]>
Commit | Line | Data |
---|---|---|
1 | /* | |
2 | * ircd-ratbox: A slightly useful ircd. | |
3 | * s_serv.c: Server related functions. | |
4 | * | |
5 | * Copyright (C) 1990 Jarkko Oikarinen and University of Oulu, Co Center | |
6 | * Copyright (C) 1996-2002 Hybrid Development Team | |
7 | * Copyright (C) 2002-2005 ircd-ratbox development team | |
8 | * | |
9 | * This program is free software; you can redistribute it and/or modify | |
10 | * it under the terms of the GNU General Public License as published by | |
11 | * the Free Software Foundation; either version 2 of the License, or | |
12 | * (at your option) any later version. | |
13 | * | |
14 | * This program is distributed in the hope that it will be useful, | |
15 | * but WITHOUT ANY WARRANTY; without even the implied warranty of | |
16 | * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the | |
17 | * GNU General Public License for more details. | |
18 | * | |
19 | * You should have received a copy of the GNU General Public License | |
20 | * along with this program; if not, write to the Free Software | |
21 | * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 | |
22 | * USA | |
23 | */ | |
24 | ||
25 | #include "stdinc.h" | |
26 | ||
27 | #ifdef HAVE_LIBCRYPTO | |
28 | #include <openssl/rsa.h> | |
29 | #endif | |
30 | ||
31 | #include "s_serv.h" | |
32 | #include "class.h" | |
33 | #include "client.h" | |
34 | #include "hash.h" | |
35 | #include "match.h" | |
36 | #include "ircd.h" | |
37 | #include "ircd_defs.h" | |
38 | #include "numeric.h" | |
39 | #include "packet.h" | |
40 | #include "s_conf.h" | |
41 | #include "s_newconf.h" | |
42 | #include "logger.h" | |
43 | #include "s_stats.h" | |
44 | #include "s_user.h" | |
45 | #include "scache.h" | |
46 | #include "send.h" | |
47 | #include "client.h" | |
48 | #include "channel.h" /* chcap_usage_counts stuff... */ | |
49 | #include "hook.h" | |
50 | #include "msg.h" | |
51 | #include "reject.h" | |
52 | #include "sslproc.h" | |
53 | #include "capability.h" | |
54 | #include "s_assert.h" | |
55 | ||
56 | int MaxConnectionCount = 1; | |
57 | int MaxClientCount = 1; | |
58 | int refresh_user_links = 0; | |
59 | ||
60 | static char buf[BUFSIZE]; | |
61 | ||
62 | /* | |
63 | * list of recognized server capabilities. "TS" is not on the list | |
64 | * because all servers that we talk to already do TS, and the kludged | |
65 | * extra argument to "PASS" takes care of checking that. -orabidoo | |
66 | */ | |
67 | struct CapabilityIndex *serv_capindex = NULL; | |
68 | struct CapabilityIndex *cli_capindex = NULL; | |
69 | ||
70 | unsigned int CAP_CAP; | |
71 | unsigned int CAP_QS; | |
72 | unsigned int CAP_EX; | |
73 | unsigned int CAP_CHW; | |
74 | unsigned int CAP_IE; | |
75 | unsigned int CAP_KLN; | |
76 | unsigned int CAP_KNOCK; | |
77 | unsigned int CAP_TB; | |
78 | unsigned int CAP_UNKLN; | |
79 | unsigned int CAP_CLUSTER; | |
80 | unsigned int CAP_ENCAP; | |
81 | unsigned int CAP_TS6; | |
82 | unsigned int CAP_SERVICE; | |
83 | unsigned int CAP_RSFNC; | |
84 | unsigned int CAP_SAVE; | |
85 | unsigned int CAP_EUID; | |
86 | unsigned int CAP_EOPMOD; | |
87 | unsigned int CAP_BAN; | |
88 | unsigned int CAP_MLOCK; | |
89 | ||
90 | unsigned int CLICAP_MULTI_PREFIX; | |
91 | unsigned int CLICAP_ACCOUNT_NOTIFY; | |
92 | unsigned int CLICAP_EXTENDED_JOIN; | |
93 | unsigned int CLICAP_AWAY_NOTIFY; | |
94 | unsigned int CLICAP_USERHOST_IN_NAMES; | |
95 | unsigned int CLICAP_CAP_NOTIFY; | |
96 | unsigned int CLICAP_CHGHOST; | |
97 | unsigned int CLICAP_ECHO_MESSAGE; | |
98 | ||
99 | /* | |
100 | * initialize our builtin capability table. --nenolod | |
101 | */ | |
102 | void | |
103 | init_builtin_capabs(void) | |
104 | { | |
105 | static struct ClientCapability high_priority = {.flags = CLICAP_FLAGS_PRIORITY}; | |
106 | serv_capindex = capability_index_create("server capabilities"); | |
107 | ||
108 | /* These two are not set via CAPAB/GCAP keywords. */ | |
109 | CAP_CAP = capability_put_anonymous(serv_capindex); | |
110 | CAP_TS6 = capability_put_anonymous(serv_capindex); | |
111 | ||
112 | CAP_QS = capability_put(serv_capindex, "QS", NULL); | |
113 | CAP_EX = capability_put(serv_capindex, "EX", NULL); | |
114 | CAP_CHW = capability_put(serv_capindex, "CHW", NULL); | |
115 | CAP_IE = capability_put(serv_capindex, "IE", NULL); | |
116 | CAP_KLN = capability_put(serv_capindex, "KLN", NULL); | |
117 | CAP_KNOCK = capability_put(serv_capindex, "KNOCK", NULL); | |
118 | CAP_TB = capability_put(serv_capindex, "TB", NULL); | |
119 | CAP_UNKLN = capability_put(serv_capindex, "UNKLN", NULL); | |
120 | CAP_CLUSTER = capability_put(serv_capindex, "CLUSTER", NULL); | |
121 | CAP_ENCAP = capability_put(serv_capindex, "ENCAP", NULL); | |
122 | CAP_SERVICE = capability_put(serv_capindex, "SERVICES", NULL); | |
123 | CAP_RSFNC = capability_put(serv_capindex, "RSFNC", NULL); | |
124 | CAP_SAVE = capability_put(serv_capindex, "SAVE", NULL); | |
125 | CAP_EUID = capability_put(serv_capindex, "EUID", NULL); | |
126 | CAP_EOPMOD = capability_put(serv_capindex, "EOPMOD", NULL); | |
127 | CAP_BAN = capability_put(serv_capindex, "BAN", NULL); | |
128 | CAP_MLOCK = capability_put(serv_capindex, "MLOCK", NULL); | |
129 | ||
130 | capability_require(serv_capindex, "QS"); | |
131 | capability_require(serv_capindex, "EX"); | |
132 | capability_require(serv_capindex, "IE"); | |
133 | capability_require(serv_capindex, "ENCAP"); | |
134 | ||
135 | cli_capindex = capability_index_create("client capabilities"); | |
136 | ||
137 | CLICAP_MULTI_PREFIX = capability_put(cli_capindex, "multi-prefix", &high_priority); | |
138 | CLICAP_ACCOUNT_NOTIFY = capability_put(cli_capindex, "account-notify", &high_priority); | |
139 | CLICAP_EXTENDED_JOIN = capability_put(cli_capindex, "extended-join", &high_priority); | |
140 | CLICAP_AWAY_NOTIFY = capability_put(cli_capindex, "away-notify", &high_priority); | |
141 | CLICAP_USERHOST_IN_NAMES = capability_put(cli_capindex, "userhost-in-names", &high_priority); | |
142 | CLICAP_CAP_NOTIFY = capability_put(cli_capindex, "cap-notify", NULL); | |
143 | CLICAP_CHGHOST = capability_put(cli_capindex, "chghost", &high_priority); | |
144 | CLICAP_ECHO_MESSAGE = capability_put(cli_capindex, "echo-message", NULL); | |
145 | } | |
146 | ||
147 | static CNCB serv_connect_callback; | |
148 | static CNCB serv_connect_ssl_callback; | |
149 | static SSL_OPEN_CB serv_connect_ssl_open_callback; | |
150 | ||
151 | /* | |
152 | * hunt_server - Do the basic thing in delivering the message (command) | |
153 | * across the relays to the specific server (server) for | |
154 | * actions. | |
155 | * | |
156 | * Note: The command is a format string and *MUST* be | |
157 | * of prefixed style (e.g. ":%s COMMAND %s ..."). | |
158 | * Command can have only max 8 parameters. | |
159 | * | |
160 | * server parv[server] is the parameter identifying the | |
161 | * target server. | |
162 | * | |
163 | * *WARNING* | |
164 | * parv[server] is replaced with the pointer to the | |
165 | * real servername from the matched client (I'm lazy | |
166 | * now --msa). | |
167 | * | |
168 | * returns: (see #defines) | |
169 | */ | |
170 | int | |
171 | hunt_server(struct Client *client_p, struct Client *source_p, | |
172 | const char *command, int server, int parc, const char *parv[]) | |
173 | { | |
174 | struct Client *target_p; | |
175 | int wilds; | |
176 | rb_dlink_node *ptr; | |
177 | const char *old; | |
178 | char *new; | |
179 | ||
180 | /* | |
181 | * Assume it's me, if no server | |
182 | */ | |
183 | if(parc <= server || EmptyString(parv[server]) || | |
184 | match(parv[server], me.name) || (strcmp(parv[server], me.id) == 0)) | |
185 | return (HUNTED_ISME); | |
186 | ||
187 | new = LOCAL_COPY(parv[server]); | |
188 | ||
189 | /* | |
190 | * These are to pickup matches that would cause the following | |
191 | * message to go in the wrong direction while doing quick fast | |
192 | * non-matching lookups. | |
193 | */ | |
194 | if(MyClient(source_p)) | |
195 | target_p = find_named_client(new); | |
196 | else | |
197 | target_p = find_client(new); | |
198 | ||
199 | if(target_p) | |
200 | if(target_p->from == source_p->from && !MyConnect(target_p)) | |
201 | target_p = NULL; | |
202 | ||
203 | collapse(new); | |
204 | wilds = (strchr(new, '?') || strchr(new, '*')); | |
205 | ||
206 | /* | |
207 | * Again, if there are no wild cards involved in the server | |
208 | * name, use the hash lookup | |
209 | */ | |
210 | if(!target_p && wilds) | |
211 | { | |
212 | RB_DLINK_FOREACH(ptr, global_serv_list.head) | |
213 | { | |
214 | if(match(new, ((struct Client *) (ptr->data))->name)) | |
215 | { | |
216 | target_p = ptr->data; | |
217 | break; | |
218 | } | |
219 | } | |
220 | } | |
221 | ||
222 | if(target_p && !IsRegistered(target_p)) | |
223 | target_p = NULL; | |
224 | ||
225 | if(target_p) | |
226 | { | |
227 | if(IsMe(target_p) || MyClient(target_p)) | |
228 | return HUNTED_ISME; | |
229 | ||
230 | old = parv[server]; | |
231 | parv[server] = get_id(target_p, target_p); | |
232 | ||
233 | sendto_one(target_p, command, get_id(source_p, target_p), | |
234 | parv[1], parv[2], parv[3], parv[4], parv[5], parv[6], parv[7], parv[8]); | |
235 | parv[server] = old; | |
236 | return (HUNTED_PASS); | |
237 | } | |
238 | ||
239 | if(MyClient(source_p) || !IsDigit(parv[server][0])) | |
240 | sendto_one_numeric(source_p, ERR_NOSUCHSERVER, | |
241 | form_str(ERR_NOSUCHSERVER), parv[server]); | |
242 | return (HUNTED_NOSUCH); | |
243 | } | |
244 | ||
245 | /* | |
246 | * try_connections - scan through configuration and try new connections. | |
247 | * Returns the calendar time when the next call to this | |
248 | * function should be made latest. (No harm done if this | |
249 | * is called earlier or later...) | |
250 | */ | |
251 | void | |
252 | try_connections(void *unused) | |
253 | { | |
254 | struct Client *client_p; | |
255 | struct server_conf *server_p = NULL; | |
256 | struct server_conf *tmp_p; | |
257 | struct Class *cltmp; | |
258 | rb_dlink_node *ptr; | |
259 | bool connecting = false; | |
260 | int confrq = 0; | |
261 | time_t next = 0; | |
262 | ||
263 | RB_DLINK_FOREACH(ptr, server_conf_list.head) | |
264 | { | |
265 | tmp_p = ptr->data; | |
266 | ||
267 | if(ServerConfIllegal(tmp_p) || !ServerConfAutoconn(tmp_p)) | |
268 | continue; | |
269 | ||
270 | /* don't allow ssl connections if ssl isn't setup */ | |
271 | if(ServerConfSSL(tmp_p) && (!ircd_ssl_ok || !get_ssld_count())) | |
272 | continue; | |
273 | ||
274 | cltmp = tmp_p->class; | |
275 | ||
276 | /* | |
277 | * Skip this entry if the use of it is still on hold until | |
278 | * future. Otherwise handle this entry (and set it on hold | |
279 | * until next time). Will reset only hold times, if already | |
280 | * made one successfull connection... [this algorithm is | |
281 | * a bit fuzzy... -- msa >;) ] | |
282 | */ | |
283 | if(tmp_p->hold > rb_current_time()) | |
284 | { | |
285 | if(next > tmp_p->hold || next == 0) | |
286 | next = tmp_p->hold; | |
287 | continue; | |
288 | } | |
289 | ||
290 | confrq = get_con_freq(cltmp); | |
291 | tmp_p->hold = rb_current_time() + confrq; | |
292 | ||
293 | /* | |
294 | * Found a CONNECT config with port specified, scan clients | |
295 | * and see if this server is already connected? | |
296 | */ | |
297 | client_p = find_server(NULL, tmp_p->name); | |
298 | ||
299 | if(!client_p && (CurrUsers(cltmp) < MaxAutoconn(cltmp)) && !connecting) | |
300 | { | |
301 | server_p = tmp_p; | |
302 | ||
303 | /* We connect only one at time... */ | |
304 | connecting = true; | |
305 | } | |
306 | ||
307 | if((next > tmp_p->hold) || (next == 0)) | |
308 | next = tmp_p->hold; | |
309 | } | |
310 | ||
311 | /* TODO: change this to set active flag to 0 when added to event! --Habeeb */ | |
312 | if(GlobalSetOptions.autoconn == 0) | |
313 | return; | |
314 | ||
315 | if(!connecting) | |
316 | return; | |
317 | ||
318 | /* move this connect entry to end.. */ | |
319 | rb_dlinkDelete(&server_p->node, &server_conf_list); | |
320 | rb_dlinkAddTail(server_p, &server_p->node, &server_conf_list); | |
321 | ||
322 | /* | |
323 | * We used to only print this if serv_connect() actually | |
324 | * suceeded, but since rb_tcp_connect() can call the callback | |
325 | * immediately if there is an error, we were getting error messages | |
326 | * in the wrong order. SO, we just print out the activated line, | |
327 | * and let serv_connect() / serv_connect_callback() print an | |
328 | * error afterwards if it fails. | |
329 | * -- adrian | |
330 | */ | |
331 | sendto_realops_snomask(SNO_GENERAL, L_NETWIDE, | |
332 | "Connection to %s activated", | |
333 | server_p->name); | |
334 | ||
335 | serv_connect(server_p, 0); | |
336 | } | |
337 | ||
338 | int | |
339 | check_server(const char *name, struct Client *client_p) | |
340 | { | |
341 | struct server_conf *server_p = NULL; | |
342 | struct server_conf *tmp_p; | |
343 | rb_dlink_node *ptr; | |
344 | int error = -1; | |
345 | const char *encr; | |
346 | bool name_matched = false; | |
347 | bool host_matched = false; | |
348 | bool certfp_failed = false; | |
349 | ||
350 | s_assert(NULL != client_p); | |
351 | if(client_p == NULL) | |
352 | return error; | |
353 | ||
354 | if(!(client_p->localClient->passwd)) | |
355 | return -2; | |
356 | ||
357 | if(strlen(name) > HOSTLEN) | |
358 | return -4; | |
359 | ||
360 | RB_DLINK_FOREACH(ptr, server_conf_list.head) | |
361 | { | |
362 | struct rb_sockaddr_storage client_addr; | |
363 | ||
364 | tmp_p = ptr->data; | |
365 | ||
366 | if(ServerConfIllegal(tmp_p)) | |
367 | continue; | |
368 | ||
369 | if(!match(tmp_p->name, name)) | |
370 | continue; | |
371 | ||
372 | name_matched = true; | |
373 | ||
374 | if(rb_inet_pton_sock(client_p->sockhost, &client_addr) <= 0) | |
375 | SET_SS_FAMILY(&client_addr, AF_UNSPEC); | |
376 | ||
377 | if((tmp_p->connect_host && match(tmp_p->connect_host, client_p->host)) | |
378 | || (GET_SS_FAMILY(&client_addr) == GET_SS_FAMILY(&tmp_p->connect4) | |
379 | && comp_with_mask_sock((struct sockaddr *)&client_addr, | |
380 | (struct sockaddr *)&tmp_p->connect4, 32)) | |
381 | || (GET_SS_FAMILY(&client_addr) == GET_SS_FAMILY(&tmp_p->connect6) | |
382 | && comp_with_mask_sock((struct sockaddr *)&client_addr, | |
383 | (struct sockaddr *)&tmp_p->connect6, 128)) | |
384 | ) | |
385 | { | |
386 | host_matched = true; | |
387 | ||
388 | if(tmp_p->passwd) | |
389 | { | |
390 | if(ServerConfEncrypted(tmp_p)) | |
391 | { | |
392 | encr = rb_crypt(client_p->localClient->passwd, | |
393 | tmp_p->passwd); | |
394 | if(encr != NULL && !strcmp(tmp_p->passwd, encr)) | |
395 | { | |
396 | server_p = tmp_p; | |
397 | break; | |
398 | } | |
399 | else | |
400 | continue; | |
401 | } | |
402 | else if(strcmp(tmp_p->passwd, client_p->localClient->passwd)) | |
403 | continue; | |
404 | } | |
405 | ||
406 | if(tmp_p->certfp) | |
407 | { | |
408 | if(!client_p->certfp || rb_strcasecmp(tmp_p->certfp, client_p->certfp) != 0) { | |
409 | certfp_failed = true; | |
410 | continue; | |
411 | } | |
412 | } | |
413 | ||
414 | server_p = tmp_p; | |
415 | break; | |
416 | } | |
417 | } | |
418 | ||
419 | if(server_p == NULL) | |
420 | { | |
421 | /* return the most specific error */ | |
422 | if(certfp_failed) | |
423 | error = -6; | |
424 | else if(host_matched) | |
425 | error = -2; | |
426 | else if(name_matched) | |
427 | error = -3; | |
428 | ||
429 | return error; | |
430 | } | |
431 | ||
432 | if(ServerConfSSL(server_p) && client_p->localClient->ssl_ctl == NULL) | |
433 | { | |
434 | return -5; | |
435 | } | |
436 | ||
437 | if (client_p->localClient->att_sconf && client_p->localClient->att_sconf->class == server_p->class) { | |
438 | /* this is an outgoing connection that is already attached to the correct class */ | |
439 | } else if (CurrUsers(server_p->class) >= MaxUsers(server_p->class)) { | |
440 | return -7; | |
441 | } | |
442 | attach_server_conf(client_p, server_p); | |
443 | ||
444 | /* clear TB if they support but we dont want it */ | |
445 | if(!ServerConfTb(server_p)) | |
446 | ClearCap(client_p, CAP_TB); | |
447 | ||
448 | return 0; | |
449 | } | |
450 | ||
451 | /* | |
452 | * send_capabilities | |
453 | * | |
454 | * inputs - Client pointer to send to | |
455 | * - int flag of capabilities that this server has | |
456 | * output - NONE | |
457 | * side effects - send the CAPAB line to a server -orabidoo | |
458 | */ | |
459 | void | |
460 | send_capabilities(struct Client *client_p, unsigned int cap_can_send) | |
461 | { | |
462 | sendto_one(client_p, "CAPAB :%s", capability_index_list(serv_capindex, cap_can_send)); | |
463 | } | |
464 | ||
465 | static void | |
466 | burst_ban(struct Client *client_p) | |
467 | { | |
468 | struct ConfItem *aconf; | |
469 | const char *type; | |
470 | rb_dictionary_iter state; | |
471 | ||
472 | RB_DICTIONARY_FOREACH(aconf, &state, prop_bans_dict) | |
473 | { | |
474 | /* Skip expired stuff. */ | |
475 | if(aconf->lifetime < rb_current_time()) | |
476 | continue; | |
477 | switch(aconf->status & ~CONF_ILLEGAL) | |
478 | { | |
479 | case CONF_KILL: type = "K"; break; | |
480 | case CONF_DLINE: type = "D"; break; | |
481 | case CONF_XLINE: type = "X"; break; | |
482 | case CONF_RESV_NICK: type = "R"; break; | |
483 | case CONF_RESV_CHANNEL: type = "R"; break; | |
484 | default: | |
485 | continue; | |
486 | } | |
487 | sendto_one(client_p, ":%s BAN %s %s %s %lu %d %d %s :%s%s%s", | |
488 | me.id, | |
489 | type, | |
490 | aconf->user ? aconf->user : "*", aconf->host, | |
491 | (unsigned long)aconf->created, | |
492 | (int)(aconf->hold - aconf->created), | |
493 | (int)(aconf->lifetime - aconf->created), | |
494 | aconf->info.oper, | |
495 | aconf->passwd, | |
496 | aconf->spasswd ? "|" : "", | |
497 | aconf->spasswd ? aconf->spasswd : ""); | |
498 | } | |
499 | } | |
500 | ||
501 | /* burst_modes_TS6() | |
502 | * | |
503 | * input - client to burst to, channel name, list to burst, mode flag | |
504 | * output - | |
505 | * side effects - client is sent a list of +b, +e, or +I modes | |
506 | */ | |
507 | static void | |
508 | burst_modes_TS6(struct Client *client_p, struct Channel *chptr, | |
509 | rb_dlink_list *list, char flag) | |
510 | { | |
511 | rb_dlink_node *ptr; | |
512 | struct Ban *banptr; | |
513 | ||
514 | send_multiline_init(client_p, " ", ":%s BMASK %ld %s %c :", | |
515 | me.id, | |
516 | (long)chptr->channelts, | |
517 | chptr->chname, | |
518 | flag); | |
519 | ||
520 | RB_DLINK_FOREACH_PREV(ptr, list->tail) | |
521 | { | |
522 | banptr = ptr->data; | |
523 | ||
524 | if (banptr->forward) | |
525 | send_multiline_item(client_p, "%s$%s", | |
526 | banptr->banstr, | |
527 | banptr->forward); | |
528 | else | |
529 | send_multiline_item(client_p, "%s", banptr->banstr); | |
530 | } | |
531 | ||
532 | send_multiline_fini(client_p, NULL); | |
533 | } | |
534 | ||
535 | /* | |
536 | * burst_TS6 | |
537 | * | |
538 | * inputs - client (server) to send nick towards | |
539 | * - client to send nick for | |
540 | * output - NONE | |
541 | * side effects - NICK message is sent towards given client_p | |
542 | */ | |
543 | static void | |
544 | burst_TS6(struct Client *client_p) | |
545 | { | |
546 | char ubuf[BUFSIZE]; | |
547 | struct Client *target_p; | |
548 | struct Channel *chptr; | |
549 | struct membership *msptr; | |
550 | hook_data_client hclientinfo; | |
551 | hook_data_channel hchaninfo; | |
552 | rb_dlink_node *ptr; | |
553 | rb_dlink_node *uptr; | |
554 | char *t; | |
555 | int tlen, mlen; | |
556 | int cur_len = 0; | |
557 | ||
558 | hclientinfo.client = hchaninfo.client = client_p; | |
559 | ||
560 | RB_DLINK_FOREACH(ptr, global_client_list.head) | |
561 | { | |
562 | target_p = ptr->data; | |
563 | ||
564 | if(!IsPerson(target_p)) | |
565 | continue; | |
566 | ||
567 | if(MyClient(target_p->from) && target_p->localClient->att_sconf != NULL && ServerConfNoExport(target_p->localClient->att_sconf)) | |
568 | continue; | |
569 | ||
570 | send_umode(NULL, target_p, 0, ubuf); | |
571 | if(!*ubuf) | |
572 | { | |
573 | ubuf[0] = '+'; | |
574 | ubuf[1] = '\0'; | |
575 | } | |
576 | ||
577 | if(IsCapable(client_p, CAP_EUID)) | |
578 | sendto_one(client_p, ":%s EUID %s %d %ld %s %s %s %s %s %s %s :%s", | |
579 | target_p->servptr->id, target_p->name, | |
580 | target_p->hopcount + 1, | |
581 | (long) target_p->tsinfo, ubuf, | |
582 | target_p->username, target_p->host, | |
583 | IsIPSpoof(target_p) ? "0" : target_p->sockhost, | |
584 | target_p->id, | |
585 | IsDynSpoof(target_p) ? target_p->orighost : "*", | |
586 | EmptyString(target_p->user->suser) ? "*" : target_p->user->suser, | |
587 | target_p->info); | |
588 | else | |
589 | sendto_one(client_p, ":%s UID %s %d %ld %s %s %s %s %s :%s", | |
590 | target_p->servptr->id, target_p->name, | |
591 | target_p->hopcount + 1, | |
592 | (long) target_p->tsinfo, ubuf, | |
593 | target_p->username, target_p->host, | |
594 | IsIPSpoof(target_p) ? "0" : target_p->sockhost, | |
595 | target_p->id, target_p->info); | |
596 | ||
597 | if(!EmptyString(target_p->certfp)) | |
598 | sendto_one(client_p, ":%s ENCAP * CERTFP :%s", | |
599 | use_id(target_p), target_p->certfp); | |
600 | ||
601 | if(!IsCapable(client_p, CAP_EUID)) | |
602 | { | |
603 | if(IsDynSpoof(target_p)) | |
604 | sendto_one(client_p, ":%s ENCAP * REALHOST %s", | |
605 | use_id(target_p), target_p->orighost); | |
606 | if(!EmptyString(target_p->user->suser)) | |
607 | sendto_one(client_p, ":%s ENCAP * LOGIN %s", | |
608 | use_id(target_p), target_p->user->suser); | |
609 | } | |
610 | ||
611 | if(ConfigFileEntry.burst_away && !EmptyString(target_p->user->away)) | |
612 | sendto_one(client_p, ":%s AWAY :%s", | |
613 | use_id(target_p), | |
614 | target_p->user->away); | |
615 | ||
616 | if (IsOper(target_p) && target_p->user && target_p->user->opername) | |
617 | { | |
618 | if (target_p->user->privset) | |
619 | sendto_one(client_p, ":%s OPER %s %s", | |
620 | use_id(target_p), | |
621 | target_p->user->opername, | |
622 | target_p->user->privset->name); | |
623 | else | |
624 | sendto_one(client_p, ":%s OPER %s", | |
625 | use_id(target_p), | |
626 | target_p->user->opername); | |
627 | } | |
628 | ||
629 | hclientinfo.target = target_p; | |
630 | call_hook(h_burst_client, &hclientinfo); | |
631 | } | |
632 | ||
633 | RB_DLINK_FOREACH(ptr, global_channel_list.head) | |
634 | { | |
635 | chptr = ptr->data; | |
636 | ||
637 | if(*chptr->chname != '#') | |
638 | continue; | |
639 | ||
640 | cur_len = mlen = sprintf(buf, ":%s SJOIN %ld %s %s :", me.id, | |
641 | (long) chptr->channelts, chptr->chname, | |
642 | channel_modes(chptr, client_p)); | |
643 | ||
644 | t = buf + mlen; | |
645 | ||
646 | RB_DLINK_FOREACH(uptr, chptr->members.head) | |
647 | { | |
648 | msptr = uptr->data; | |
649 | ||
650 | tlen = strlen(use_id(msptr->client_p)) + 1; | |
651 | if(is_chanop(msptr)) | |
652 | tlen++; | |
653 | if(is_voiced(msptr)) | |
654 | tlen++; | |
655 | ||
656 | if(cur_len + tlen >= BUFSIZE - 3) | |
657 | { | |
658 | *(t-1) = '\0'; | |
659 | sendto_one(client_p, "%s", buf); | |
660 | cur_len = mlen; | |
661 | t = buf + mlen; | |
662 | } | |
663 | ||
664 | sprintf(t, "%s%s ", find_channel_status(msptr, 1), | |
665 | use_id(msptr->client_p)); | |
666 | ||
667 | cur_len += tlen; | |
668 | t += tlen; | |
669 | } | |
670 | ||
671 | if (rb_dlink_list_length(&chptr->members) > 0) | |
672 | { | |
673 | /* remove trailing space */ | |
674 | *(t-1) = '\0'; | |
675 | } | |
676 | sendto_one(client_p, "%s", buf); | |
677 | ||
678 | if(rb_dlink_list_length(&chptr->banlist) > 0) | |
679 | burst_modes_TS6(client_p, chptr, &chptr->banlist, 'b'); | |
680 | ||
681 | if(IsCapable(client_p, CAP_EX) && | |
682 | rb_dlink_list_length(&chptr->exceptlist) > 0) | |
683 | burst_modes_TS6(client_p, chptr, &chptr->exceptlist, 'e'); | |
684 | ||
685 | if(IsCapable(client_p, CAP_IE) && | |
686 | rb_dlink_list_length(&chptr->invexlist) > 0) | |
687 | burst_modes_TS6(client_p, chptr, &chptr->invexlist, 'I'); | |
688 | ||
689 | if(rb_dlink_list_length(&chptr->quietlist) > 0) | |
690 | burst_modes_TS6(client_p, chptr, &chptr->quietlist, 'q'); | |
691 | ||
692 | if(IsCapable(client_p, CAP_TB) && chptr->topic != NULL) | |
693 | sendto_one(client_p, ":%s TB %s %ld %s%s:%s", | |
694 | me.id, chptr->chname, (long) chptr->topic_time, | |
695 | ConfigChannel.burst_topicwho ? chptr->topic_info : "", | |
696 | ConfigChannel.burst_topicwho ? " " : "", | |
697 | chptr->topic); | |
698 | ||
699 | if(IsCapable(client_p, CAP_MLOCK)) | |
700 | sendto_one(client_p, ":%s MLOCK %ld %s :%s", | |
701 | me.id, (long) chptr->channelts, chptr->chname, | |
702 | EmptyString(chptr->mode_lock) ? "" : chptr->mode_lock); | |
703 | ||
704 | hchaninfo.chptr = chptr; | |
705 | call_hook(h_burst_channel, &hchaninfo); | |
706 | } | |
707 | ||
708 | hclientinfo.target = NULL; | |
709 | call_hook(h_burst_finished, &hclientinfo); | |
710 | } | |
711 | ||
712 | /* | |
713 | * show_capabilities - show current server capabilities | |
714 | * | |
715 | * inputs - pointer to an struct Client | |
716 | * output - pointer to static string | |
717 | * side effects - build up string representing capabilities of server listed | |
718 | */ | |
719 | const char * | |
720 | show_capabilities(struct Client *target_p) | |
721 | { | |
722 | static char msgbuf[BUFSIZE]; | |
723 | ||
724 | *msgbuf = '\0'; | |
725 | ||
726 | if(has_id(target_p)) | |
727 | rb_strlcpy(msgbuf, " TS6", sizeof(msgbuf)); | |
728 | ||
729 | if(IsSSL(target_p)) | |
730 | rb_strlcat(msgbuf, " SSL", sizeof(msgbuf)); | |
731 | ||
732 | if(!IsServer(target_p) || !target_p->serv->caps) /* short circuit if no caps */ | |
733 | return msgbuf + 1; | |
734 | ||
735 | rb_strlcat(msgbuf, " ", sizeof(msgbuf)); | |
736 | rb_strlcat(msgbuf, capability_index_list(serv_capindex, target_p->serv->caps), sizeof(msgbuf)); | |
737 | ||
738 | return msgbuf + 1; | |
739 | } | |
740 | ||
741 | /* | |
742 | * server_estab | |
743 | * | |
744 | * inputs - pointer to a struct Client | |
745 | * output - | |
746 | * side effects - | |
747 | */ | |
748 | int | |
749 | server_estab(struct Client *client_p) | |
750 | { | |
751 | struct Client *target_p; | |
752 | struct server_conf *server_p; | |
753 | hook_data_client hdata; | |
754 | char *host; | |
755 | rb_dlink_node *ptr; | |
756 | char note[HOSTLEN + 15]; | |
757 | ||
758 | s_assert(NULL != client_p); | |
759 | if(client_p == NULL) | |
760 | return -1; | |
761 | ||
762 | host = client_p->name; | |
763 | ||
764 | if((server_p = client_p->localClient->att_sconf) == NULL) | |
765 | { | |
766 | /* This shouldn't happen, better tell the ops... -A1kmm */ | |
767 | sendto_realops_snomask(SNO_GENERAL, L_NETWIDE, | |
768 | "Warning: Lost connect{} block for server %s!", host); | |
769 | return exit_client(client_p, client_p, client_p, "Lost connect{} block!"); | |
770 | } | |
771 | ||
772 | /* We shouldn't have to check this, it should already done before | |
773 | * server_estab is called. -A1kmm | |
774 | */ | |
775 | if(client_p->localClient->passwd) | |
776 | { | |
777 | memset(client_p->localClient->passwd, 0, strlen(client_p->localClient->passwd)); | |
778 | rb_free(client_p->localClient->passwd); | |
779 | client_p->localClient->passwd = NULL; | |
780 | } | |
781 | ||
782 | /* Its got identd , since its a server */ | |
783 | SetGotId(client_p); | |
784 | ||
785 | if(IsUnknown(client_p)) | |
786 | { | |
787 | /* the server may be linking based on certificate fingerprint now. --nenolod */ | |
788 | sendto_one(client_p, "PASS %s TS %d :%s", | |
789 | EmptyString(server_p->spasswd) ? "*" : server_p->spasswd, TS_CURRENT, me.id); | |
790 | ||
791 | /* pass info to new server */ | |
792 | send_capabilities(client_p, default_server_capabs | CAP_MASK | |
793 | | (ServerConfTb(server_p) ? CAP_TB : 0)); | |
794 | ||
795 | sendto_one(client_p, "SERVER %s 1 :%s%s", | |
796 | me.name, | |
797 | ConfigServerHide.hidden ? "(H) " : "", | |
798 | (me.info[0]) ? (me.info) : "IRCers United"); | |
799 | } | |
800 | ||
801 | if(!rb_set_buffers(client_p->localClient->F, READBUF_SIZE)) | |
802 | ilog_error("rb_set_buffers failed for server"); | |
803 | ||
804 | client_p->servptr = &me; | |
805 | ||
806 | if(IsAnyDead(client_p)) | |
807 | return CLIENT_EXITED; | |
808 | ||
809 | sendto_one(client_p, "SVINFO %d %d 0 :%ld", TS_CURRENT, TS_MIN, (long int)rb_current_time()); | |
810 | ||
811 | rb_dlinkAdd(client_p, &client_p->lnode, &me.serv->servers); | |
812 | rb_dlinkMoveNode(&client_p->localClient->tnode, &unknown_list, &serv_list); | |
813 | rb_dlinkAddTailAlloc(client_p, &global_serv_list); | |
814 | ||
815 | if(has_id(client_p)) | |
816 | add_to_id_hash(client_p->id, client_p); | |
817 | ||
818 | add_to_client_hash(client_p->name, client_p); | |
819 | /* doesnt duplicate client_p->serv if allocated this struct already */ | |
820 | make_server(client_p); | |
821 | SetServer(client_p); | |
822 | ||
823 | client_p->serv->caps = client_p->localClient->caps; | |
824 | ||
825 | if(client_p->localClient->fullcaps) | |
826 | { | |
827 | client_p->serv->fullcaps = rb_strdup(client_p->localClient->fullcaps); | |
828 | rb_free(client_p->localClient->fullcaps); | |
829 | client_p->localClient->fullcaps = NULL; | |
830 | } | |
831 | ||
832 | client_p->serv->nameinfo = scache_connect(client_p->name, client_p->info, IsHidden(client_p)); | |
833 | client_p->localClient->firsttime = rb_current_time(); | |
834 | /* fixing eob timings.. -gnp */ | |
835 | ||
836 | if((rb_dlink_list_length(&lclient_list) + rb_dlink_list_length(&serv_list)) > | |
837 | (unsigned long)MaxConnectionCount) | |
838 | MaxConnectionCount = rb_dlink_list_length(&lclient_list) + | |
839 | rb_dlink_list_length(&serv_list); | |
840 | ||
841 | /* Show the real host/IP to admins */ | |
842 | sendto_realops_snomask(SNO_GENERAL, L_ALL, | |
843 | "Link with %s established: (%s) link", | |
844 | client_p->name, | |
845 | show_capabilities(client_p)); | |
846 | ||
847 | ilog(L_SERVER, "Link with %s established: (%s) link", | |
848 | log_client_name(client_p, SHOW_IP), show_capabilities(client_p)); | |
849 | ||
850 | hdata.client = &me; | |
851 | hdata.target = client_p; | |
852 | call_hook(h_server_introduced, &hdata); | |
853 | ||
854 | snprintf(note, sizeof(note), "Server: %s", client_p->name); | |
855 | rb_note(client_p->localClient->F, note); | |
856 | ||
857 | /* | |
858 | ** Old sendto_serv_but_one() call removed because we now | |
859 | ** need to send different names to different servers | |
860 | ** (domain name matching) Send new server to other servers. | |
861 | */ | |
862 | RB_DLINK_FOREACH(ptr, serv_list.head) | |
863 | { | |
864 | target_p = ptr->data; | |
865 | ||
866 | if(target_p == client_p) | |
867 | continue; | |
868 | ||
869 | if(target_p->localClient->att_sconf != NULL && ServerConfNoExport(target_p->localClient->att_sconf)) | |
870 | continue; | |
871 | ||
872 | if(has_id(target_p) && has_id(client_p)) | |
873 | { | |
874 | sendto_one(target_p, ":%s SID %s 2 %s :%s%s", | |
875 | me.id, client_p->name, client_p->id, | |
876 | IsHidden(client_p) ? "(H) " : "", client_p->info); | |
877 | ||
878 | if(!EmptyString(client_p->serv->fullcaps)) | |
879 | sendto_one(target_p, ":%s ENCAP * GCAP :%s", | |
880 | client_p->id, client_p->serv->fullcaps); | |
881 | } | |
882 | else | |
883 | { | |
884 | sendto_one(target_p, ":%s SERVER %s 2 :%s%s", | |
885 | me.name, client_p->name, | |
886 | IsHidden(client_p) ? "(H) " : "", client_p->info); | |
887 | ||
888 | if(!EmptyString(client_p->serv->fullcaps)) | |
889 | sendto_one(target_p, ":%s ENCAP * GCAP :%s", | |
890 | client_p->name, client_p->serv->fullcaps); | |
891 | } | |
892 | } | |
893 | ||
894 | /* | |
895 | ** Pass on my client information to the new server | |
896 | ** | |
897 | ** First, pass only servers (idea is that if the link gets | |
898 | ** cancelled beacause the server was already there, | |
899 | ** there are no NICK's to be cancelled...). Of course, | |
900 | ** if cancellation occurs, all this info is sent anyway, | |
901 | ** and I guess the link dies when a read is attempted...? --msa | |
902 | ** | |
903 | ** Note: Link cancellation to occur at this point means | |
904 | ** that at least two servers from my fragment are building | |
905 | ** up connection this other fragment at the same time, it's | |
906 | ** a race condition, not the normal way of operation... | |
907 | ** | |
908 | ** ALSO NOTE: using the get_client_name for server names-- | |
909 | ** see previous *WARNING*!!! (Also, original inpath | |
910 | ** is destroyed...) | |
911 | */ | |
912 | RB_DLINK_FOREACH(ptr, global_serv_list.head) | |
913 | { | |
914 | target_p = ptr->data; | |
915 | ||
916 | /* target_p->from == target_p for target_p == client_p */ | |
917 | if(IsMe(target_p) || target_p->from == client_p) | |
918 | continue; | |
919 | ||
920 | /* don't distribute downstream leaves of servers that are no-export */ | |
921 | if(MyClient(target_p->from) && target_p->from->localClient->att_sconf != NULL && ServerConfNoExport(target_p->from->localClient->att_sconf)) | |
922 | continue; | |
923 | ||
924 | /* presumption, if target has an id, so does its uplink */ | |
925 | if(has_id(client_p) && has_id(target_p)) | |
926 | sendto_one(client_p, ":%s SID %s %d %s :%s%s", | |
927 | target_p->servptr->id, target_p->name, | |
928 | target_p->hopcount + 1, target_p->id, | |
929 | IsHidden(target_p) ? "(H) " : "", target_p->info); | |
930 | else | |
931 | sendto_one(client_p, ":%s SERVER %s %d :%s%s", | |
932 | target_p->servptr->name, | |
933 | target_p->name, target_p->hopcount + 1, | |
934 | IsHidden(target_p) ? "(H) " : "", target_p->info); | |
935 | ||
936 | if(!EmptyString(target_p->serv->fullcaps)) | |
937 | sendto_one(client_p, ":%s ENCAP * GCAP :%s", | |
938 | get_id(target_p, client_p), | |
939 | target_p->serv->fullcaps); | |
940 | } | |
941 | ||
942 | if(IsCapable(client_p, CAP_BAN)) | |
943 | burst_ban(client_p); | |
944 | ||
945 | burst_TS6(client_p); | |
946 | ||
947 | /* Always send a PING after connect burst is done */ | |
948 | sendto_one(client_p, "PING :%s", get_id(&me, client_p)); | |
949 | ||
950 | free_pre_client(client_p); | |
951 | ||
952 | send_pop_queue(client_p); | |
953 | ||
954 | return 0; | |
955 | } | |
956 | ||
957 | /* | |
958 | * New server connection code | |
959 | * Based upon the stuff floating about in s_bsd.c | |
960 | * -- adrian | |
961 | */ | |
962 | ||
963 | /* | |
964 | * serv_connect() - initiate a server connection | |
965 | * | |
966 | * inputs - pointer to conf | |
967 | * - pointer to client doing the connet | |
968 | * output - | |
969 | * side effects - | |
970 | * | |
971 | * This code initiates a connection to a server. It first checks to make | |
972 | * sure the given server exists. If this is the case, it creates a socket, | |
973 | * creates a client, saves the socket information in the client, and | |
974 | * initiates a connection to the server through rb_connect_tcp(). The | |
975 | * completion of this goes through serv_completed_connection(). | |
976 | * | |
977 | * We return 1 if the connection is attempted, since we don't know whether | |
978 | * it suceeded or not, and 0 if it fails in here somewhere. | |
979 | */ | |
980 | int | |
981 | serv_connect(struct server_conf *server_p, struct Client *by) | |
982 | { | |
983 | struct Client *client_p; | |
984 | struct sockaddr_storage sa_connect[2]; | |
985 | struct sockaddr_storage sa_bind[ARRAY_SIZE(sa_connect)]; | |
986 | char note[HOSTLEN + 10]; | |
987 | rb_fde_t *F; | |
988 | ||
989 | s_assert(server_p != NULL); | |
990 | if(server_p == NULL) | |
991 | return 0; | |
992 | ||
993 | for (int i = 0; i < ARRAY_SIZE(sa_connect); i++) { | |
994 | SET_SS_FAMILY(&sa_connect[i], AF_UNSPEC); | |
995 | SET_SS_FAMILY(&sa_bind[i], AF_UNSPEC); | |
996 | } | |
997 | ||
998 | if(server_p->aftype == AF_UNSPEC | |
999 | && GET_SS_FAMILY(&server_p->connect4) == AF_INET | |
1000 | && GET_SS_FAMILY(&server_p->connect6) == AF_INET6) | |
1001 | { | |
1002 | if(rand() % 2 == 0) | |
1003 | { | |
1004 | sa_connect[0] = server_p->connect4; | |
1005 | sa_connect[1] = server_p->connect6; | |
1006 | sa_bind[0] = server_p->bind4; | |
1007 | sa_bind[1] = server_p->bind6; | |
1008 | } | |
1009 | else | |
1010 | { | |
1011 | sa_connect[0] = server_p->connect6; | |
1012 | sa_connect[1] = server_p->connect4; | |
1013 | sa_bind[0] = server_p->bind6; | |
1014 | sa_bind[1] = server_p->bind4; | |
1015 | } | |
1016 | } | |
1017 | else if(server_p->aftype == AF_INET || GET_SS_FAMILY(&server_p->connect4) == AF_INET) | |
1018 | { | |
1019 | sa_connect[0] = server_p->connect4; | |
1020 | sa_bind[0] = server_p->bind4; | |
1021 | } | |
1022 | else if(server_p->aftype == AF_INET6 || GET_SS_FAMILY(&server_p->connect6) == AF_INET6) | |
1023 | { | |
1024 | sa_connect[0] = server_p->connect6; | |
1025 | sa_bind[0] = server_p->bind6; | |
1026 | } | |
1027 | ||
1028 | /* log */ | |
1029 | #ifdef HAVE_LIBSCTP | |
1030 | if (ServerConfSCTP(server_p) && GET_SS_FAMILY(&sa_connect[1]) != AF_UNSPEC) { | |
1031 | char buf2[HOSTLEN + 1]; | |
1032 | ||
1033 | buf[0] = 0; | |
1034 | buf2[0] = 0; | |
1035 | rb_inet_ntop_sock((struct sockaddr *)&sa_connect[0], buf, sizeof(buf)); | |
1036 | rb_inet_ntop_sock((struct sockaddr *)&sa_connect[1], buf2, sizeof(buf2)); | |
1037 | ilog(L_SERVER, "Connect to *[%s] @%s&%s", server_p->name, buf, buf2); | |
1038 | } else { | |
1039 | #else | |
1040 | { | |
1041 | #endif | |
1042 | buf[0] = 0; | |
1043 | rb_inet_ntop_sock((struct sockaddr *)&sa_connect[0], buf, sizeof(buf)); | |
1044 | ilog(L_SERVER, "Connect to *[%s] @%s", server_p->name, buf); | |
1045 | } | |
1046 | ||
1047 | /* | |
1048 | * Make sure this server isn't already connected | |
1049 | */ | |
1050 | if((client_p = find_server(NULL, server_p->name))) | |
1051 | { | |
1052 | sendto_realops_snomask(SNO_GENERAL, L_NETWIDE, | |
1053 | "Server %s already present from %s", | |
1054 | server_p->name, client_p->name); | |
1055 | if(by && IsPerson(by) && !MyClient(by)) | |
1056 | sendto_one_notice(by, ":Server %s already present from %s", | |
1057 | server_p->name, client_p->name); | |
1058 | return 0; | |
1059 | } | |
1060 | ||
1061 | if (CurrUsers(server_p->class) >= MaxUsers(server_p->class)) { | |
1062 | sendto_realops_snomask(SNO_GENERAL, L_NETWIDE, | |
1063 | "No more connections allowed in class \"%s\" for server %s", | |
1064 | server_p->class->class_name, server_p->name); | |
1065 | if(by && IsPerson(by) && !MyClient(by)) | |
1066 | sendto_one_notice(by, ":No more connections allowed in class \"%s\" for server %s", | |
1067 | server_p->class->class_name, server_p->name); | |
1068 | return 0; | |
1069 | } | |
1070 | ||
1071 | /* create a socket for the server connection */ | |
1072 | if(GET_SS_FAMILY(&sa_connect[0]) == AF_UNSPEC) { | |
1073 | ilog_error("unspecified socket address family"); | |
1074 | return 0; | |
1075 | #ifdef HAVE_LIBSCTP | |
1076 | } else if (ServerConfSCTP(server_p)) { | |
1077 | if ((F = rb_socket(AF_INET6, SOCK_STREAM, IPPROTO_SCTP, NULL)) == NULL) { | |
1078 | ilog_error("opening a stream socket"); | |
1079 | return 0; | |
1080 | } | |
1081 | #endif | |
1082 | } else if ((F = rb_socket(GET_SS_FAMILY(&sa_connect[0]), SOCK_STREAM, IPPROTO_TCP, NULL)) == NULL) { | |
1083 | ilog_error("opening a stream socket"); | |
1084 | return 0; | |
1085 | } | |
1086 | ||
1087 | /* servernames are always guaranteed under HOSTLEN chars */ | |
1088 | snprintf(note, sizeof(note), "Server: %s", server_p->name); | |
1089 | rb_note(F, note); | |
1090 | ||
1091 | /* Create a local client */ | |
1092 | client_p = make_client(NULL); | |
1093 | ||
1094 | /* Copy in the server, hostname, fd */ | |
1095 | rb_strlcpy(client_p->name, server_p->name, sizeof(client_p->name)); | |
1096 | if(server_p->connect_host) | |
1097 | rb_strlcpy(client_p->host, server_p->connect_host, sizeof(client_p->host)); | |
1098 | else | |
1099 | rb_strlcpy(client_p->host, buf, sizeof(client_p->host)); | |
1100 | rb_strlcpy(client_p->sockhost, buf, sizeof(client_p->sockhost)); | |
1101 | client_p->localClient->F = F; | |
1102 | /* shove the port number into the sockaddr */ | |
1103 | SET_SS_PORT(&sa_connect[0], htons(server_p->port)); | |
1104 | SET_SS_PORT(&sa_connect[1], htons(server_p->port)); | |
1105 | ||
1106 | /* | |
1107 | * Set up the initial server evilness, ripped straight from | |
1108 | * connect_server(), so don't blame me for it being evil. | |
1109 | * -- adrian | |
1110 | */ | |
1111 | ||
1112 | if(!rb_set_buffers(client_p->localClient->F, READBUF_SIZE)) | |
1113 | { | |
1114 | ilog_error("setting the buffer size for a server connection"); | |
1115 | } | |
1116 | ||
1117 | /* | |
1118 | * Attach config entries to client here rather than in | |
1119 | * serv_connect_callback(). This to avoid null pointer references. | |
1120 | */ | |
1121 | attach_server_conf(client_p, server_p); | |
1122 | ||
1123 | /* | |
1124 | * at this point we have a connection in progress and C/N lines | |
1125 | * attached to the client, the socket info should be saved in the | |
1126 | * client and it should either be resolved or have a valid address. | |
1127 | * | |
1128 | * The socket has been connected or connect is in progress. | |
1129 | */ | |
1130 | make_server(client_p); | |
1131 | if(by && IsClient(by)) | |
1132 | rb_strlcpy(client_p->serv->by, by->name, sizeof(client_p->serv->by)); | |
1133 | else | |
1134 | strcpy(client_p->serv->by, "AutoConn."); | |
1135 | ||
1136 | SetConnecting(client_p); | |
1137 | rb_dlinkAddTail(client_p, &client_p->node, &global_client_list); | |
1138 | ||
1139 | for (int i = 0; i < ARRAY_SIZE(sa_connect); i++) { | |
1140 | if (GET_SS_FAMILY(&sa_bind[i]) == AF_UNSPEC) { | |
1141 | if (GET_SS_FAMILY(&sa_connect[i]) == GET_SS_FAMILY(&ServerInfo.bind4)) | |
1142 | sa_bind[i] = ServerInfo.bind4; | |
1143 | if (GET_SS_FAMILY(&sa_connect[i]) == GET_SS_FAMILY(&ServerInfo.bind6)) | |
1144 | sa_bind[i] = ServerInfo.bind6; | |
1145 | } | |
1146 | } | |
1147 | ||
1148 | #ifdef HAVE_LIBSCTP | |
1149 | if (ServerConfSCTP(server_p)) { | |
1150 | rb_connect_sctp(client_p->localClient->F, | |
1151 | sa_connect, ARRAY_SIZE(sa_connect), sa_bind, ARRAY_SIZE(sa_bind), | |
1152 | ServerConfSSL(server_p) ? serv_connect_ssl_callback : serv_connect_callback, | |
1153 | client_p, ConfigFileEntry.connect_timeout); | |
1154 | } else { | |
1155 | #else | |
1156 | { | |
1157 | #endif | |
1158 | rb_connect_tcp(client_p->localClient->F, | |
1159 | (struct sockaddr *)&sa_connect[0], | |
1160 | GET_SS_FAMILY(&sa_bind[0]) == AF_UNSPEC ? NULL : (struct sockaddr *)&sa_bind[0], | |
1161 | ServerConfSSL(server_p) ? serv_connect_ssl_callback : serv_connect_callback, | |
1162 | client_p, ConfigFileEntry.connect_timeout); | |
1163 | } | |
1164 | return 1; | |
1165 | } | |
1166 | ||
1167 | static void | |
1168 | serv_connect_ssl_callback(rb_fde_t *F, int status, void *data) | |
1169 | { | |
1170 | struct Client *client_p = data; | |
1171 | rb_fde_t *xF[2]; | |
1172 | rb_connect_sockaddr(F, (struct sockaddr *)&client_p->localClient->ip, sizeof(client_p->localClient->ip)); | |
1173 | if(status != RB_OK) | |
1174 | { | |
1175 | /* Print error message, just like non-SSL. */ | |
1176 | serv_connect_callback(F, status, data); | |
1177 | return; | |
1178 | } | |
1179 | if(rb_socketpair(AF_UNIX, SOCK_STREAM, 0, &xF[0], &xF[1], "Outgoing ssld connection") == -1) | |
1180 | { | |
1181 | ilog_error("rb_socketpair failed for server"); | |
1182 | serv_connect_callback(F, RB_ERROR, data); | |
1183 | return; | |
1184 | ||
1185 | } | |
1186 | client_p->localClient->F = xF[0]; | |
1187 | client_p->localClient->ssl_callback = serv_connect_ssl_open_callback; | |
1188 | ||
1189 | client_p->localClient->ssl_ctl = start_ssld_connect(F, xF[1], connid_get(client_p)); | |
1190 | if(!client_p->localClient->ssl_ctl) | |
1191 | { | |
1192 | serv_connect_callback(client_p->localClient->F, RB_ERROR, data); | |
1193 | return; | |
1194 | } | |
1195 | SetSSL(client_p); | |
1196 | } | |
1197 | ||
1198 | static int | |
1199 | serv_connect_ssl_open_callback(struct Client *client_p, int status) | |
1200 | { | |
1201 | serv_connect_callback(client_p->localClient->F, status, client_p); | |
1202 | return 1; /* suppress default exit_client handler for status != RB_OK */ | |
1203 | } | |
1204 | ||
1205 | /* | |
1206 | * serv_connect_callback() - complete a server connection. | |
1207 | * | |
1208 | * This routine is called after the server connection attempt has | |
1209 | * completed. If unsucessful, an error is sent to ops and the client | |
1210 | * is closed. If sucessful, it goes through the initialisation/check | |
1211 | * procedures, the capabilities are sent, and the socket is then | |
1212 | * marked for reading. | |
1213 | */ | |
1214 | static void | |
1215 | serv_connect_callback(rb_fde_t *F, int status, void *data) | |
1216 | { | |
1217 | struct Client *client_p = data; | |
1218 | struct server_conf *server_p; | |
1219 | char *errstr; | |
1220 | ||
1221 | /* First, make sure its a real client! */ | |
1222 | s_assert(client_p != NULL); | |
1223 | s_assert(client_p->localClient->F == F); | |
1224 | ||
1225 | if(client_p == NULL) | |
1226 | return; | |
1227 | ||
1228 | /* while we were waiting for the callback, its possible this already | |
1229 | * linked in.. --fl | |
1230 | */ | |
1231 | if(find_server(NULL, client_p->name) != NULL) | |
1232 | { | |
1233 | exit_client(client_p, client_p, &me, "Server Exists"); | |
1234 | return; | |
1235 | } | |
1236 | ||
1237 | if(client_p->localClient->ssl_ctl == NULL) | |
1238 | rb_connect_sockaddr(F, (struct sockaddr *)&client_p->localClient->ip, sizeof(client_p->localClient->ip)); | |
1239 | ||
1240 | /* Check the status */ | |
1241 | if(status != RB_OK) | |
1242 | { | |
1243 | /* COMM_ERR_TIMEOUT wont have an errno associated with it, | |
1244 | * the others will.. --fl | |
1245 | */ | |
1246 | if(status == RB_ERR_TIMEOUT || status == RB_ERROR_SSL) | |
1247 | { | |
1248 | sendto_realops_snomask(SNO_GENERAL, L_NETWIDE, | |
1249 | "Error connecting to %s[%s]: %s", | |
1250 | client_p->name, | |
1251 | "255.255.255.255", | |
1252 | rb_errstr(status)); | |
1253 | ilog(L_SERVER, "Error connecting to %s[%s]: %s", | |
1254 | client_p->name, client_p->sockhost, | |
1255 | rb_errstr(status)); | |
1256 | } | |
1257 | else | |
1258 | { | |
1259 | errstr = strerror(rb_get_sockerr(F)); | |
1260 | sendto_realops_snomask(SNO_GENERAL, L_NETWIDE, | |
1261 | "Error connecting to %s[%s]: %s (%s)", | |
1262 | client_p->name, | |
1263 | "255.255.255.255", | |
1264 | rb_errstr(status), errstr); | |
1265 | ilog(L_SERVER, "Error connecting to %s[%s]: %s (%s)", | |
1266 | client_p->name, client_p->sockhost, | |
1267 | rb_errstr(status), errstr); | |
1268 | } | |
1269 | ||
1270 | exit_client(client_p, client_p, &me, rb_errstr(status)); | |
1271 | return; | |
1272 | } | |
1273 | ||
1274 | /* COMM_OK, so continue the connection procedure */ | |
1275 | /* Get the C/N lines */ | |
1276 | if((server_p = client_p->localClient->att_sconf) == NULL) | |
1277 | { | |
1278 | sendto_realops_snomask(SNO_GENERAL, L_NETWIDE, "Lost connect{} block for %s", | |
1279 | client_p->name); | |
1280 | exit_client(client_p, client_p, &me, "Lost connect{} block"); | |
1281 | return; | |
1282 | } | |
1283 | ||
1284 | if(server_p->certfp && (!client_p->certfp || rb_strcasecmp(server_p->certfp, client_p->certfp) != 0)) | |
1285 | { | |
1286 | sendto_realops_snomask(SNO_GENERAL, L_NETWIDE, | |
1287 | "Connection to %s has invalid certificate fingerprint %s", | |
1288 | client_p->name, client_p->certfp); | |
1289 | ilog(L_SERVER, "Access denied, invalid certificate fingerprint %s from %s", | |
1290 | client_p->certfp, log_client_name(client_p, SHOW_IP)); | |
1291 | ||
1292 | exit_client(client_p, client_p, &me, "Invalid fingerprint."); | |
1293 | return; | |
1294 | } | |
1295 | ||
1296 | /* Next, send the initial handshake */ | |
1297 | SetHandshake(client_p); | |
1298 | ||
1299 | /* the server may be linking based on certificate fingerprint now. --nenolod */ | |
1300 | sendto_one(client_p, "PASS %s TS %d :%s", | |
1301 | EmptyString(server_p->spasswd) ? "*" : server_p->spasswd, TS_CURRENT, me.id); | |
1302 | ||
1303 | /* pass my info to the new server */ | |
1304 | send_capabilities(client_p, default_server_capabs | CAP_MASK | |
1305 | | (ServerConfTb(server_p) ? CAP_TB : 0)); | |
1306 | ||
1307 | sendto_one(client_p, "SERVER %s 1 :%s%s", | |
1308 | me.name, | |
1309 | ConfigServerHide.hidden ? "(H) " : "", me.info); | |
1310 | ||
1311 | /* | |
1312 | * If we've been marked dead because a send failed, just exit | |
1313 | * here now and save everyone the trouble of us ever existing. | |
1314 | */ | |
1315 | if(IsAnyDead(client_p)) | |
1316 | { | |
1317 | sendto_realops_snomask(SNO_GENERAL, L_NETWIDE, | |
1318 | "%s went dead during handshake", client_p->name); | |
1319 | exit_client(client_p, client_p, &me, "Went dead during handshake"); | |
1320 | return; | |
1321 | } | |
1322 | ||
1323 | /* don't move to serv_list yet -- we haven't sent a burst! */ | |
1324 | ||
1325 | /* If we get here, we're ok, so lets start reading some data */ | |
1326 | read_packet(F, client_p); | |
1327 | } |