trunk/src/server.c

/*
 *  ircd-hybrid: an advanced, lightweight Internet Relay Chat Daemon (ircd)
 *
 *  Copyright (c) 1997-2020 ircd-hybrid development team
 *
 *  This program is free software; you can redistribute it and/or modify
 *  it under the terms of the GNU General Public License as published by
 *  the Free Software Foundation; either version 2 of the License, or
 *  (at your option) any later version.
 *
 *  This program is distributed in the hope that it will be useful,
 *  but WITHOUT ANY WARRANTY; without even the implied warranty of
 *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 *  GNU General Public License for more details.
 *
 *  You should have received a copy of the GNU General Public License
 *  along with this program; if not, write to the Free Software
 *  Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301
 *  USA
 */

/*! \file server.c
 * \brief Server related functions.
 * \version $Id$
 */

#include "stdinc.h"
#include "list.h"
#include "client.h"
#include "event.h"
#include "hash.h"
#include "irc_string.h"
#include "ircd.h"
#include "ircd_defs.h"
#include "s_bsd.h"
#include "packet.h"
#include "conf.h"
#include "server.h"
#include "server_capab.h"
#include "log.h"
#include "send.h"
#include "memory.h"
#include "parse.h"


dlink_list flatten_links;
static void server_connect_callback(fde_t *, int, void *);


/*
 * write_links_file
 *
 * inputs       - void pointer which is not used
 * output       - NONE
 * side effects - called from an event, write out list of linked servers
 *                but in no particular order.
 */
void
write_links_file(void *unused)
{
  char buf[IRCD_BUFSIZE];
  dlink_node *node, *node_next;

  if (EmptyString(ConfigServerHide.flatten_links_file))
    return;

  FILE *file = fopen(ConfigServerHide.flatten_links_file, "w");
  if (file == NULL)
  {
    ilog(LOG_TYPE_IRCD, "Couldn't open \"%s\": %s", ConfigServerHide.flatten_links_file,
         strerror(errno));
    return;
  }

  DLINK_FOREACH_SAFE(node, node_next, flatten_links.head)
  {
    dlinkDelete(node, &flatten_links);
    xfree(node->data);
    free_dlink_node(node);
  }

  DLINK_FOREACH(node, global_server_list.head)
  {
    const struct Client *client = node->data;

    /*
     * Skip hidden servers, aswell as ourselves, since we already send
     * ourselves in /links
     */
    if (IsHidden(client) || IsMe(client))
      continue;

    if (HasFlag(client, FLAGS_SERVICE) && ConfigServerHide.hide_services)
      continue;

    /*
     * Attempt to format the file in such a way it follows the usual links output
     * ie  "servername uplink :hops info"
     * Mostly for aesthetic reasons - makes it look pretty in mIRC ;)
     * - madmax
     */
    snprintf(buf, sizeof(buf), "%s %s :1 %s", client->name, me.name, client->info);
    dlinkAddTail(xstrdup(buf), make_dlink_node(), &flatten_links);

    strlcat(buf, "\n", sizeof(buf));
    fputs(buf, file);
  }

  fclose(file);
}

void
read_links_file(void)
{
  char buf[IRCD_BUFSIZE];

  if (EmptyString(ConfigServerHide.flatten_links_file))
    return;

  FILE *file = fopen(ConfigServerHide.flatten_links_file, "r");
  if (file == NULL)
  {
    ilog(LOG_TYPE_IRCD, "Couldn't open \"%s\": %s", ConfigServerHide.flatten_links_file,
         strerror(errno));
    return;
  }

  while (fgets(buf, sizeof(buf), file))
  {
    char *p = strchr(buf, '\n');
    if (p)
      *p = '\0';

    dlinkAddTail(xstrdup(buf), make_dlink_node(), &flatten_links);
  }

  fclose(file);
}

/* server_hunt()
 *      Do the basic thing in delivering the message (command)
 *      across the relays to the specific server (server) for
 *      actions.
 *
 *      Note:   The command is a format string and *MUST* be
 *              of prefixed style (e.g. ":%s COMMAND %s ...").
 *              Command can have only max 8 parameters.
 *
 *      server  parv[server] is the parameter identifying the
 *              target server.
 *
 *      *WARNING*
 *              parv[server] is replaced with the pointer to the
 *              real servername from the matched client (I'm lazy
 *              now --msa).
 *
 *      returns: (see #defines)
 */
const struct server_hunt *
server_hunt(struct Client *source_p, const char *command, const int server, char *parv[])
{
  static struct server_hunt hunt;
  struct server_hunt *const h = &hunt;
  dlink_node *node;
  const char *const mask = parv[server];

  /* Assume it's me, if no server */
  if (EmptyString(mask))
  {
    h->target_p = &me;
    h->ret = HUNTED_ISME;
    return h;
  }

  h->target_p = find_person(source_p, mask);
  if (h->target_p == NULL)
    h->target_p = hash_find_server(mask);

  /*
   * These are to pickup matches that would cause the following
   * message to go in the wrong direction while doing quick fast
   * non-matching lookups.
   */
  if (h->target_p)
    if (h->target_p->from == source_p->from && !MyConnect(h->target_p))
      h->target_p = NULL;

  if (h->target_p == NULL && has_wildcards(mask))
  {
    DLINK_FOREACH(node, global_server_list.head)
    {
      struct Client *tmp = node->data;

      assert(IsMe(tmp) || IsServer(tmp));
      if (match(mask, tmp->name) == 0)
      {
        if (tmp->from == source_p->from && !MyConnect(tmp))
          continue;

        h->target_p = tmp;
        break;
      }
    }

    if (h->target_p == NULL)
    {
      DLINK_FOREACH(node, global_client_list.head)
      {
        struct Client *tmp = node->data;

        assert(IsClient(tmp));
        if (match(mask, tmp->name) == 0)
        {
          if (tmp->from == source_p->from && !MyConnect(tmp))
            continue;

          h->target_p = tmp;
          break;
        }
      }
    }
  }

  if (h->target_p)
  {
    assert(IsMe(h->target_p) || IsServer(h->target_p) || IsClient(h->target_p));
    if (IsMe(h->target_p) || MyClient(h->target_p))
    {
      h->ret = HUNTED_ISME;
      return h;
    }

    parv[server] = h->target_p->id;
    sendto_one(h->target_p, command, source_p->id,
               parv[1], parv[2], parv[3], parv[4],
               parv[5], parv[6], parv[7], parv[8]);
    h->ret = HUNTED_PASS;
    return h;
  }

  sendto_one_numeric(source_p, &me, ERR_NOSUCHSERVER, mask);
  h->ret = HUNTED_NOSUCH;
  return h;
}

/* try_connections()
 *
 * inputs       - void pointer which is not used
 * output       - NONE
 * side effects -
 * scan through configuration and try new connections.
 * Returns the calendar time when the next call to this
 * function should be made latest. (No harm done if this
 * is called earlier or later...)
 */
void
try_connections(void *unused)
{
  dlink_node *node;

  if (GlobalSetOptions.autoconn == false)
    return;

  DLINK_FOREACH(node, connect_items.head)
  {
    struct MaskItem *conf = node->data;

    assert(conf->type == CONF_SERVER);
    assert(conf->class);

    /* Also when already connecting! (update holdtimes) --SRB */
    if (conf->port == 0 || !IsConfAllowAutoConn(conf))
      continue;

    /*
     * Skip this entry if the use of it is still on hold until
     * future. Otherwise handle this entry (and set it on hold
     * until next time). Will reset only hold times, if already
     * made one successfull connection... [this algorithm is
     * a bit fuzzy... -- msa >;) ]
     */
    if (conf->until > event_base->time.sec_monotonic)
      continue;

    conf->until = event_base->time.sec_monotonic + conf->class->con_freq;

    /*
     * Found a CONNECT config with port specified, scan clients
     * and see if this server is already connected?
     */
    if (hash_find_server(conf->name))
      continue;

    if (conf->class->ref_count < conf->class->max_total)
    {
      /* Move this entry to the end of the list, if not already last */
      if (node->next)
      {
        dlinkDelete(node, &connect_items);
        dlinkAddTail(conf, &conf->node, &connect_items);
      }

      if (find_servconn_in_progress(conf->name))
        return;

      /*
       * We used to only print this if server_connect() actually
       * succeeded, but since comm_tcp_connect() can call the callback
       * immediately if there is an error, we were getting error messages
       * in the wrong order. SO, we just print out the activated line,
       * and let server_connect() / server_connect_callback() print an
       * error afterwards if it fails.
       *   -- adrian
       */
      if (ConfigServerHide.hide_server_ips)
        sendto_realops_flags(UMODE_SERVNOTICE, L_ALL, SEND_NOTICE,
                             "Connection to %s activated.",
                             conf->name);
      else
        sendto_realops_flags(UMODE_SERVNOTICE, L_ALL, SEND_NOTICE,
                             "Connection to %s[%s] activated.",
                             conf->name, conf->host);

      server_connect(conf, NULL);
      /* We connect only one at time... */
      return;
    }
  }
}

bool
server_valid_name(const char *name)
{
  unsigned int dots = 0;
  const char *p = name;

  for (; *p; ++p)
  {
    if (!IsServChar(*p))
      return false;

    if (*p == '.')
      ++dots;
  }

  return dots && (p - name) <= HOSTLEN;
}

/* server_make()
 *
 * inputs       - pointer to client struct
 * output       - pointer to struct Server
 * side effects - add's an Server information block to a client
 *                if it was not previously allocated.
 */
struct Server *
server_make(struct Client *client)
{
  if (client->serv == NULL)
    client->serv = xcalloc(sizeof(*client->serv));

  return client->serv;
}

/* server_connect() - initiate a server connection
 *
 * inputs       - pointer to conf
 *              - pointer to client doing the connect
 * output       -
 * side effects -
 *
 * This code initiates a connection to a server. It first checks to make
 * sure the given server exists. If this is the case, it creates a socket,
 * creates a client, saves the socket information in the client, and
 * initiates a connection to the server through comm_connect_tcp(). The
 * completion of this goes through serv_completed_connection().
 *
 * We return 1 if the connection is attempted, since we don't know whether
 * it suceeded or not, and 0 if it fails in here somewhere.
 */
bool
server_connect(struct MaskItem *conf, struct Client *by)
{
  char buf[HOSTIPLEN + 1];

  /* Make sure conf is useful */
  assert(conf);
  assert(conf->type == CONF_SERVER);
  assert(hash_find_server(conf->name) == NULL);  /* This should have been checked by the caller */

  /* Still processing a DNS lookup? -> exit */
  if (conf->dns_pending == true)
  {
    sendto_realops_flags(UMODE_SERVNOTICE, L_ALL, SEND_NOTICE,
                         "Error connecting to %s: DNS lookup for connect{} in progress.",
                         conf->name);
    return false;
  }

  if (conf->dns_failed == true)
  {
    sendto_realops_flags(UMODE_SERVNOTICE, L_ALL, SEND_NOTICE,
                         "Error connecting to %s: DNS lookup for connect{} failed.",
                         conf->name);
    return false;
  }

  getnameinfo((const struct sockaddr *)conf->addr, conf->addr->ss_len,
              buf, sizeof(buf), NULL, 0, NI_NUMERICHOST);
  ilog(LOG_TYPE_IRCD, "Connect to %s[%s] @%s", conf->name, conf->host, buf);

  /* Create a socket for the server connection */
  int fd = comm_socket(conf->addr->ss.ss_family, SOCK_STREAM, 0);
  if (fd == -1)
  {
    /* Eek, failure to create the socket */
    report_error(L_ALL, "opening stream socket to %s: %s", conf->name, errno);
    return false;
  }

  /* Create a local client */
  struct Client *client = client_make(NULL);

  /* Copy in the server, hostname, fd */
  strlcpy(client->name, conf->name, sizeof(client->name));
  strlcpy(client->host, conf->host, sizeof(client->host));

  /* We already converted the ip once, so lets use it - stu */
  strlcpy(client->sockhost, buf, sizeof(client->sockhost));

  client->ip = *conf->addr;
  client->connection->fd = fd_open(fd, true, NULL);

  /* Server names are always guaranteed under HOSTLEN chars */
  fd_note(client->connection->fd, "Server: %s", client->name);

  /*
   * Attach config entries to client here rather than in server_connect_callback().
   * This to avoid null pointer references.
   */
  conf_attach(client, conf);

  server_make(client);

  if (by && IsClient(by))
    strlcpy(client->serv->by, by->name, sizeof(client->serv->by));
  else
    strlcpy(client->serv->by, "AutoConn.", sizeof(client->serv->by));

  SetConnecting(client);

  /* Now, initiate the connection */
  comm_connect_tcp(client->connection->fd, conf->addr, conf->port, conf->bind,
                   server_connect_callback, client, conf->timeout);

  /*
   * At this point we have a connection in progress and a connect {} block
   * attached to the client, the socket info should be saved in the client
   * and it should either be resolved or have a valid address.
   *
   * The socket has been connected or connect is in progress.
   */
  return true;
}

static void
server_finish_tls_handshake(struct Client *client)
{
  const struct MaskItem *conf = find_conf_name(&client->connection->confs,
                                                client->name, CONF_SERVER);
  if (conf == NULL)
  {
    sendto_realops_flags(UMODE_SERVNOTICE, L_ADMIN, SEND_NOTICE,
                         "Lost connect{} block for %s", client_get_name(client, SHOW_IP));
    sendto_realops_flags(UMODE_SERVNOTICE, L_OPER, SEND_NOTICE,
                         "Lost connect{} block for %s", client_get_name(client, MASK_IP));

    exit_client(client, "Lost connect{} block");
    return;
  }

  /* Next, send the initial handshake */
  SetHandshake(client);

  sendto_one(client, "PASS %s TS %u %s", conf->spasswd, TS_CURRENT, me.id);

  sendto_one(client, "CAPAB :%s", capab_get(NULL));

  sendto_one(client, "SERVER %s 1 :%s%s",
             me.name, ConfigServerHide.hidden ? "(H) " : "",
             me.info);

  /* If we get here, we're ok, so lets start reading some data */
  read_packet(client->connection->fd, client); 
}

static void
server_tls_handshake(fde_t *F, void *data)
{
  struct Client *client = data;
  const char *sslerr = NULL;

  assert(client);
  assert(client->connection);
  assert(client->connection->fd);
  assert(client->connection->fd == F);

  tls_handshake_status_t ret = tls_handshake(&F->tls, TLS_ROLE_CLIENT, &sslerr);
  if (ret != TLS_HANDSHAKE_DONE)
  {
    if ((event_base->time.sec_monotonic - client->connection->created_monotonic) > TLS_HANDSHAKE_TIMEOUT)
    {
      exit_client(client, "Timeout during TLS handshake");
      return;
    }

    switch (ret)
    {
      case TLS_HANDSHAKE_WANT_WRITE:
        comm_setselect(F, COMM_SELECT_WRITE,
                       server_tls_handshake, client, TLS_HANDSHAKE_TIMEOUT);
        return;
      case TLS_HANDSHAKE_WANT_READ:
        comm_setselect(F, COMM_SELECT_READ,
                       server_tls_handshake, client, TLS_HANDSHAKE_TIMEOUT);
        return;
      default:
      {
        sendto_realops_flags(UMODE_SERVNOTICE, L_ALL, SEND_NOTICE,
                             "Error connecting to %s: %s", client->name,
                             sslerr ? sslerr : "unknown TLS error");
        exit_client(client, "Error during TLS handshake");
        return;
      }
    }
  }

  comm_settimeout(F, 0, NULL, NULL);

  if (tls_verify_certificate(&F->tls, ConfigServerInfo.message_digest_algorithm, &client->tls_certfp) == false)
    ilog(LOG_TYPE_IRCD, "Server %s gave bad TLS client certificate",
         client_get_name(client, MASK_IP));

  server_finish_tls_handshake(client);
}

static void
server_tls_connect_init(struct Client *client, const struct MaskItem *conf, fde_t *F)
{
  assert(client);
  assert(client->connection);
  assert(client->connection->fd);
  assert(client->connection->fd == F);

  if (tls_new(&F->tls, F->fd, TLS_ROLE_CLIENT) == false)
  {
    SetDead(client);
    exit_client(client, "TLS context initialization failed");
    return;
  }

  if (!EmptyString(conf->cipher_list))
    tls_set_ciphers(&F->tls, conf->cipher_list);

  server_tls_handshake(F, client);
}

/* server_connect_callback() - complete a server connection.
 *
 * This routine is called after the server connection attempt has
 * completed. If unsucessful, an error is sent to ops and the client
 * is closed. If sucessful, it goes through the initialisation/check
 * procedures, the capabilities are sent, and the socket is then
 * marked for reading.
 */
static void
server_connect_callback(fde_t *F, int status, void *data)
{
  struct Client *const client = data;

  /* First, make sure it's a real client! */
  assert(client);
  assert(client->connection);
  assert(client->connection->fd);
  assert(client->connection->fd == F);

  /* Check the status */
  if (status != COMM_OK)
  {
    /* We have an error, so report it and quit */
    sendto_realops_flags(UMODE_SERVNOTICE, L_ADMIN, SEND_NOTICE,
                         "Error connecting to %s: %s",
                         client_get_name(client, SHOW_IP), comm_errstr(status));
    sendto_realops_flags(UMODE_SERVNOTICE, L_OPER, SEND_NOTICE,
                         "Error connecting to %s: %s",
                         client_get_name(client, MASK_IP), comm_errstr(status));

    /*
     * If a fd goes bad, call dead_link() the socket is no
     * longer valid for reading or writing.
     */
    dead_link_on_write(client, 0);
    return;
  }

  /* COMM_OK, so continue the connection procedure */
  /* Get the connect {} block */
  const struct MaskItem *conf = find_conf_name(&client->connection->confs,
                                                client->name, CONF_SERVER);
  if (conf == NULL)
  {
    sendto_realops_flags(UMODE_SERVNOTICE, L_ADMIN, SEND_NOTICE,
                         "Lost connect{} block for %s", client_get_name(client, SHOW_IP));
    sendto_realops_flags(UMODE_SERVNOTICE, L_OPER, SEND_NOTICE,
                         "Lost connect{} block for %s", client_get_name(client, MASK_IP));

    exit_client(client, "Lost connect{} block");
    return;
  }

  if (IsConfTLS(conf))
  {
    server_tls_connect_init(client, conf, F);
    return;
  }

  /* Next, send the initial handshake */
  SetHandshake(client);

  sendto_one(client, "PASS %s TS %u %s", conf->spasswd, TS_CURRENT, me.id);

  sendto_one(client, "CAPAB :%s", capab_get(NULL));

  sendto_one(client, "SERVER %s 1 :%s%s", me.name,
             ConfigServerHide.hidden ? "(H) " : "", me.info);

  /* If we get here, we're ok, so lets start reading some data */
  read_packet(client->connection->fd, client);
}

struct Client *
find_servconn_in_progress(const char *name)
{
  dlink_node *ptr;

  DLINK_FOREACH(ptr, unknown_list.head)
  {
    struct Client *cptr = ptr->data;

    if (cptr->name[0])
      if (!irccmp(name, cptr->name))
        return cptr;
  }

  return NULL;
}
Revision:	9684
Committed:	Wed Oct 28 18:56:54 2020 UTC (4 years, 9 months ago) by michael
Content type:	text/x-csrc
File size:	18764 byte(s)
Log Message:	- Restore backwards compatibility mode for non RHOST server. Final removal is scheduled for the end of 2020.
#	Content
1	/*
2	* ircd-hybrid: an advanced, lightweight Internet Relay Chat Daemon (ircd)
3	*
4	* Copyright (c) 1997-2020 ircd-hybrid development team
5	*
6	* This program is free software; you can redistribute it and/or modify
7	* it under the terms of the GNU General Public License as published by
8	* the Free Software Foundation; either version 2 of the License, or
9	* (at your option) any later version.
10	*
11	* This program is distributed in the hope that it will be useful,
12	* but WITHOUT ANY WARRANTY; without even the implied warranty of
13	* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
14	* GNU General Public License for more details.
15	*
16	* You should have received a copy of the GNU General Public License
17	* along with this program; if not, write to the Free Software
18	* Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301
19	* USA
20	*/
21
22	/*! \file server.c
23	* \brief Server related functions.
24	* \version $Id$
25	*/
26
27	#include "stdinc.h"
28	#include "list.h"
29	#include "client.h"
30	#include "event.h"
31	#include "hash.h"
32	#include "irc_string.h"
33	#include "ircd.h"
34	#include "ircd_defs.h"
35	#include "s_bsd.h"
36	#include "packet.h"
37	#include "conf.h"
38	#include "server.h"
39	#include "server_capab.h"
40	#include "log.h"
41	#include "send.h"
42	#include "memory.h"
43	#include "parse.h"
44
45
46	dlink_list flatten_links;
47	static void server_connect_callback(fde_t , int, void );
48
49
50	/*
51	* write_links_file
52	*
53	* inputs - void pointer which is not used
54	* output - NONE
55	* side effects - called from an event, write out list of linked servers
56	* but in no particular order.
57	*/
58	void
59	write_links_file(void *unused)
60	{
61	char buf[IRCD_BUFSIZE];
62	dlink_node node, node_next;
63
64	if (EmptyString(ConfigServerHide.flatten_links_file))
65	return;
66
67	FILE *file = fopen(ConfigServerHide.flatten_links_file, "w");
68	if (file == NULL)
69	{
70	ilog(LOG_TYPE_IRCD, "Couldn't open \"%s\": %s", ConfigServerHide.flatten_links_file,
71	strerror(errno));
72	return;
73	}
74
75	DLINK_FOREACH_SAFE(node, node_next, flatten_links.head)
76	{
77	dlinkDelete(node, &flatten_links);
78	xfree(node->data);
79	free_dlink_node(node);
80	}
81
82	DLINK_FOREACH(node, global_server_list.head)
83	{
84	const struct Client *client = node->data;
85
86	/*
87	* Skip hidden servers, aswell as ourselves, since we already send
88	* ourselves in /links
89	*/
90	if (IsHidden(client) \|\| IsMe(client))
91	continue;
92
93	if (HasFlag(client, FLAGS_SERVICE) && ConfigServerHide.hide_services)
94	continue;
95
96	/*
97	* Attempt to format the file in such a way it follows the usual links output
98	* ie "servername uplink :hops info"
99	* Mostly for aesthetic reasons - makes it look pretty in mIRC ;)
100	* - madmax
101	*/
102	snprintf(buf, sizeof(buf), "%s %s :1 %s", client->name, me.name, client->info);
103	dlinkAddTail(xstrdup(buf), make_dlink_node(), &flatten_links);
104
105	strlcat(buf, "\n", sizeof(buf));
106	fputs(buf, file);
107	}
108
109	fclose(file);
110	}
111
112	void
113	read_links_file(void)
114	{
115	char buf[IRCD_BUFSIZE];
116
117	if (EmptyString(ConfigServerHide.flatten_links_file))
118	return;
119
120	FILE *file = fopen(ConfigServerHide.flatten_links_file, "r");
121	if (file == NULL)
122	{
123	ilog(LOG_TYPE_IRCD, "Couldn't open \"%s\": %s", ConfigServerHide.flatten_links_file,
124	strerror(errno));
125	return;
126	}
127
128	while (fgets(buf, sizeof(buf), file))
129	{
130	char *p = strchr(buf, '\n');
131	if (p)
132	*p = '\0';
133
134	dlinkAddTail(xstrdup(buf), make_dlink_node(), &flatten_links);
135	}
136
137	fclose(file);
138	}
139
140	/* server_hunt()
141	* Do the basic thing in delivering the message (command)
142	* across the relays to the specific server (server) for
143	* actions.
144	*
145	* Note: The command is a format string and MUST be
146	* of prefixed style (e.g. ":%s COMMAND %s ...").
147	* Command can have only max 8 parameters.
148	*
149	* server parv[server] is the parameter identifying the
150	* target server.
151	*
152	* WARNING
153	* parv[server] is replaced with the pointer to the
154	* real servername from the matched client (I'm lazy
155	* now --msa).
156	*
157	* returns: (see #defines)
158	*/
159	const struct server_hunt *
160	server_hunt(struct Client source_p, const char command, const int server, char *parv[])
161	{
162	static struct server_hunt hunt;
163	struct server_hunt *const h = &hunt;
164	dlink_node *node;
165	const char *const mask = parv[server];
166
167	/* Assume it's me, if no server */
168	if (EmptyString(mask))
169	{
170	h->target_p = &me;
171	h->ret = HUNTED_ISME;
172	return h;
173	}
174
175	h->target_p = find_person(source_p, mask);
176	if (h->target_p == NULL)
177	h->target_p = hash_find_server(mask);
178
179	/*
180	* These are to pickup matches that would cause the following
181	* message to go in the wrong direction while doing quick fast
182	* non-matching lookups.
183	*/
184	if (h->target_p)
185	if (h->target_p->from == source_p->from && !MyConnect(h->target_p))
186	h->target_p = NULL;
187
188	if (h->target_p == NULL && has_wildcards(mask))
189	{
190	DLINK_FOREACH(node, global_server_list.head)
191	{
192	struct Client *tmp = node->data;
193
194	assert(IsMe(tmp) \|\| IsServer(tmp));
195	if (match(mask, tmp->name) == 0)
196	{
197	if (tmp->from == source_p->from && !MyConnect(tmp))
198	continue;
199
200	h->target_p = tmp;
201	break;
202	}
203	}
204
205	if (h->target_p == NULL)
206	{
207	DLINK_FOREACH(node, global_client_list.head)
208	{
209	struct Client *tmp = node->data;
210
211	assert(IsClient(tmp));
212	if (match(mask, tmp->name) == 0)
213	{
214	if (tmp->from == source_p->from && !MyConnect(tmp))
215	continue;
216
217	h->target_p = tmp;
218	break;
219	}
220	}
221	}
222	}
223
224	if (h->target_p)
225	{
226	assert(IsMe(h->target_p) \|\| IsServer(h->target_p) \|\| IsClient(h->target_p));
227	if (IsMe(h->target_p) \|\| MyClient(h->target_p))
228	{
229	h->ret = HUNTED_ISME;
230	return h;
231	}
232
233	parv[server] = h->target_p->id;
234	sendto_one(h->target_p, command, source_p->id,
235	parv[1], parv[2], parv[3], parv[4],
236	parv[5], parv[6], parv[7], parv[8]);
237	h->ret = HUNTED_PASS;
238	return h;
239	}
240
241	sendto_one_numeric(source_p, &me, ERR_NOSUCHSERVER, mask);
242	h->ret = HUNTED_NOSUCH;
243	return h;
244	}
245
246	/* try_connections()
247	*
248	* inputs - void pointer which is not used
249	* output - NONE
250	* side effects -
251	* scan through configuration and try new connections.
252	* Returns the calendar time when the next call to this
253	* function should be made latest. (No harm done if this
254	* is called earlier or later...)
255	*/
256	void
257	try_connections(void *unused)
258	{
259	dlink_node *node;
260
261	if (GlobalSetOptions.autoconn == false)
262	return;
263
264	DLINK_FOREACH(node, connect_items.head)
265	{
266	struct MaskItem *conf = node->data;
267
268	assert(conf->type == CONF_SERVER);
269	assert(conf->class);
270
271	/* Also when already connecting! (update holdtimes) --SRB */
272	if (conf->port == 0 \|\| !IsConfAllowAutoConn(conf))
273	continue;
274
275	/*
276	* Skip this entry if the use of it is still on hold until
277	* future. Otherwise handle this entry (and set it on hold
278	* until next time). Will reset only hold times, if already
279	* made one successfull connection... [this algorithm is
280	* a bit fuzzy... -- msa >;) ]
281	*/
282	if (conf->until > event_base->time.sec_monotonic)
283	continue;
284
285	conf->until = event_base->time.sec_monotonic + conf->class->con_freq;
286
287	/*
288	* Found a CONNECT config with port specified, scan clients
289	* and see if this server is already connected?
290	*/
291	if (hash_find_server(conf->name))
292	continue;
293
294	if (conf->class->ref_count < conf->class->max_total)
295	{
296	/* Move this entry to the end of the list, if not already last */
297	if (node->next)
298	{
299	dlinkDelete(node, &connect_items);
300	dlinkAddTail(conf, &conf->node, &connect_items);
301	}
302
303	if (find_servconn_in_progress(conf->name))
304	return;
305
306	/*
307	* We used to only print this if server_connect() actually
308	* succeeded, but since comm_tcp_connect() can call the callback
309	* immediately if there is an error, we were getting error messages
310	* in the wrong order. SO, we just print out the activated line,
311	* and let server_connect() / server_connect_callback() print an
312	* error afterwards if it fails.
313	* -- adrian
314	*/
315	if (ConfigServerHide.hide_server_ips)
316	sendto_realops_flags(UMODE_SERVNOTICE, L_ALL, SEND_NOTICE,
317	"Connection to %s activated.",
318	conf->name);
319	else
320	sendto_realops_flags(UMODE_SERVNOTICE, L_ALL, SEND_NOTICE,
321	"Connection to %s[%s] activated.",
322	conf->name, conf->host);
323
324	server_connect(conf, NULL);
325	/* We connect only one at time... */
326	return;
327	}
328	}
329	}
330
331	bool
332	server_valid_name(const char *name)
333	{
334	unsigned int dots = 0;
335	const char *p = name;
336
337	for (; *p; ++p)
338	{
339	if (!IsServChar(*p))
340	return false;
341
342	if (*p == '.')
343	++dots;
344	}
345
346	return dots && (p - name) <= HOSTLEN;
347	}
348
349	/* server_make()
350	*
351	* inputs - pointer to client struct
352	* output - pointer to struct Server
353	* side effects - add's an Server information block to a client
354	* if it was not previously allocated.
355	*/
356	struct Server *
357	server_make(struct Client *client)
358	{
359	if (client->serv == NULL)
360	client->serv = xcalloc(sizeof(*client->serv));
361
362	return client->serv;
363	}
364
365	/* server_connect() - initiate a server connection
366	*
367	* inputs - pointer to conf
368	* - pointer to client doing the connect
369	* output -
370	* side effects -
371	*
372	* This code initiates a connection to a server. It first checks to make
373	* sure the given server exists. If this is the case, it creates a socket,
374	* creates a client, saves the socket information in the client, and
375	* initiates a connection to the server through comm_connect_tcp(). The
376	* completion of this goes through serv_completed_connection().
377	*
378	* We return 1 if the connection is attempted, since we don't know whether
379	* it suceeded or not, and 0 if it fails in here somewhere.
380	*/
381	bool
382	server_connect(struct MaskItem conf, struct Client by)
383	{
384	char buf[HOSTIPLEN + 1];
385
386	/* Make sure conf is useful */
387	assert(conf);
388	assert(conf->type == CONF_SERVER);
389	assert(hash_find_server(conf->name) == NULL); /* This should have been checked by the caller */
390
391	/* Still processing a DNS lookup? -> exit */
392	if (conf->dns_pending == true)
393	{
394	sendto_realops_flags(UMODE_SERVNOTICE, L_ALL, SEND_NOTICE,
395	"Error connecting to %s: DNS lookup for connect{} in progress.",
396	conf->name);
397	return false;
398	}
399
400	if (conf->dns_failed == true)
401	{
402	sendto_realops_flags(UMODE_SERVNOTICE, L_ALL, SEND_NOTICE,
403	"Error connecting to %s: DNS lookup for connect{} failed.",
404	conf->name);
405	return false;
406	}
407
408	getnameinfo((const struct sockaddr *)conf->addr, conf->addr->ss_len,
409	buf, sizeof(buf), NULL, 0, NI_NUMERICHOST);
410	ilog(LOG_TYPE_IRCD, "Connect to %s[%s] @%s", conf->name, conf->host, buf);
411
412	/* Create a socket for the server connection */
413	int fd = comm_socket(conf->addr->ss.ss_family, SOCK_STREAM, 0);
414	if (fd == -1)
415	{
416	/* Eek, failure to create the socket */
417	report_error(L_ALL, "opening stream socket to %s: %s", conf->name, errno);
418	return false;
419	}
420
421	/* Create a local client */
422	struct Client *client = client_make(NULL);
423
424	/* Copy in the server, hostname, fd */
425	strlcpy(client->name, conf->name, sizeof(client->name));
426	strlcpy(client->host, conf->host, sizeof(client->host));
427
428	/* We already converted the ip once, so lets use it - stu */
429	strlcpy(client->sockhost, buf, sizeof(client->sockhost));
430
431	client->ip = *conf->addr;
432	client->connection->fd = fd_open(fd, true, NULL);
433
434	/* Server names are always guaranteed under HOSTLEN chars */
435	fd_note(client->connection->fd, "Server: %s", client->name);
436
437	/*
438	* Attach config entries to client here rather than in server_connect_callback().
439	* This to avoid null pointer references.
440	*/
441	conf_attach(client, conf);
442
443	server_make(client);
444
445	if (by && IsClient(by))
446	strlcpy(client->serv->by, by->name, sizeof(client->serv->by));
447	else
448	strlcpy(client->serv->by, "AutoConn.", sizeof(client->serv->by));
449
450	SetConnecting(client);
451
452	/* Now, initiate the connection */
453	comm_connect_tcp(client->connection->fd, conf->addr, conf->port, conf->bind,
454	server_connect_callback, client, conf->timeout);
455
456	/*
457	* At this point we have a connection in progress and a connect {} block
458	* attached to the client, the socket info should be saved in the client
459	* and it should either be resolved or have a valid address.
460	*
461	* The socket has been connected or connect is in progress.
462	*/
463	return true;
464	}
465
466	static void
467	server_finish_tls_handshake(struct Client *client)
468	{
469	const struct MaskItem *conf = find_conf_name(&client->connection->confs,
470	client->name, CONF_SERVER);
471	if (conf == NULL)
472	{
473	sendto_realops_flags(UMODE_SERVNOTICE, L_ADMIN, SEND_NOTICE,
474	"Lost connect{} block for %s", client_get_name(client, SHOW_IP));
475	sendto_realops_flags(UMODE_SERVNOTICE, L_OPER, SEND_NOTICE,
476	"Lost connect{} block for %s", client_get_name(client, MASK_IP));
477
478	exit_client(client, "Lost connect{} block");
479	return;
480	}
481
482	/* Next, send the initial handshake */
483	SetHandshake(client);
484
485	sendto_one(client, "PASS %s TS %u %s", conf->spasswd, TS_CURRENT, me.id);
486
487	sendto_one(client, "CAPAB :%s", capab_get(NULL));
488
489	sendto_one(client, "SERVER %s 1 :%s%s",
490	me.name, ConfigServerHide.hidden ? "(H) " : "",
491	me.info);
492
493	/* If we get here, we're ok, so lets start reading some data */
494	read_packet(client->connection->fd, client);
495	}
496
497	static void
498	server_tls_handshake(fde_t F, void data)
499	{
500	struct Client *client = data;
501	const char *sslerr = NULL;
502
503	assert(client);
504	assert(client->connection);
505	assert(client->connection->fd);
506	assert(client->connection->fd == F);
507
508	tls_handshake_status_t ret = tls_handshake(&F->tls, TLS_ROLE_CLIENT, &sslerr);
509	if (ret != TLS_HANDSHAKE_DONE)
510	{
511	if ((event_base->time.sec_monotonic - client->connection->created_monotonic) > TLS_HANDSHAKE_TIMEOUT)
512	{
513	exit_client(client, "Timeout during TLS handshake");
514	return;
515	}
516
517	switch (ret)
518	{
519	case TLS_HANDSHAKE_WANT_WRITE:
520	comm_setselect(F, COMM_SELECT_WRITE,
521	server_tls_handshake, client, TLS_HANDSHAKE_TIMEOUT);
522	return;
523	case TLS_HANDSHAKE_WANT_READ:
524	comm_setselect(F, COMM_SELECT_READ,
525	server_tls_handshake, client, TLS_HANDSHAKE_TIMEOUT);
526	return;
527	default:
528	{
529	sendto_realops_flags(UMODE_SERVNOTICE, L_ALL, SEND_NOTICE,
530	"Error connecting to %s: %s", client->name,
531	sslerr ? sslerr : "unknown TLS error");
532	exit_client(client, "Error during TLS handshake");
533	return;
534	}
535	}
536	}
537
538	comm_settimeout(F, 0, NULL, NULL);
539
540	if (tls_verify_certificate(&F->tls, ConfigServerInfo.message_digest_algorithm, &client->tls_certfp) == false)
541	ilog(LOG_TYPE_IRCD, "Server %s gave bad TLS client certificate",
542	client_get_name(client, MASK_IP));
543
544	server_finish_tls_handshake(client);
545	}
546
547	static void
548	server_tls_connect_init(struct Client client, const struct MaskItem conf, fde_t *F)
549	{
550	assert(client);
551	assert(client->connection);
552	assert(client->connection->fd);
553	assert(client->connection->fd == F);
554
555	if (tls_new(&F->tls, F->fd, TLS_ROLE_CLIENT) == false)
556	{
557	SetDead(client);
558	exit_client(client, "TLS context initialization failed");
559	return;
560	}
561
562	if (!EmptyString(conf->cipher_list))
563	tls_set_ciphers(&F->tls, conf->cipher_list);
564
565	server_tls_handshake(F, client);
566	}
567
568	/* server_connect_callback() - complete a server connection.
569	*
570	* This routine is called after the server connection attempt has
571	* completed. If unsucessful, an error is sent to ops and the client
572	* is closed. If sucessful, it goes through the initialisation/check
573	* procedures, the capabilities are sent, and the socket is then
574	* marked for reading.
575	*/
576	static void
577	server_connect_callback(fde_t F, int status, void data)
578	{
579	struct Client *const client = data;
580
581	/* First, make sure it's a real client! */
582	assert(client);
583	assert(client->connection);
584	assert(client->connection->fd);
585	assert(client->connection->fd == F);
586
587	/* Check the status */
588	if (status != COMM_OK)
589	{
590	/* We have an error, so report it and quit */
591	sendto_realops_flags(UMODE_SERVNOTICE, L_ADMIN, SEND_NOTICE,
592	"Error connecting to %s: %s",
593	client_get_name(client, SHOW_IP), comm_errstr(status));
594	sendto_realops_flags(UMODE_SERVNOTICE, L_OPER, SEND_NOTICE,
595	"Error connecting to %s: %s",
596	client_get_name(client, MASK_IP), comm_errstr(status));
597
598	/*
599	* If a fd goes bad, call dead_link() the socket is no
600	* longer valid for reading or writing.
601	*/
602	dead_link_on_write(client, 0);
603	return;
604	}
605
606	/* COMM_OK, so continue the connection procedure */
607	/* Get the connect {} block */
608	const struct MaskItem *conf = find_conf_name(&client->connection->confs,
609	client->name, CONF_SERVER);
610	if (conf == NULL)
611	{
612	sendto_realops_flags(UMODE_SERVNOTICE, L_ADMIN, SEND_NOTICE,
613	"Lost connect{} block for %s", client_get_name(client, SHOW_IP));
614	sendto_realops_flags(UMODE_SERVNOTICE, L_OPER, SEND_NOTICE,
615	"Lost connect{} block for %s", client_get_name(client, MASK_IP));
616
617	exit_client(client, "Lost connect{} block");
618	return;
619	}
620
621	if (IsConfTLS(conf))
622	{
623	server_tls_connect_init(client, conf, F);
624	return;
625	}
626
627	/* Next, send the initial handshake */
628	SetHandshake(client);
629
630	sendto_one(client, "PASS %s TS %u %s", conf->spasswd, TS_CURRENT, me.id);
631
632	sendto_one(client, "CAPAB :%s", capab_get(NULL));
633
634	sendto_one(client, "SERVER %s 1 :%s%s", me.name,
635	ConfigServerHide.hidden ? "(H) " : "", me.info);
636
637	/* If we get here, we're ok, so lets start reading some data */
638	read_packet(client->connection->fd, client);
639	}
640
641	struct Client *
642	find_servconn_in_progress(const char *name)
643	{
644	dlink_node *ptr;
645
646	DLINK_FOREACH(ptr, unknown_list.head)
647	{
648	struct Client *cptr = ptr->data;
649
650	if (cptr->name[0])
651	if (!irccmp(name, cptr->name))
652	return cptr;
653	}
654
655	return NULL;
656	}