 1]; |
1014 |
|
|
1015 |
|
/* conversion structs */ |
1016 |
|
struct sockaddr_in *v4; |
1017 |
< |
/* Make sure aconf is useful */ |
1018 |
< |
assert(aconf != NULL); |
1017 |
> |
/* Make sure conf is useful */ |
1018 |
> |
assert(conf != NULL); |
1019 |
|
|
1560 |
– |
if(aconf == NULL) |
1561 |
– |
return (0); |
1020 |
|
|
1021 |
< |
/* XXX should be passing struct ConfItem in the first place */ |
1564 |
< |
conf = unmap_conf_item(aconf); |
1565 |
< |
|
1566 |
< |
/* log */ |
1567 |
< |
getnameinfo((struct sockaddr *)&aconf->ipnum, aconf->ipnum.ss_len, |
1021 |
> |
getnameinfo((struct sockaddr *)&conf->addr, conf->addr.ss_len, |
1022 |
|
buf, sizeof(buf), NULL, 0, NI_NUMERICHOST); |
1023 |
< |
ilog(L_NOTICE, "Connect to %s[%s] @%s", aconf->user, aconf->host, |
1023 |
> |
ilog(LOG_TYPE_IRCD, "Connect to %s[%s] @%s", conf->name, conf->host, |
1024 |
|
buf); |
1025 |
|
|
1026 |
|
/* Still processing a DNS lookup? -> exit */ |
1027 |
< |
if (aconf->dns_pending) |
1027 |
> |
if (conf->dns_pending) |
1028 |
|
{ |
1029 |
< |
sendto_realops_flags(UMODE_ALL, L_ALL, |
1029 |
> |
sendto_realops_flags(UMODE_ALL, L_ALL, SEND_NOTICE, |
1030 |
|
"Error connecting to %s: DNS lookup for connect{} in progress.", |
1031 |
|
conf->name); |
1032 |
|
return (0); |
1033 |
|
} |
1034 |
|
|
1035 |
< |
if (aconf->dns_failed) |
1035 |
> |
if (conf->dns_failed) |
1036 |
|
{ |
1037 |
< |
sendto_realops_flags(UMODE_ALL, L_ALL, |
1037 |
> |
sendto_realops_flags(UMODE_ALL, L_ALL, SEND_NOTICE, |
1038 |
|
"Error connecting to %s: DNS lookup for connect{} failed.", |
1039 |
|
conf->name); |
1040 |
|
return (0); |
1041 |
|
} |
1042 |
|
|
1043 |
|
/* Make sure this server isn't already connected |
1044 |
< |
* Note: aconf should ALWAYS be a valid C: line |
1044 |
> |
* Note: conf should ALWAYS be a valid C: line |
1045 |
|
*/ |
1046 |
< |
if ((client_p = find_server(conf->name)) != NULL) |
1047 |
< |
{ |
1048 |
< |
sendto_realops_flags(UMODE_ALL, L_ADMIN, |
1049 |
< |
"Server %s already present from %s", |
1050 |
< |
conf->name, get_client_name(client_p, SHOW_IP)); |
1051 |
< |
sendto_realops_flags(UMODE_ALL, L_OPER, |
1052 |
< |
"Server %s already present from %s", |
1053 |
< |
conf->name, get_client_name(client_p, MASK_IP)); |
1046 |
> |
if ((client_p = hash_find_server(conf->name)) != NULL) |
1047 |
> |
{ |
1048 |
> |
sendto_realops_flags(UMODE_ALL, L_ADMIN, SEND_NOTICE, |
1049 |
> |
"Server %s already present from %s", |
1050 |
> |
conf->name, get_client_name(client_p, SHOW_IP)); |
1051 |
> |
sendto_realops_flags(UMODE_ALL, L_OPER, SEND_NOTICE, |
1052 |
> |
"Server %s already present from %s", |
1053 |
> |
conf->name, get_client_name(client_p, MASK_IP)); |
1054 |
|
if (by && IsClient(by) && !MyClient(by)) |
1055 |
< |
sendto_one(by, ":%s NOTICE %s :Server %s already present from %s", |
1056 |
< |
me.name, by->name, conf->name, |
1057 |
< |
get_client_name(client_p, MASK_IP)); |
1604 |
< |
return (0); |
1055 |
> |
sendto_one_notice(by, &me, ":Server %s already present from %s", |
1056 |
> |
conf->name, get_client_name(client_p, MASK_IP)); |
1057 |
> |
return 0; |
1058 |
|
} |
1059 |
< |
|
1059 |
> |
|
1060 |
|
/* Create a local client */ |
1061 |
|
client_p = make_client(NULL); |
1062 |
|
|
1063 |
|
/* Copy in the server, hostname, fd */ |
1064 |
|
strlcpy(client_p->name, conf->name, sizeof(client_p->name)); |
1065 |
< |
strlcpy(client_p->host, aconf->host, sizeof(client_p->host)); |
1065 |
> |
strlcpy(client_p->host, conf->host, sizeof(client_p->host)); |
1066 |
|
|
1067 |
|
/* We already converted the ip once, so lets use it - stu */ |
1068 |
|
strlcpy(client_p->sockhost, buf, sizeof(client_p->sockhost)); |
1069 |
|
|
1070 |
< |
/* create a socket for the server connection */ |
1071 |
< |
if (comm_open(&client_p->localClient->fd, aconf->ipnum.ss.ss_family, |
1070 |
> |
/* create a socket for the server connection */ |
1071 |
> |
if (comm_open(&client_p->localClient->fd, conf->addr.ss.ss_family, |
1072 |
|
SOCK_STREAM, 0, NULL) < 0) |
1073 |
|
{ |
1074 |
|
/* Eek, failure to create the socket */ |
1075 |
< |
report_error(L_ALL, |
1076 |
< |
"opening stream socket to %s: %s", conf->name, errno); |
1075 |
> |
report_error(L_ALL, "opening stream socket to %s: %s", |
1076 |
> |
conf->name, errno); |
1077 |
|
SetDead(client_p); |
1078 |
|
exit_client(client_p, &me, "Connection failed"); |
1079 |
< |
return (0); |
1079 |
> |
return 0; |
1080 |
|
} |
1081 |
|
|
1082 |
|
/* servernames are always guaranteed under HOSTLEN chars */ |
1085 |
|
/* Attach config entries to client here rather than in |
1086 |
|
* serv_connect_callback(). This to avoid null pointer references. |
1087 |
|
*/ |
1088 |
< |
if (!attach_connect_block(client_p, conf->name, aconf->host)) |
1088 |
> |
if (!attach_connect_block(client_p, conf->name, conf->host)) |
1089 |
|
{ |
1090 |
< |
sendto_realops_flags(UMODE_ALL, L_ALL, |
1091 |
< |
"Host %s is not enabled for connecting:no C/N-line", |
1092 |
< |
conf->name); |
1093 |
< |
if (by && IsClient(by) && !MyClient(by)) |
1094 |
< |
sendto_one(by, ":%s NOTICE %s :Connect to host %s failed.", |
1095 |
< |
me.name, by->name, client_p->name); |
1090 |
> |
sendto_realops_flags(UMODE_ALL, L_ALL, SEND_NOTICE, |
1091 |
> |
"Host %s is not enabled for connecting: no connect{} block", |
1092 |
> |
conf->name); |
1093 |
> |
if (by && IsClient(by) && !MyClient(by)) |
1094 |
> |
sendto_one_notice(by, &me, ":Connect to host %s failed.", client_p->name); |
1095 |
> |
|
1096 |
|
SetDead(client_p); |
1097 |
|
exit_client(client_p, client_p, "Connection failed"); |
1098 |
< |
return (0); |
1098 |
> |
return 0; |
1099 |
|
} |
1100 |
|
|
1101 |
|
/* at this point we have a connection in progress and C/N lines |
1114 |
|
SetConnecting(client_p); |
1115 |
|
dlinkAdd(client_p, &client_p->node, &global_client_list); |
1116 |
|
/* from def_fam */ |
1117 |
< |
client_p->localClient->aftype = aconf->aftype; |
1117 |
> |
client_p->localClient->aftype = conf->aftype; |
1118 |
|
|
1119 |
|
/* Now, initiate the connection */ |
1120 |
< |
/* XXX assume that a non 0 type means a specific bind address |
1120 |
> |
/* XXX assume that a non 0 type means a specific bind address |
1121 |
|
* for this connect. |
1122 |
|
*/ |
1123 |
< |
switch (aconf->aftype) |
1123 |
> |
switch (conf->aftype) |
1124 |
|
{ |
1125 |
|
case AF_INET: |
1126 |
< |
v4 = (struct sockaddr_in*)&aconf->my_ipnum; |
1126 |
> |
v4 = (struct sockaddr_in*)&conf->bind; |
1127 |
|
if (v4->sin_addr.s_addr != 0) |
1128 |
|
{ |
1129 |
|
struct irc_ssaddr ipn; |
1130 |
|
memset(&ipn, 0, sizeof(struct irc_ssaddr)); |
1131 |
|
ipn.ss.ss_family = AF_INET; |
1132 |
|
ipn.ss_port = 0; |
1133 |
< |
memcpy(&ipn, &aconf->my_ipnum, sizeof(struct irc_ssaddr)); |
1134 |
< |
comm_connect_tcp(&client_p->localClient->fd, aconf->host, aconf->port, |
1135 |
< |
(struct sockaddr *)&ipn, ipn.ss_len, |
1136 |
< |
serv_connect_callback, client_p, aconf->aftype, |
1137 |
< |
CONNECTTIMEOUT); |
1133 |
> |
memcpy(&ipn, &conf->bind, sizeof(struct irc_ssaddr)); |
1134 |
> |
comm_connect_tcp(&client_p->localClient->fd, conf->host, conf->port, |
1135 |
> |
(struct sockaddr *)&ipn, ipn.ss_len, |
1136 |
> |
serv_connect_callback, client_p, conf->aftype, |
1137 |
> |
CONNECTTIMEOUT); |
1138 |
|
} |
1139 |
|
else if (ServerInfo.specific_ipv4_vhost) |
1140 |
|
{ |
1143 |
|
ipn.ss.ss_family = AF_INET; |
1144 |
|
ipn.ss_port = 0; |
1145 |
|
memcpy(&ipn, &ServerInfo.ip, sizeof(struct irc_ssaddr)); |
1146 |
< |
comm_connect_tcp(&client_p->localClient->fd, aconf->host, aconf->port, |
1146 |
> |
comm_connect_tcp(&client_p->localClient->fd, conf->host, conf->port, |
1147 |
|
(struct sockaddr *)&ipn, ipn.ss_len, |
1148 |
< |
serv_connect_callback, client_p, aconf->aftype, |
1149 |
< |
CONNECTTIMEOUT); |
1148 |
> |
serv_connect_callback, client_p, conf->aftype, |
1149 |
> |
CONNECTTIMEOUT); |
1150 |
|
} |
1151 |
|
else |
1152 |
< |
comm_connect_tcp(&client_p->localClient->fd, aconf->host, aconf->port, |
1153 |
< |
NULL, 0, serv_connect_callback, client_p, aconf->aftype, |
1152 |
> |
comm_connect_tcp(&client_p->localClient->fd, conf->host, conf->port, |
1153 |
> |
NULL, 0, serv_connect_callback, client_p, conf->aftype, |
1154 |
|
CONNECTTIMEOUT); |
1155 |
|
break; |
1156 |
|
#ifdef IPV6 |
1157 |
|
case AF_INET6: |
1158 |
|
{ |
1159 |
< |
struct irc_ssaddr ipn; |
1160 |
< |
struct sockaddr_in6 *v6; |
1161 |
< |
struct sockaddr_in6 *v6conf; |
1162 |
< |
|
1163 |
< |
memset(&ipn, 0, sizeof(struct irc_ssaddr)); |
1164 |
< |
v6conf = (struct sockaddr_in6 *)&aconf->my_ipnum; |
1165 |
< |
v6 = (struct sockaddr_in6 *)&ipn; |
1166 |
< |
|
1167 |
< |
if (memcmp(&v6conf->sin6_addr, &v6->sin6_addr, |
1715 |
< |
sizeof(struct in6_addr)) != 0) |
1716 |
< |
{ |
1717 |
< |
memcpy(&ipn, &aconf->my_ipnum, sizeof(struct irc_ssaddr)); |
1718 |
< |
ipn.ss.ss_family = AF_INET6; |
1719 |
< |
ipn.ss_port = 0; |
1720 |
< |
comm_connect_tcp(&client_p->localClient->fd, |
1721 |
< |
aconf->host, aconf->port, |
1722 |
< |
(struct sockaddr *)&ipn, ipn.ss_len, |
1723 |
< |
serv_connect_callback, client_p, |
1724 |
< |
aconf->aftype, CONNECTTIMEOUT); |
1725 |
< |
} |
1726 |
< |
else if (ServerInfo.specific_ipv6_vhost) |
1159 |
> |
struct irc_ssaddr ipn; |
1160 |
> |
struct sockaddr_in6 *v6; |
1161 |
> |
struct sockaddr_in6 *v6conf; |
1162 |
> |
|
1163 |
> |
memset(&ipn, 0, sizeof(struct irc_ssaddr)); |
1164 |
> |
v6conf = (struct sockaddr_in6 *)&conf->bind; |
1165 |
> |
v6 = (struct sockaddr_in6 *)&ipn; |
1166 |
> |
|
1167 |
> |
if (memcmp(&v6conf->sin6_addr, &v6->sin6_addr, sizeof(struct in6_addr)) != 0) |
1168 |
|
{ |
1169 |
< |
memcpy(&ipn, &ServerInfo.ip6, sizeof(struct irc_ssaddr)); |
1170 |
< |
ipn.ss.ss_family = AF_INET6; |
1171 |
< |
ipn.ss_port = 0; |
1172 |
< |
comm_connect_tcp(&client_p->localClient->fd, |
1173 |
< |
aconf->host, aconf->port, |
1174 |
< |
(struct sockaddr *)&ipn, ipn.ss_len, |
1175 |
< |
serv_connect_callback, client_p, |
1176 |
< |
aconf->aftype, CONNECTTIMEOUT); |
1177 |
< |
} |
1178 |
< |
else |
1179 |
< |
comm_connect_tcp(&client_p->localClient->fd, |
1180 |
< |
aconf->host, aconf->port, |
1181 |
< |
NULL, 0, serv_connect_callback, client_p, |
1182 |
< |
aconf->aftype, CONNECTTIMEOUT); |
1169 |
> |
memcpy(&ipn, &conf->bind, sizeof(struct irc_ssaddr)); |
1170 |
> |
ipn.ss.ss_family = AF_INET6; |
1171 |
> |
ipn.ss_port = 0; |
1172 |
> |
comm_connect_tcp(&client_p->localClient->fd, |
1173 |
> |
conf->host, conf->port, |
1174 |
> |
(struct sockaddr *)&ipn, ipn.ss_len, |
1175 |
> |
serv_connect_callback, client_p, |
1176 |
> |
conf->aftype, CONNECTTIMEOUT); |
1177 |
> |
} |
1178 |
> |
else if (ServerInfo.specific_ipv6_vhost) |
1179 |
> |
{ |
1180 |
> |
memcpy(&ipn, &ServerInfo.ip6, sizeof(struct irc_ssaddr)); |
1181 |
> |
ipn.ss.ss_family = AF_INET6; |
1182 |
> |
ipn.ss_port = 0; |
1183 |
> |
comm_connect_tcp(&client_p->localClient->fd, |
1184 |
> |
conf->host, conf->port, |
1185 |
> |
(struct sockaddr *)&ipn, ipn.ss_len, |
1186 |
> |
serv_connect_callback, client_p, |
1187 |
> |
conf->aftype, CONNECTTIMEOUT); |
1188 |
> |
} |
1189 |
> |
else |
1190 |
> |
comm_connect_tcp(&client_p->localClient->fd, |
1191 |
> |
conf->host, conf->port, |
1192 |
> |
NULL, 0, serv_connect_callback, client_p, |
1193 |
> |
conf->aftype, CONNECTTIMEOUT); |
1194 |
|
} |
1195 |
|
#endif |
1196 |
|
} |
1197 |
< |
return (1); |
1197 |
> |
return 1; |
1198 |
> |
} |
1199 |
> |
|
1200 |
> |
#ifdef HAVE_LIBCRYPTO |
1201 |
> |
static void |
1202 |
> |
finish_ssl_server_handshake(struct Client *client_p) |
1203 |
> |
{ |
1204 |
> |
struct MaskItem *conf = NULL; |
1205 |
> |
|
1206 |
> |
conf = find_conf_name(&client_p->localClient->confs, |
1207 |
> |
client_p->name, CONF_SERVER); |
1208 |
> |
if (conf == NULL) |
1209 |
> |
{ |
1210 |
> |
sendto_realops_flags(UMODE_ALL, L_ADMIN, SEND_NOTICE, |
1211 |
> |
"Lost connect{} block for %s", get_client_name(client_p, HIDE_IP)); |
1212 |
> |
sendto_realops_flags(UMODE_ALL, L_OPER, SEND_NOTICE, |
1213 |
> |
"Lost connect{} block for %s", get_client_name(client_p, MASK_IP)); |
1214 |
> |
|
1215 |
> |
exit_client(client_p, &me, "Lost connect{} block"); |
1216 |
> |
return; |
1217 |
> |
} |
1218 |
> |
|
1219 |
> |
sendto_one(client_p, "PASS %s TS %d %s", conf->spasswd, TS_CURRENT, me.id); |
1220 |
> |
|
1221 |
> |
send_capabilities(client_p, 0); |
1222 |
> |
|
1223 |
> |
sendto_one(client_p, "SERVER %s 1 :%s%s", |
1224 |
> |
me.name, ConfigServerHide.hidden ? "(H) " : "", |
1225 |
> |
me.info); |
1226 |
> |
|
1227 |
> |
/* If we've been marked dead because a send failed, just exit |
1228 |
> |
* here now and save everyone the trouble of us ever existing. |
1229 |
> |
*/ |
1230 |
> |
if (IsDead(client_p)) |
1231 |
> |
{ |
1232 |
> |
sendto_realops_flags(UMODE_ALL, L_ADMIN, SEND_NOTICE, |
1233 |
> |
"%s[%s] went dead during handshake", |
1234 |
> |
client_p->name, |
1235 |
> |
client_p->host); |
1236 |
> |
sendto_realops_flags(UMODE_ALL, L_OPER, SEND_NOTICE, |
1237 |
> |
"%s went dead during handshake", client_p->name); |
1238 |
> |
return; |
1239 |
> |
} |
1240 |
> |
|
1241 |
> |
/* don't move to serv_list yet -- we haven't sent a burst! */ |
1242 |
> |
/* If we get here, we're ok, so lets start reading some data */ |
1243 |
> |
comm_setselect(&client_p->localClient->fd, COMM_SELECT_READ, read_packet, client_p, 0); |
1244 |
> |
} |
1245 |
> |
|
1246 |
> |
static void |
1247 |
> |
ssl_server_handshake(fde_t *fd, struct Client *client_p) |
1248 |
> |
{ |
1249 |
> |
X509 *cert = NULL; |
1250 |
> |
int ret = 0; |
1251 |
> |
|
1252 |
> |
if ((ret = SSL_connect(client_p->localClient->fd.ssl)) <= 0) |
1253 |
> |
{ |
1254 |
> |
switch (SSL_get_error(client_p->localClient->fd.ssl, ret)) |
1255 |
> |
{ |
1256 |
> |
case SSL_ERROR_WANT_WRITE: |
1257 |
> |
comm_setselect(&client_p->localClient->fd, COMM_SELECT_WRITE, |
1258 |
> |
(PF *)ssl_server_handshake, client_p, 0); |
1259 |
> |
return; |
1260 |
> |
case SSL_ERROR_WANT_READ: |
1261 |
> |
comm_setselect(&client_p->localClient->fd, COMM_SELECT_READ, |
1262 |
> |
(PF *)ssl_server_handshake, client_p, 0); |
1263 |
> |
return; |
1264 |
> |
default: |
1265 |
> |
{ |
1266 |
> |
const char *sslerr = ERR_error_string(ERR_get_error(), NULL); |
1267 |
> |
sendto_realops_flags(UMODE_ALL, L_ALL, SEND_NOTICE, |
1268 |
> |
"Error connecting to %s: %s", client_p->name, |
1269 |
> |
sslerr ? sslerr : "unknown SSL error"); |
1270 |
> |
exit_client(client_p, client_p, "Error during SSL handshake"); |
1271 |
> |
return; |
1272 |
> |
} |
1273 |
> |
} |
1274 |
> |
} |
1275 |
> |
|
1276 |
> |
if ((cert = SSL_get_peer_certificate(client_p->localClient->fd.ssl))) |
1277 |
> |
{ |
1278 |
> |
int res = SSL_get_verify_result(client_p->localClient->fd.ssl); |
1279 |
> |
char buf[EVP_MAX_MD_SIZE * 2 + 1] = { '\0' }; |
1280 |
> |
unsigned char md[EVP_MAX_MD_SIZE] = { '\0' }; |
1281 |
> |
|
1282 |
> |
if (res == X509_V_OK || res == X509_V_ERR_SELF_SIGNED_CERT_IN_CHAIN || |
1283 |
> |
res == X509_V_ERR_UNABLE_TO_VERIFY_LEAF_SIGNATURE || |
1284 |
> |
res == X509_V_ERR_DEPTH_ZERO_SELF_SIGNED_CERT) |
1285 |
> |
{ |
1286 |
> |
unsigned int i = 0, n = 0; |
1287 |
> |
|
1288 |
> |
if (X509_digest(cert, EVP_sha256(), md, &n)) |
1289 |
> |
{ |
1290 |
> |
for (; i < n; ++i) |
1291 |
> |
snprintf(buf + 2 * i, 3, "%02X", md[i]); |
1292 |
> |
client_p->certfp = xstrdup(buf); |
1293 |
> |
} |
1294 |
> |
} |
1295 |
> |
else |
1296 |
> |
ilog(LOG_TYPE_IRCD, "Server %s!%s@%s gave bad SSL client certificate: %d", |
1297 |
> |
client_p->name, client_p->username, client_p->host, res); |
1298 |
> |
X509_free(cert); |
1299 |
> |
} |
1300 |
> |
|
1301 |
> |
finish_ssl_server_handshake(client_p); |
1302 |
|
} |
1303 |
|
|
1304 |
+ |
static void |
1305 |
+ |
ssl_connect_init(struct Client *client_p, struct MaskItem *conf, fde_t *fd) |
1306 |
+ |
{ |
1307 |
+ |
if ((client_p->localClient->fd.ssl = SSL_new(ServerInfo.client_ctx)) == NULL) |
1308 |
+ |
{ |
1309 |
+ |
ilog(LOG_TYPE_IRCD, "SSL_new() ERROR! -- %s", |
1310 |
+ |
ERR_error_string(ERR_get_error(), NULL)); |
1311 |
+ |
SetDead(client_p); |
1312 |
+ |
exit_client(client_p, client_p, "SSL_new failed"); |
1313 |
+ |
return; |
1314 |
+ |
} |
1315 |
+ |
|
1316 |
+ |
SSL_set_fd(fd->ssl, fd->fd); |
1317 |
+ |
|
1318 |
+ |
if (!EmptyString(conf->cipher_list)) |
1319 |
+ |
SSL_set_cipher_list(client_p->localClient->fd.ssl, conf->cipher_list); |
1320 |
+ |
|
1321 |
+ |
ssl_server_handshake(NULL, client_p); |
1322 |
+ |
} |
1323 |
+ |
#endif |
1324 |
+ |
|
1325 |
|
/* serv_connect_callback() - complete a server connection. |
1326 |
< |
* |
1326 |
> |
* |
1327 |
|
* This routine is called after the server connection attempt has |
1328 |
|
* completed. If unsucessful, an error is sent to ops and the client |
1329 |
|
* is closed. If sucessful, it goes through the initialisation/check |
1334 |
|
serv_connect_callback(fde_t *fd, int status, void *data) |
1335 |
|
{ |
1336 |
|
struct Client *client_p = data; |
1337 |
< |
struct ConfItem *conf=NULL; |
1761 |
< |
struct AccessItem *aconf=NULL; |
1337 |
> |
struct MaskItem *conf = NULL; |
1338 |
|
|
1339 |
|
/* First, make sure its a real client! */ |
1340 |
|
assert(client_p != NULL); |
1350 |
|
* Admins get to see any IP, mere opers don't *sigh* |
1351 |
|
*/ |
1352 |
|
if (ConfigServerHide.hide_server_ips) |
1353 |
< |
sendto_realops_flags(UMODE_ALL, L_ADMIN, |
1353 |
> |
sendto_realops_flags(UMODE_ALL, L_ADMIN, SEND_NOTICE, |
1354 |
|
"Error connecting to %s: %s", |
1355 |
|
client_p->name, comm_errstr(status)); |
1356 |
|
else |
1357 |
< |
sendto_realops_flags(UMODE_ALL, L_ADMIN, |
1358 |
< |
"Error connecting to %s[%s]: %s", client_p->name, |
1359 |
< |
client_p->host, comm_errstr(status)); |
1360 |
< |
|
1361 |
< |
sendto_realops_flags(UMODE_ALL, L_OPER, |
1362 |
< |
"Error connecting to %s: %s", |
1363 |
< |
client_p->name, comm_errstr(status)); |
1357 |
> |
sendto_realops_flags(UMODE_ALL, L_ADMIN, SEND_NOTICE, |
1358 |
> |
"Error connecting to %s[%s]: %s", client_p->name, |
1359 |
> |
client_p->host, comm_errstr(status)); |
1360 |
> |
|
1361 |
> |
sendto_realops_flags(UMODE_ALL, L_OPER, SEND_NOTICE, |
1362 |
> |
"Error connecting to %s: %s", |
1363 |
> |
client_p->name, comm_errstr(status)); |
1364 |
|
|
1365 |
|
/* If a fd goes bad, call dead_link() the socket is no |
1366 |
|
* longer valid for reading or writing. |
1372 |
|
/* COMM_OK, so continue the connection procedure */ |
1373 |
|
/* Get the C/N lines */ |
1374 |
|
conf = find_conf_name(&client_p->localClient->confs, |
1375 |
< |
client_p->name, SERVER_TYPE); |
1375 |
> |
client_p->name, CONF_SERVER); |
1376 |
|
if (conf == NULL) |
1377 |
|
{ |
1378 |
< |
sendto_realops_flags(UMODE_ALL, L_ADMIN, |
1379 |
< |
"Lost connect{} block for %s", get_client_name(client_p, HIDE_IP)); |
1380 |
< |
sendto_realops_flags(UMODE_ALL, L_OPER, |
1381 |
< |
"Lost connect{} block for %s", get_client_name(client_p, MASK_IP)); |
1378 |
> |
sendto_realops_flags(UMODE_ALL, L_ADMIN, SEND_NOTICE, |
1379 |
> |
"Lost connect{} block for %s", get_client_name(client_p, HIDE_IP)); |
1380 |
> |
sendto_realops_flags(UMODE_ALL, L_OPER, SEND_NOTICE, |
1381 |
> |
"Lost connect{} block for %s", get_client_name(client_p, MASK_IP)); |
1382 |
|
|
1383 |
|
exit_client(client_p, &me, "Lost connect{} block"); |
1384 |
|
return; |
1385 |
|
} |
1386 |
|
|
1811 |
– |
aconf = (struct AccessItem *)map_to_conf(conf); |
1387 |
|
/* Next, send the initial handshake */ |
1388 |
|
SetHandshake(client_p); |
1389 |
|
|
1390 |
|
#ifdef HAVE_LIBCRYPTO |
1391 |
< |
/* Handle all CRYPTLINK links in cryptlink_init */ |
1817 |
< |
if (IsConfCryptLink(aconf)) |
1391 |
> |
if (IsConfSSL(conf)) |
1392 |
|
{ |
1393 |
< |
cryptlink_init(client_p, conf, fd); |
1393 |
> |
ssl_connect_init(client_p, conf, fd); |
1394 |
|
return; |
1395 |
|
} |
1396 |
|
#endif |
1397 |
|
|
1398 |
< |
/* jdc -- Check and send spasswd, not passwd. */ |
1825 |
< |
if (!EmptyString(aconf->spasswd)) |
1826 |
< |
/* Send TS 6 form only if id */ |
1827 |
< |
sendto_one(client_p, "PASS %s TS %d %s", |
1828 |
< |
aconf->spasswd, TS_CURRENT, me.id); |
1398 |
> |
sendto_one(client_p, "PASS %s TS %d %s", conf->spasswd, TS_CURRENT, me.id); |
1399 |
|
|
1400 |
< |
/* Pass my info to the new server |
1831 |
< |
* |
1832 |
< |
* Pass on ZIP if supported |
1833 |
< |
* Pass on TB if supported. |
1834 |
< |
* - Dianora |
1835 |
< |
*/ |
1836 |
< |
send_capabilities(client_p, aconf, |
1837 |
< |
(IsConfCompressed(aconf) ? CAP_ZIP : 0) |
1838 |
< |
| (IsConfTopicBurst(aconf) ? CAP_TBURST|CAP_TB : 0), 0); |
1400 |
> |
send_capabilities(client_p, 0); |
1401 |
|
|
1402 |
< |
sendto_one(client_p, "SERVER %s 1 :%s%s", |
1403 |
< |
me.name, ConfigServerHide.hidden ? "(H) " : "", |
1842 |
< |
me.info); |
1402 |
> |
sendto_one(client_p, "SERVER %s 1 :%s%s", me.name, |
1403 |
> |
ConfigServerHide.hidden ? "(H) " : "", me.info); |
1404 |
|
|
1405 |
|
/* If we've been marked dead because a send failed, just exit |
1406 |
|
* here now and save everyone the trouble of us ever existing. |
1407 |
|
*/ |
1408 |
< |
if (IsDead(client_p)) |
1408 |
> |
if (IsDead(client_p)) |
1409 |
|
{ |
1410 |
< |
sendto_realops_flags(UMODE_ALL, L_ADMIN, |
1411 |
< |
"%s[%s] went dead during handshake", |
1410 |
> |
sendto_realops_flags(UMODE_ALL, L_ADMIN, SEND_NOTICE, |
1411 |
> |
"%s[%s] went dead during handshake", |
1412 |
|
client_p->name, |
1413 |
< |
client_p->host); |
1414 |
< |
sendto_realops_flags(UMODE_ALL, L_OPER, |
1415 |
< |
"%s went dead during handshake", client_p->name); |
1413 |
> |
client_p->host); |
1414 |
> |
sendto_realops_flags(UMODE_ALL, L_OPER, SEND_NOTICE, |
1415 |
> |
"%s went dead during handshake", client_p->name); |
1416 |
|
return; |
1417 |
|
} |
1418 |
|
|
1432 |
|
cptr = ptr->data; |
1433 |
|
|
1434 |
|
if (cptr && cptr->name[0]) |
1435 |
< |
if (match(name, cptr->name)) |
1435 |
> |
if (!match(name, cptr->name)) |
1436 |
|
return cptr; |
1437 |
|
} |
1877 |
– |
|
1878 |
– |
return NULL; |
1879 |
– |
} |
1880 |
– |
|
1881 |
– |
#ifdef HAVE_LIBCRYPTO |
1882 |
– |
/* |
1883 |
– |
* sends a CRYPTLINK SERV command. |
1884 |
– |
*/ |
1885 |
– |
void |
1886 |
– |
cryptlink_init(struct Client *client_p, struct ConfItem *conf, fde_t *fd) |
1887 |
– |
{ |
1888 |
– |
struct AccessItem *aconf; |
1889 |
– |
char *encrypted; |
1890 |
– |
unsigned char *key_to_send; |
1891 |
– |
char randkey[CIPHERKEYLEN]; |
1892 |
– |
int enc_len; |
1893 |
– |
|
1894 |
– |
/* get key */ |
1895 |
– |
if ((!ServerInfo.rsa_private_key) || |
1896 |
– |
(!RSA_check_key(ServerInfo.rsa_private_key)) ) |
1897 |
– |
{ |
1898 |
– |
cryptlink_error(client_p, "SERV", "Invalid RSA private key", |
1899 |
– |
"Invalid RSA private key"); |
1900 |
– |
return; |
1901 |
– |
} |
1902 |
– |
|
1903 |
– |
aconf = (struct AccessItem *)map_to_conf(conf); |
1904 |
– |
|
1905 |
– |
if (aconf->rsa_public_key == NULL) |
1906 |
– |
{ |
1907 |
– |
cryptlink_error(client_p, "SERV", "Invalid RSA public key", |
1908 |
– |
"Invalid RSA public key"); |
1909 |
– |
return; |
1910 |
– |
} |
1911 |
– |
|
1912 |
– |
if (get_randomness((unsigned char *)randkey, CIPHERKEYLEN) != 1) |
1913 |
– |
{ |
1914 |
– |
cryptlink_error(client_p, "SERV", "Couldn't generate keyphrase", |
1915 |
– |
"Couldn't generate keyphrase"); |
1916 |
– |
return; |
1917 |
– |
} |
1918 |
– |
|
1919 |
– |
encrypted = MyMalloc(RSA_size(ServerInfo.rsa_private_key)); |
1920 |
– |
enc_len = RSA_public_encrypt(CIPHERKEYLEN, |
1921 |
– |
(unsigned char *)randkey, |
1922 |
– |
(unsigned char *)encrypted, |
1923 |
– |
aconf->rsa_public_key, |
1924 |
– |
RSA_PKCS1_PADDING); |
1925 |
– |
|
1926 |
– |
memcpy(client_p->localClient->in_key, randkey, CIPHERKEYLEN); |
1927 |
– |
|
1928 |
– |
if (enc_len <= 0) |
1929 |
– |
{ |
1930 |
– |
report_crypto_errors(); |
1931 |
– |
MyFree(encrypted); |
1932 |
– |
cryptlink_error(client_p, "SERV", "Couldn't encrypt data", |
1933 |
– |
"Couldn't encrypt data"); |
1934 |
– |
return; |
1935 |
– |
} |
1438 |
|
|
1439 |
< |
if (!(base64_block(&key_to_send, encrypted, enc_len))) |
1938 |
< |
{ |
1939 |
< |
MyFree(encrypted); |
1940 |
< |
cryptlink_error(client_p, "SERV", "Couldn't base64 encode key", |
1941 |
< |
"Couldn't base64 encode key"); |
1942 |
< |
return; |
1943 |
< |
} |
1944 |
< |
|
1945 |
< |
send_capabilities(client_p, aconf, |
1946 |
< |
(IsConfCompressed(aconf) ? CAP_ZIP : 0) |
1947 |
< |
| (IsConfTopicBurst(aconf) ? CAP_TBURST|CAP_TB : 0), CAP_ENC_MASK); |
1948 |
< |
|
1949 |
< |
sendto_one(client_p, "PASS . TS %d %s", TS_CURRENT, me.id); |
1950 |
< |
sendto_one(client_p, "CRYPTLINK SERV %s %s :%s%s", |
1951 |
< |
me.name, key_to_send, |
1952 |
< |
ConfigServerHide.hidden ? "(H) " : "", me.info); |
1953 |
< |
|
1954 |
< |
SetHandshake(client_p); |
1955 |
< |
SetWaitAuth(client_p); |
1956 |
< |
|
1957 |
< |
MyFree(encrypted); |
1958 |
< |
MyFree(key_to_send); |
1959 |
< |
|
1960 |
< |
if (IsDead(client_p)) |
1961 |
< |
cryptlink_error(client_p, "SERV", "Went dead during handshake", |
1962 |
< |
"Went dead during handshake"); |
1963 |
< |
else if (fd != NULL) |
1964 |
< |
/* If we get here, we're ok, so lets start reading some data */ |
1965 |
< |
comm_setselect(fd, COMM_SELECT_READ, read_packet, client_p, 0); |
1966 |
< |
} |
1967 |
< |
|
1968 |
< |
void |
1969 |
< |
cryptlink_error(struct Client *client_p, const char *type, |
1970 |
< |
const char *reason, const char *client_reason) |
1971 |
< |
{ |
1972 |
< |
sendto_realops_flags(UMODE_ALL, L_ADMIN, "%s: CRYPTLINK %s error - %s", |
1973 |
< |
get_client_name(client_p, SHOW_IP), type, reason); |
1974 |
< |
sendto_realops_flags(UMODE_ALL, L_OPER, "%s: CRYPTLINK %s error - %s", |
1975 |
< |
get_client_name(client_p, MASK_IP), type, reason); |
1976 |
< |
ilog(L_ERROR, "%s: CRYPTLINK %s error - %s", |
1977 |
< |
get_client_name(client_p, SHOW_IP), type, reason); |
1978 |
< |
|
1979 |
< |
/* If client_reason isn't NULL, then exit the client with the message |
1980 |
< |
* defined in the call. |
1981 |
< |
*/ |
1982 |
< |
if ((client_reason != NULL) && (!IsDead(client_p))) |
1983 |
< |
exit_client(client_p, &me, client_reason); |
1984 |
< |
} |
1985 |
< |
|
1986 |
< |
static char base64_chars[] = |
1987 |
< |
"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/="; |
1988 |
< |
|
1989 |
< |
static char base64_values[] = |
1990 |
< |
{ |
1991 |
< |
/* 00-15 */ -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, |
1992 |
< |
/* 16-31 */ -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, |
1993 |
< |
/* 32-47 */ -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 62, -1, -1, -1, 63, |
1994 |
< |
/* 48-63 */ 52, 53, 54, 55, 56, 57, 58, 59, 60, 61, -1, -1, -1, 0, -1, -1, |
1995 |
< |
/* 64-79 */ -1, 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, |
1996 |
< |
/* 80-95 */ 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, -1, -1, -1, -1, -1, |
1997 |
< |
/* 96-111 */ -1, 26, 27, 28, 29, 30, 31, 32, 33, 34, 35, 36, 37, 38, 39, 40, |
1998 |
< |
/* 112-127 */ 41, 42, 43, 44, 45, 46, 47, 48, 49, 50, 51, -1, -1, -1, -1, -1, |
1999 |
< |
/* 128-143 */ -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, |
2000 |
< |
/* 144-159 */ -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, |
2001 |
< |
/* 160-175 */ -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, |
2002 |
< |
/* 186-191 */ -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, |
2003 |
< |
/* 192-207 */ -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, |
2004 |
< |
/* 208-223 */ -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, |
2005 |
< |
/* 224-239 */ -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, |
2006 |
< |
/* 240-255 */ -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1 |
2007 |
< |
}; |
2008 |
< |
|
2009 |
< |
/* |
2010 |
< |
* base64_block will allocate and return a new block of memory |
2011 |
< |
* using MyMalloc(). It should be freed after use. |
2012 |
< |
*/ |
2013 |
< |
int |
2014 |
< |
base64_block(unsigned char **output, char *data, int len) |
2015 |
< |
{ |
2016 |
< |
unsigned char *out; |
2017 |
< |
unsigned char *in = (unsigned char*)data; |
2018 |
< |
unsigned long int q_in; |
2019 |
< |
int i; |
2020 |
< |
int count = 0; |
2021 |
< |
|
2022 |
< |
out = MyMalloc(((((len + 2) - ((len + 2) % 3)) / 3) * 4) + 1); |
2023 |
< |
|
2024 |
< |
/* process 24 bits at a time */ |
2025 |
< |
for( i = 0; i < len; i += 3) |
2026 |
< |
{ |
2027 |
< |
q_in = 0; |
2028 |
< |
|
2029 |
< |
if ( i + 2 < len ) |
2030 |
< |
{ |
2031 |
< |
q_in = (in[i+2] & 0xc0) << 2; |
2032 |
< |
q_in |= in[i+2]; |
2033 |
< |
} |
2034 |
< |
|
2035 |
< |
if ( i + 1 < len ) |
2036 |
< |
{ |
2037 |
< |
q_in |= (in[i+1] & 0x0f) << 10; |
2038 |
< |
q_in |= (in[i+1] & 0xf0) << 12; |
2039 |
< |
} |
2040 |
< |
|
2041 |
< |
q_in |= (in[i] & 0x03) << 20; |
2042 |
< |
q_in |= in[i] << 22; |
2043 |
< |
|
2044 |
< |
q_in &= 0x3f3f3f3f; |
2045 |
< |
|
2046 |
< |
out[count++] = base64_chars[((q_in >> 24) )]; |
2047 |
< |
out[count++] = base64_chars[((q_in >> 16) & 0xff)]; |
2048 |
< |
out[count++] = base64_chars[((q_in >> 8) & 0xff)]; |
2049 |
< |
out[count++] = base64_chars[((q_in ) & 0xff)]; |
2050 |
< |
} |
2051 |
< |
if ( (i - len) > 0 ) |
2052 |
< |
{ |
2053 |
< |
out[count-1] = '='; |
2054 |
< |
if ( (i - len) > 1 ) |
2055 |
< |
out[count-2] = '='; |
2056 |
< |
} |
2057 |
< |
|
2058 |
< |
out[count] = '\0'; |
2059 |
< |
*output = out; |
2060 |
< |
return (count); |
2061 |
< |
} |
2062 |
< |
|
2063 |
< |
/* |
2064 |
< |
* unbase64_block will allocate and return a new block of memory |
2065 |
< |
* using MyMalloc(). It should be freed after use. |
2066 |
< |
*/ |
2067 |
< |
int |
2068 |
< |
unbase64_block(unsigned char **output, char *data, int len) |
2069 |
< |
{ |
2070 |
< |
unsigned char *out; |
2071 |
< |
unsigned char *in = (unsigned char*)data; |
2072 |
< |
unsigned long int q_in; |
2073 |
< |
int i; |
2074 |
< |
int count = 0; |
2075 |
< |
|
2076 |
< |
if ((len % 4) != 0) |
2077 |
< |
return (0); |
2078 |
< |
|
2079 |
< |
out = MyMalloc(((len / 4) * 3) + 1); |
2080 |
< |
|
2081 |
< |
/* process 32 bits at a time */ |
2082 |
< |
for( i = 0; (i + 3) < len; i+=4) |
2083 |
< |
{ |
2084 |
< |
/* compress input (chars a, b, c and d) as follows: |
2085 |
< |
* (after converting ascii -> base64 value) |
2086 |
< |
* |
2087 |
< |
* |00000000aaaaaabbbbbbccccccdddddd| |
2088 |
< |
* | 765432 107654 321076 543210| |
2089 |
< |
*/ |
2090 |
< |
|
2091 |
< |
q_in = 0; |
2092 |
< |
|
2093 |
< |
if (base64_values[in[i+3]] > -1) |
2094 |
< |
q_in |= base64_values[in[i+3]] ; |
2095 |
< |
if (base64_values[in[i+2]] > -1) |
2096 |
< |
q_in |= base64_values[in[i+2]] << 6; |
2097 |
< |
if (base64_values[in[i+1]] > -1) |
2098 |
< |
q_in |= base64_values[in[i+1]] << 12; |
2099 |
< |
if (base64_values[in[i ]] > -1) |
2100 |
< |
q_in |= base64_values[in[i ]] << 18; |
2101 |
< |
|
2102 |
< |
out[count++] = (q_in >> 16) & 0xff; |
2103 |
< |
out[count++] = (q_in >> 8) & 0xff; |
2104 |
< |
out[count++] = (q_in ) & 0xff; |
2105 |
< |
} |
2106 |
< |
|
2107 |
< |
if (in[i-1] == '=') count--; |
2108 |
< |
if (in[i-2] == '=') count--; |
2109 |
< |
|
2110 |
< |
out[count] = '\0'; |
2111 |
< |
*output = out; |
2112 |
< |
return (count); |
1439 |
> |
return NULL; |
1440 |
|
} |
2114 |
– |
|
2115 |
– |
#endif /* HAVE_LIBCRYPTO */ |
2116 |
– |
|