]>
Commit | Line | Data |
---|---|---|
1 | /* | |
2 | * Copyright (c) 2012 William Pitcock <nenolod@dereferenced.org>. | |
3 | * | |
4 | * Permission to use, copy, modify, and/or distribute this software for any | |
5 | * purpose with or without fee is hereby granted, provided that the above | |
6 | * copyright notice and this permission notice is present in all copies. | |
7 | * | |
8 | * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR | |
9 | * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED | |
10 | * WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE | |
11 | * DISCLAIMED. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, | |
12 | * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES | |
13 | * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR | |
14 | * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) | |
15 | * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, | |
16 | * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING | |
17 | * IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE | |
18 | * POSSIBILITY OF SUCH DAMAGE. | |
19 | */ | |
20 | ||
21 | #include "stdinc.h" | |
22 | #include "client.h" | |
23 | #include "common.h" | |
24 | #include "match.h" | |
25 | #include "hash.h" | |
26 | #include "ircd.h" | |
27 | #include "numeric.h" | |
28 | #include "send.h" | |
29 | #include "msg.h" | |
30 | #include "modules.h" | |
31 | #include "sslproc.h" | |
32 | #include "s_assert.h" | |
33 | #include "logger.h" | |
34 | ||
35 | static int mr_starttls(struct MsgBuf *, struct Client *, struct Client *, int, const char **); | |
36 | ||
37 | struct Message starttls_msgtab = { | |
38 | "STARTTLS", 0, 0, 0, 0, | |
39 | {{mr_starttls, 0}, mg_ignore, mg_ignore, mg_ignore, mg_ignore, mg_ignore} | |
40 | }; | |
41 | ||
42 | mapi_clist_av1 starttls_clist[] = { &starttls_msgtab, NULL }; | |
43 | ||
44 | DECLARE_MODULE_AV1(starttls, NULL, NULL, starttls_clist, NULL, NULL, "$Revision$"); | |
45 | ||
46 | static int | |
47 | mr_starttls(struct MsgBuf *msgbuf_p, struct Client *client_p, struct Client *source_p, int parc, const char *parv[]) | |
48 | { | |
49 | #ifdef HAVE_LIBCRYPTO | |
50 | ssl_ctl_t *ctl; | |
51 | rb_fde_t *F[2]; | |
52 | ||
53 | if (!MyConnect(client_p)) | |
54 | return 0; | |
55 | ||
56 | if (IsSSL(client_p)) | |
57 | { | |
58 | sendto_one_numeric(client_p, ERR_STARTTLS, form_str(ERR_STARTTLS), "Nested TLS handshake not allowed"); | |
59 | return 1; | |
60 | } | |
61 | ||
62 | if (!ssl_ok || !get_ssld_count()) | |
63 | { | |
64 | sendto_one_numeric(client_p, ERR_STARTTLS, form_str(ERR_STARTTLS), "TLS is not configured"); | |
65 | return 1; | |
66 | } | |
67 | ||
68 | if (rb_socketpair(AF_UNIX, SOCK_STREAM, 0, &F[0], &F[1], "STARTTLS ssld session") == -1) | |
69 | { | |
70 | ilog_error("error creating SSL/TLS socketpair for ssld slave"); | |
71 | sendto_one_numeric(client_p, ERR_STARTTLS, form_str(ERR_STARTTLS), "Unable to create SSL/TLS socketpair for ssld offload slave"); | |
72 | return 1; | |
73 | } | |
74 | ||
75 | s_assert(client_p->localClient != NULL); | |
76 | ||
77 | /* clear out any remaining plaintext lines */ | |
78 | rb_linebuf_donebuf(&client_p->localClient->buf_recvq); | |
79 | ||
80 | sendto_one_numeric(client_p, RPL_STARTTLS, form_str(RPL_STARTTLS)); | |
81 | send_queued(client_p); | |
82 | ||
83 | ctl = start_ssld_accept(client_p->localClient->F, F[1], rb_get_fd(F[0])); | |
84 | if (ctl != NULL) | |
85 | { | |
86 | client_p->localClient->F = F[0]; | |
87 | client_p->localClient->ssl_ctl = ctl; | |
88 | SetSSL(client_p); | |
89 | } | |
90 | else | |
91 | return 1; | |
92 | ||
93 | #else | |
94 | sendto_one_numeric(client_p, ERR_STARTTLS, form_str(ERR_STARTTLS), "TLS is not configured"); | |
95 | #endif | |
96 | return 0; | |
97 | } |