]>
Commit | Line | Data |
---|---|---|
1 | /* | |
2 | * ircd-ratbox: A slightly useful ircd. | |
3 | * s_serv.c: Server related functions. | |
4 | * | |
5 | * Copyright (C) 1990 Jarkko Oikarinen and University of Oulu, Co Center | |
6 | * Copyright (C) 1996-2002 Hybrid Development Team | |
7 | * Copyright (C) 2002-2005 ircd-ratbox development team | |
8 | * | |
9 | * This program is free software; you can redistribute it and/or modify | |
10 | * it under the terms of the GNU General Public License as published by | |
11 | * the Free Software Foundation; either version 2 of the License, or | |
12 | * (at your option) any later version. | |
13 | * | |
14 | * This program is distributed in the hope that it will be useful, | |
15 | * but WITHOUT ANY WARRANTY; without even the implied warranty of | |
16 | * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the | |
17 | * GNU General Public License for more details. | |
18 | * | |
19 | * You should have received a copy of the GNU General Public License | |
20 | * along with this program; if not, write to the Free Software | |
21 | * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 | |
22 | * USA | |
23 | */ | |
24 | ||
25 | #include "stdinc.h" | |
26 | ||
27 | #ifdef HAVE_LIBCRYPTO | |
28 | #include <openssl/rsa.h> | |
29 | #endif | |
30 | ||
31 | #include "s_serv.h" | |
32 | #include "class.h" | |
33 | #include "client.h" | |
34 | #include "hash.h" | |
35 | #include "match.h" | |
36 | #include "ircd.h" | |
37 | #include "ircd_defs.h" | |
38 | #include "numeric.h" | |
39 | #include "packet.h" | |
40 | #include "s_conf.h" | |
41 | #include "s_newconf.h" | |
42 | #include "logger.h" | |
43 | #include "s_stats.h" | |
44 | #include "s_user.h" | |
45 | #include "scache.h" | |
46 | #include "send.h" | |
47 | #include "client.h" | |
48 | #include "channel.h" /* chcap_usage_counts stuff... */ | |
49 | #include "hook.h" | |
50 | #include "msg.h" | |
51 | #include "reject.h" | |
52 | #include "sslproc.h" | |
53 | #include "capability.h" | |
54 | #include "s_assert.h" | |
55 | ||
56 | int MaxConnectionCount = 1; | |
57 | int MaxClientCount = 1; | |
58 | int refresh_user_links = 0; | |
59 | ||
60 | static char buf[BUFSIZE]; | |
61 | ||
62 | /* | |
63 | * list of recognized server capabilities. "TS" is not on the list | |
64 | * because all servers that we talk to already do TS, and the kludged | |
65 | * extra argument to "PASS" takes care of checking that. -orabidoo | |
66 | */ | |
67 | struct CapabilityIndex *serv_capindex = NULL; | |
68 | struct CapabilityIndex *cli_capindex = NULL; | |
69 | ||
70 | unsigned int CAP_CAP; | |
71 | unsigned int CAP_QS; | |
72 | unsigned int CAP_EX; | |
73 | unsigned int CAP_CHW; | |
74 | unsigned int CAP_IE; | |
75 | unsigned int CAP_KLN; | |
76 | unsigned int CAP_KNOCK; | |
77 | unsigned int CAP_TB; | |
78 | unsigned int CAP_UNKLN; | |
79 | unsigned int CAP_CLUSTER; | |
80 | unsigned int CAP_ENCAP; | |
81 | unsigned int CAP_TS6; | |
82 | unsigned int CAP_SERVICE; | |
83 | unsigned int CAP_RSFNC; | |
84 | unsigned int CAP_RSFNCF; | |
85 | unsigned int CAP_SAVE; | |
86 | unsigned int CAP_EUID; | |
87 | unsigned int CAP_EOPMOD; | |
88 | unsigned int CAP_BAN; | |
89 | unsigned int CAP_MLOCK; | |
90 | unsigned int CAP_EBMASK; | |
91 | ||
92 | unsigned int CLICAP_MULTI_PREFIX; | |
93 | unsigned int CLICAP_ACCOUNT_NOTIFY; | |
94 | unsigned int CLICAP_EXTENDED_JOIN; | |
95 | unsigned int CLICAP_AWAY_NOTIFY; | |
96 | unsigned int CLICAP_USERHOST_IN_NAMES; | |
97 | unsigned int CLICAP_CAP_NOTIFY; | |
98 | unsigned int CLICAP_CHGHOST; | |
99 | unsigned int CLICAP_ECHO_MESSAGE; | |
100 | ||
101 | /* | |
102 | * initialize our builtin capability table. --nenolod | |
103 | */ | |
104 | void | |
105 | init_builtin_capabs(void) | |
106 | { | |
107 | static struct ClientCapability high_priority = {.flags = CLICAP_FLAGS_PRIORITY}; | |
108 | serv_capindex = capability_index_create("server capabilities"); | |
109 | ||
110 | /* These two are not set via CAPAB/GCAP keywords. */ | |
111 | CAP_CAP = capability_put_anonymous(serv_capindex); | |
112 | CAP_TS6 = capability_put_anonymous(serv_capindex); | |
113 | ||
114 | CAP_QS = capability_put(serv_capindex, "QS", NULL); | |
115 | CAP_EX = capability_put(serv_capindex, "EX", NULL); | |
116 | CAP_CHW = capability_put(serv_capindex, "CHW", NULL); | |
117 | CAP_IE = capability_put(serv_capindex, "IE", NULL); | |
118 | CAP_KLN = capability_put(serv_capindex, "KLN", NULL); | |
119 | CAP_KNOCK = capability_put(serv_capindex, "KNOCK", NULL); | |
120 | CAP_TB = capability_put(serv_capindex, "TB", NULL); | |
121 | CAP_UNKLN = capability_put(serv_capindex, "UNKLN", NULL); | |
122 | CAP_CLUSTER = capability_put(serv_capindex, "CLUSTER", NULL); | |
123 | CAP_ENCAP = capability_put(serv_capindex, "ENCAP", NULL); | |
124 | CAP_SERVICE = capability_put(serv_capindex, "SERVICES", NULL); | |
125 | CAP_RSFNC = capability_put(serv_capindex, "RSFNC", NULL); | |
126 | CAP_RSFNCF = capability_put(serv_capindex, "RSFNCF", NULL); | |
127 | CAP_SAVE = capability_put(serv_capindex, "SAVE", NULL); | |
128 | CAP_EUID = capability_put(serv_capindex, "EUID", NULL); | |
129 | CAP_EOPMOD = capability_put(serv_capindex, "EOPMOD", NULL); | |
130 | CAP_BAN = capability_put(serv_capindex, "BAN", NULL); | |
131 | CAP_MLOCK = capability_put(serv_capindex, "MLOCK", NULL); | |
132 | CAP_EBMASK = capability_put(serv_capindex, "EBMASK", NULL); | |
133 | ||
134 | capability_require(serv_capindex, "QS"); | |
135 | capability_require(serv_capindex, "EX"); | |
136 | capability_require(serv_capindex, "IE"); | |
137 | capability_require(serv_capindex, "ENCAP"); | |
138 | ||
139 | cli_capindex = capability_index_create("client capabilities"); | |
140 | ||
141 | CLICAP_MULTI_PREFIX = capability_put(cli_capindex, "multi-prefix", &high_priority); | |
142 | CLICAP_ACCOUNT_NOTIFY = capability_put(cli_capindex, "account-notify", &high_priority); | |
143 | CLICAP_EXTENDED_JOIN = capability_put(cli_capindex, "extended-join", &high_priority); | |
144 | CLICAP_AWAY_NOTIFY = capability_put(cli_capindex, "away-notify", &high_priority); | |
145 | CLICAP_USERHOST_IN_NAMES = capability_put(cli_capindex, "userhost-in-names", &high_priority); | |
146 | CLICAP_CAP_NOTIFY = capability_put(cli_capindex, "cap-notify", NULL); | |
147 | CLICAP_CHGHOST = capability_put(cli_capindex, "chghost", &high_priority); | |
148 | CLICAP_ECHO_MESSAGE = capability_put(cli_capindex, "echo-message", NULL); | |
149 | } | |
150 | ||
151 | static CNCB serv_connect_callback; | |
152 | static CNCB serv_connect_ssl_callback; | |
153 | static SSL_OPEN_CB serv_connect_ssl_open_callback; | |
154 | ||
155 | /* | |
156 | * hunt_server - Do the basic thing in delivering the message (command) | |
157 | * across the relays to the specific server (server) for | |
158 | * actions. | |
159 | * | |
160 | * Note: The command is a format string and *MUST* be | |
161 | * of prefixed style (e.g. ":%s COMMAND %s ..."). | |
162 | * Command can have only max 8 parameters. | |
163 | * | |
164 | * server parv[server] is the parameter identifying the | |
165 | * target server. | |
166 | * | |
167 | * *WARNING* | |
168 | * parv[server] is replaced with the pointer to the | |
169 | * real servername from the matched client (I'm lazy | |
170 | * now --msa). | |
171 | * | |
172 | * returns: (see #defines) | |
173 | */ | |
174 | int | |
175 | hunt_server(struct Client *client_p, struct Client *source_p, | |
176 | const char *command, int server, int parc, const char *parv[]) | |
177 | { | |
178 | struct Client *target_p; | |
179 | int wilds; | |
180 | rb_dlink_node *ptr; | |
181 | const char *old; | |
182 | char *new; | |
183 | ||
184 | /* | |
185 | * Assume it's me, if no server | |
186 | */ | |
187 | if(parc <= server || EmptyString(parv[server]) || | |
188 | match(parv[server], me.name) || (strcmp(parv[server], me.id) == 0)) | |
189 | return (HUNTED_ISME); | |
190 | ||
191 | new = LOCAL_COPY(parv[server]); | |
192 | ||
193 | /* | |
194 | * These are to pickup matches that would cause the following | |
195 | * message to go in the wrong direction while doing quick fast | |
196 | * non-matching lookups. | |
197 | */ | |
198 | if(MyClient(source_p)) | |
199 | target_p = find_named_client(new); | |
200 | else | |
201 | target_p = find_client(new); | |
202 | ||
203 | if(target_p) | |
204 | if(target_p->from == source_p->from && !MyConnect(target_p)) | |
205 | target_p = NULL; | |
206 | ||
207 | collapse(new); | |
208 | wilds = (strchr(new, '?') || strchr(new, '*')); | |
209 | ||
210 | /* | |
211 | * Again, if there are no wild cards involved in the server | |
212 | * name, use the hash lookup | |
213 | */ | |
214 | if(!target_p && wilds) | |
215 | { | |
216 | RB_DLINK_FOREACH(ptr, global_serv_list.head) | |
217 | { | |
218 | if(match(new, ((struct Client *) (ptr->data))->name)) | |
219 | { | |
220 | target_p = ptr->data; | |
221 | break; | |
222 | } | |
223 | } | |
224 | } | |
225 | ||
226 | if(target_p && !IsRegistered(target_p)) | |
227 | target_p = NULL; | |
228 | ||
229 | if(target_p) | |
230 | { | |
231 | if(IsMe(target_p) || MyClient(target_p)) | |
232 | return HUNTED_ISME; | |
233 | ||
234 | old = parv[server]; | |
235 | parv[server] = get_id(target_p, target_p); | |
236 | ||
237 | sendto_one(target_p, command, get_id(source_p, target_p), | |
238 | parv[1], parv[2], parv[3], parv[4], parv[5], parv[6], parv[7], parv[8]); | |
239 | parv[server] = old; | |
240 | return (HUNTED_PASS); | |
241 | } | |
242 | ||
243 | if(MyClient(source_p) || !IsDigit(parv[server][0])) | |
244 | sendto_one_numeric(source_p, ERR_NOSUCHSERVER, | |
245 | form_str(ERR_NOSUCHSERVER), parv[server]); | |
246 | return (HUNTED_NOSUCH); | |
247 | } | |
248 | ||
249 | /* | |
250 | * try_connections - scan through configuration and try new connections. | |
251 | * Returns the calendar time when the next call to this | |
252 | * function should be made latest. (No harm done if this | |
253 | * is called earlier or later...) | |
254 | */ | |
255 | void | |
256 | try_connections(void *unused) | |
257 | { | |
258 | struct Client *client_p; | |
259 | struct server_conf *server_p = NULL; | |
260 | struct server_conf *tmp_p; | |
261 | struct Class *cltmp; | |
262 | rb_dlink_node *ptr; | |
263 | bool connecting = false; | |
264 | int confrq = 0; | |
265 | time_t next = 0; | |
266 | ||
267 | RB_DLINK_FOREACH(ptr, server_conf_list.head) | |
268 | { | |
269 | tmp_p = ptr->data; | |
270 | ||
271 | if(ServerConfIllegal(tmp_p) || !ServerConfAutoconn(tmp_p)) | |
272 | continue; | |
273 | ||
274 | /* don't allow ssl connections if ssl isn't setup */ | |
275 | if(ServerConfSSL(tmp_p) && (!ircd_ssl_ok || !get_ssld_count())) | |
276 | continue; | |
277 | ||
278 | cltmp = tmp_p->class; | |
279 | ||
280 | /* | |
281 | * Skip this entry if the use of it is still on hold until | |
282 | * future. Otherwise handle this entry (and set it on hold | |
283 | * until next time). Will reset only hold times, if already | |
284 | * made one successfull connection... [this algorithm is | |
285 | * a bit fuzzy... -- msa >;) ] | |
286 | */ | |
287 | if(tmp_p->hold > rb_current_time()) | |
288 | { | |
289 | if(next > tmp_p->hold || next == 0) | |
290 | next = tmp_p->hold; | |
291 | continue; | |
292 | } | |
293 | ||
294 | confrq = get_con_freq(cltmp); | |
295 | tmp_p->hold = rb_current_time() + confrq; | |
296 | ||
297 | /* | |
298 | * Found a CONNECT config with port specified, scan clients | |
299 | * and see if this server is already connected? | |
300 | */ | |
301 | client_p = find_server(NULL, tmp_p->name); | |
302 | ||
303 | if(!client_p && (CurrUsers(cltmp) < MaxAutoconn(cltmp)) && !connecting) | |
304 | { | |
305 | server_p = tmp_p; | |
306 | ||
307 | /* We connect only one at time... */ | |
308 | connecting = true; | |
309 | } | |
310 | ||
311 | if((next > tmp_p->hold) || (next == 0)) | |
312 | next = tmp_p->hold; | |
313 | } | |
314 | ||
315 | /* TODO: change this to set active flag to 0 when added to event! --Habeeb */ | |
316 | if(GlobalSetOptions.autoconn == 0) | |
317 | return; | |
318 | ||
319 | if(!connecting) | |
320 | return; | |
321 | ||
322 | /* move this connect entry to end.. */ | |
323 | rb_dlinkDelete(&server_p->node, &server_conf_list); | |
324 | rb_dlinkAddTail(server_p, &server_p->node, &server_conf_list); | |
325 | ||
326 | /* | |
327 | * We used to only print this if serv_connect() actually | |
328 | * suceeded, but since rb_tcp_connect() can call the callback | |
329 | * immediately if there is an error, we were getting error messages | |
330 | * in the wrong order. SO, we just print out the activated line, | |
331 | * and let serv_connect() / serv_connect_callback() print an | |
332 | * error afterwards if it fails. | |
333 | * -- adrian | |
334 | */ | |
335 | sendto_realops_snomask(SNO_GENERAL, L_NETWIDE, | |
336 | "Connection to %s activated", | |
337 | server_p->name); | |
338 | ||
339 | serv_connect(server_p, 0); | |
340 | } | |
341 | ||
342 | int | |
343 | check_server(const char *name, struct Client *client_p) | |
344 | { | |
345 | struct server_conf *server_p = NULL; | |
346 | struct server_conf *tmp_p; | |
347 | rb_dlink_node *ptr; | |
348 | int error = -1; | |
349 | const char *encr; | |
350 | bool name_matched = false; | |
351 | bool host_matched = false; | |
352 | bool certfp_failed = false; | |
353 | ||
354 | s_assert(NULL != client_p); | |
355 | if(client_p == NULL) | |
356 | return error; | |
357 | ||
358 | if(!(client_p->localClient->passwd)) | |
359 | return -2; | |
360 | ||
361 | if(strlen(name) > HOSTLEN) | |
362 | return -4; | |
363 | ||
364 | RB_DLINK_FOREACH(ptr, server_conf_list.head) | |
365 | { | |
366 | struct rb_sockaddr_storage client_addr; | |
367 | ||
368 | tmp_p = ptr->data; | |
369 | ||
370 | if(ServerConfIllegal(tmp_p)) | |
371 | continue; | |
372 | ||
373 | if(!match(tmp_p->name, name)) | |
374 | continue; | |
375 | ||
376 | name_matched = true; | |
377 | ||
378 | if(rb_inet_pton_sock(client_p->sockhost, &client_addr) <= 0) | |
379 | SET_SS_FAMILY(&client_addr, AF_UNSPEC); | |
380 | ||
381 | if((tmp_p->connect_host && match(tmp_p->connect_host, client_p->host)) | |
382 | || (GET_SS_FAMILY(&client_addr) == GET_SS_FAMILY(&tmp_p->connect4) | |
383 | && comp_with_mask_sock((struct sockaddr *)&client_addr, | |
384 | (struct sockaddr *)&tmp_p->connect4, 32)) | |
385 | || (GET_SS_FAMILY(&client_addr) == GET_SS_FAMILY(&tmp_p->connect6) | |
386 | && comp_with_mask_sock((struct sockaddr *)&client_addr, | |
387 | (struct sockaddr *)&tmp_p->connect6, 128)) | |
388 | ) | |
389 | { | |
390 | host_matched = true; | |
391 | ||
392 | if(tmp_p->passwd) | |
393 | { | |
394 | if(ServerConfEncrypted(tmp_p)) | |
395 | { | |
396 | encr = rb_crypt(client_p->localClient->passwd, | |
397 | tmp_p->passwd); | |
398 | if(encr != NULL && !strcmp(tmp_p->passwd, encr)) | |
399 | { | |
400 | server_p = tmp_p; | |
401 | break; | |
402 | } | |
403 | else | |
404 | continue; | |
405 | } | |
406 | else if(strcmp(tmp_p->passwd, client_p->localClient->passwd)) | |
407 | continue; | |
408 | } | |
409 | ||
410 | if(tmp_p->certfp) | |
411 | { | |
412 | if(!client_p->certfp || rb_strcasecmp(tmp_p->certfp, client_p->certfp) != 0) { | |
413 | certfp_failed = true; | |
414 | continue; | |
415 | } | |
416 | } | |
417 | ||
418 | server_p = tmp_p; | |
419 | break; | |
420 | } | |
421 | } | |
422 | ||
423 | if(server_p == NULL) | |
424 | { | |
425 | /* return the most specific error */ | |
426 | if(certfp_failed) | |
427 | error = -6; | |
428 | else if(host_matched) | |
429 | error = -2; | |
430 | else if(name_matched) | |
431 | error = -3; | |
432 | ||
433 | return error; | |
434 | } | |
435 | ||
436 | if(ServerConfSSL(server_p) && client_p->localClient->ssl_ctl == NULL) | |
437 | { | |
438 | return -5; | |
439 | } | |
440 | ||
441 | if (client_p->localClient->att_sconf && client_p->localClient->att_sconf->class == server_p->class) { | |
442 | /* this is an outgoing connection that is already attached to the correct class */ | |
443 | } else if (CurrUsers(server_p->class) >= MaxUsers(server_p->class)) { | |
444 | return -7; | |
445 | } | |
446 | attach_server_conf(client_p, server_p); | |
447 | ||
448 | /* clear TB if they support but we dont want it */ | |
449 | if(!ServerConfTb(server_p)) | |
450 | ClearCap(client_p, CAP_TB); | |
451 | ||
452 | return 0; | |
453 | } | |
454 | ||
455 | /* | |
456 | * send_capabilities | |
457 | * | |
458 | * inputs - Client pointer to send to | |
459 | * - int flag of capabilities that this server has | |
460 | * output - NONE | |
461 | * side effects - send the CAPAB line to a server -orabidoo | |
462 | */ | |
463 | void | |
464 | send_capabilities(struct Client *client_p, unsigned int cap_can_send) | |
465 | { | |
466 | sendto_one(client_p, "CAPAB :%s", capability_index_list(serv_capindex, cap_can_send)); | |
467 | } | |
468 | ||
469 | static void | |
470 | burst_ban(struct Client *client_p) | |
471 | { | |
472 | struct ConfItem *aconf; | |
473 | const char *type; | |
474 | rb_dictionary_iter state; | |
475 | ||
476 | RB_DICTIONARY_FOREACH(aconf, &state, prop_bans_dict) | |
477 | { | |
478 | /* Skip expired stuff. */ | |
479 | if(aconf->lifetime < rb_current_time()) | |
480 | continue; | |
481 | switch(aconf->status & ~CONF_ILLEGAL) | |
482 | { | |
483 | case CONF_KILL: type = "K"; break; | |
484 | case CONF_DLINE: type = "D"; break; | |
485 | case CONF_XLINE: type = "X"; break; | |
486 | case CONF_RESV_NICK: type = "R"; break; | |
487 | case CONF_RESV_CHANNEL: type = "R"; break; | |
488 | default: | |
489 | continue; | |
490 | } | |
491 | sendto_one(client_p, ":%s BAN %s %s %s %lu %d %d %s :%s%s%s", | |
492 | me.id, | |
493 | type, | |
494 | aconf->user ? aconf->user : "*", aconf->host, | |
495 | (unsigned long)aconf->created, | |
496 | (int)(aconf->hold - aconf->created), | |
497 | (int)(aconf->lifetime - aconf->created), | |
498 | aconf->info.oper, | |
499 | aconf->passwd, | |
500 | aconf->spasswd ? "|" : "", | |
501 | aconf->spasswd ? aconf->spasswd : ""); | |
502 | } | |
503 | } | |
504 | ||
505 | /* burst_modes_TS6() | |
506 | * | |
507 | * input - client to burst to, channel name, list to burst, mode flag | |
508 | * output - | |
509 | * side effects - client is sent a list of +b, +e, or +I modes | |
510 | */ | |
511 | static void | |
512 | burst_modes_TS6(struct Client *client_p, struct Channel *chptr, | |
513 | rb_dlink_list *list, char flag) | |
514 | { | |
515 | rb_dlink_node *ptr; | |
516 | struct Ban *banptr; | |
517 | ||
518 | send_multiline_init(client_p, " ", ":%s %s %ld %s %c :", | |
519 | me.id, | |
520 | IsCapable(client_p, CAP_EBMASK) ? "EBMASK" : "BMASK", | |
521 | (long)chptr->channelts, | |
522 | chptr->chname, | |
523 | flag); | |
524 | ||
525 | RB_DLINK_FOREACH_PREV(ptr, list->tail) | |
526 | { | |
527 | banptr = ptr->data; | |
528 | ||
529 | if (banptr->forward) | |
530 | sprintf(buf, "%s$%s", banptr->banstr, banptr->forward); | |
531 | else | |
532 | strcpy(buf, banptr->banstr); | |
533 | ||
534 | if IsCapable(client_p, CAP_EBMASK) | |
535 | send_multiline_item(client_p, "%s %ld %s", | |
536 | buf, | |
537 | (long)banptr->when, | |
538 | banptr->who); | |
539 | else | |
540 | send_multiline_item(client_p, "%s", buf); | |
541 | ||
542 | } | |
543 | ||
544 | send_multiline_fini(client_p, NULL); | |
545 | } | |
546 | ||
547 | /* | |
548 | * burst_TS6 | |
549 | * | |
550 | * inputs - client (server) to send nick towards | |
551 | * - client to send nick for | |
552 | * output - NONE | |
553 | * side effects - NICK message is sent towards given client_p | |
554 | */ | |
555 | static void | |
556 | burst_TS6(struct Client *client_p) | |
557 | { | |
558 | char ubuf[BUFSIZE]; | |
559 | struct Client *target_p; | |
560 | struct Channel *chptr; | |
561 | struct membership *msptr; | |
562 | hook_data_client hclientinfo; | |
563 | hook_data_channel hchaninfo; | |
564 | rb_dlink_node *ptr; | |
565 | rb_dlink_node *uptr; | |
566 | char *t; | |
567 | int tlen, mlen; | |
568 | int cur_len = 0; | |
569 | ||
570 | hclientinfo.client = hchaninfo.client = client_p; | |
571 | ||
572 | RB_DLINK_FOREACH(ptr, global_client_list.head) | |
573 | { | |
574 | target_p = ptr->data; | |
575 | ||
576 | if(!IsPerson(target_p)) | |
577 | continue; | |
578 | ||
579 | if(MyClient(target_p->from) && target_p->localClient->att_sconf != NULL && ServerConfNoExport(target_p->localClient->att_sconf)) | |
580 | continue; | |
581 | ||
582 | send_umode(NULL, target_p, 0, ubuf); | |
583 | if(!*ubuf) | |
584 | { | |
585 | ubuf[0] = '+'; | |
586 | ubuf[1] = '\0'; | |
587 | } | |
588 | ||
589 | if(IsCapable(client_p, CAP_EUID)) | |
590 | sendto_one(client_p, ":%s EUID %s %d %ld %s %s %s %s %s %s %s :%s", | |
591 | target_p->servptr->id, target_p->name, | |
592 | target_p->hopcount + 1, | |
593 | (long) target_p->tsinfo, ubuf, | |
594 | target_p->username, target_p->host, | |
595 | IsIPSpoof(target_p) ? "0" : target_p->sockhost, | |
596 | target_p->id, | |
597 | IsDynSpoof(target_p) ? target_p->orighost : "*", | |
598 | EmptyString(target_p->user->suser) ? "*" : target_p->user->suser, | |
599 | target_p->info); | |
600 | else | |
601 | sendto_one(client_p, ":%s UID %s %d %ld %s %s %s %s %s :%s", | |
602 | target_p->servptr->id, target_p->name, | |
603 | target_p->hopcount + 1, | |
604 | (long) target_p->tsinfo, ubuf, | |
605 | target_p->username, target_p->host, | |
606 | IsIPSpoof(target_p) ? "0" : target_p->sockhost, | |
607 | target_p->id, target_p->info); | |
608 | ||
609 | if(!EmptyString(target_p->certfp)) | |
610 | sendto_one(client_p, ":%s ENCAP * CERTFP :%s", | |
611 | use_id(target_p), target_p->certfp); | |
612 | ||
613 | if(!IsCapable(client_p, CAP_EUID)) | |
614 | { | |
615 | if(IsDynSpoof(target_p)) | |
616 | sendto_one(client_p, ":%s ENCAP * REALHOST %s", | |
617 | use_id(target_p), target_p->orighost); | |
618 | if(!EmptyString(target_p->user->suser)) | |
619 | sendto_one(client_p, ":%s ENCAP * LOGIN %s", | |
620 | use_id(target_p), target_p->user->suser); | |
621 | } | |
622 | ||
623 | if(ConfigFileEntry.burst_away && !EmptyString(target_p->user->away)) | |
624 | sendto_one(client_p, ":%s AWAY :%s", | |
625 | use_id(target_p), | |
626 | target_p->user->away); | |
627 | ||
628 | if (IsOper(target_p) && target_p->user && target_p->user->opername) | |
629 | { | |
630 | if (target_p->user->privset) | |
631 | sendto_one(client_p, ":%s OPER %s %s", | |
632 | use_id(target_p), | |
633 | target_p->user->opername, | |
634 | target_p->user->privset->name); | |
635 | else | |
636 | sendto_one(client_p, ":%s OPER %s", | |
637 | use_id(target_p), | |
638 | target_p->user->opername); | |
639 | } | |
640 | ||
641 | hclientinfo.target = target_p; | |
642 | call_hook(h_burst_client, &hclientinfo); | |
643 | } | |
644 | ||
645 | RB_DLINK_FOREACH(ptr, global_channel_list.head) | |
646 | { | |
647 | chptr = ptr->data; | |
648 | ||
649 | if(*chptr->chname != '#') | |
650 | continue; | |
651 | ||
652 | cur_len = mlen = sprintf(buf, ":%s SJOIN %ld %s %s :", me.id, | |
653 | (long) chptr->channelts, chptr->chname, | |
654 | channel_modes(chptr, client_p)); | |
655 | ||
656 | t = buf + mlen; | |
657 | ||
658 | RB_DLINK_FOREACH(uptr, chptr->members.head) | |
659 | { | |
660 | msptr = uptr->data; | |
661 | ||
662 | tlen = strlen(use_id(msptr->client_p)) + 1; | |
663 | if(is_chanop(msptr)) | |
664 | tlen++; | |
665 | if(is_voiced(msptr)) | |
666 | tlen++; | |
667 | ||
668 | if(cur_len + tlen >= BUFSIZE - 3) | |
669 | { | |
670 | *(t-1) = '\0'; | |
671 | sendto_one(client_p, "%s", buf); | |
672 | cur_len = mlen; | |
673 | t = buf + mlen; | |
674 | } | |
675 | ||
676 | sprintf(t, "%s%s ", find_channel_status(msptr, 1), | |
677 | use_id(msptr->client_p)); | |
678 | ||
679 | cur_len += tlen; | |
680 | t += tlen; | |
681 | } | |
682 | ||
683 | if (rb_dlink_list_length(&chptr->members) > 0) | |
684 | { | |
685 | /* remove trailing space */ | |
686 | *(t-1) = '\0'; | |
687 | } | |
688 | sendto_one(client_p, "%s", buf); | |
689 | ||
690 | if(rb_dlink_list_length(&chptr->banlist) > 0) | |
691 | burst_modes_TS6(client_p, chptr, &chptr->banlist, 'b'); | |
692 | ||
693 | if(IsCapable(client_p, CAP_EX) && | |
694 | rb_dlink_list_length(&chptr->exceptlist) > 0) | |
695 | burst_modes_TS6(client_p, chptr, &chptr->exceptlist, 'e'); | |
696 | ||
697 | if(IsCapable(client_p, CAP_IE) && | |
698 | rb_dlink_list_length(&chptr->invexlist) > 0) | |
699 | burst_modes_TS6(client_p, chptr, &chptr->invexlist, 'I'); | |
700 | ||
701 | if(rb_dlink_list_length(&chptr->quietlist) > 0) | |
702 | burst_modes_TS6(client_p, chptr, &chptr->quietlist, 'q'); | |
703 | ||
704 | if(IsCapable(client_p, CAP_TB) && chptr->topic != NULL) | |
705 | sendto_one(client_p, ":%s TB %s %ld %s%s:%s", | |
706 | me.id, chptr->chname, (long) chptr->topic_time, | |
707 | ConfigChannel.burst_topicwho ? chptr->topic_info : "", | |
708 | ConfigChannel.burst_topicwho ? " " : "", | |
709 | chptr->topic); | |
710 | ||
711 | if(IsCapable(client_p, CAP_MLOCK)) | |
712 | sendto_one(client_p, ":%s MLOCK %ld %s :%s", | |
713 | me.id, (long) chptr->channelts, chptr->chname, | |
714 | EmptyString(chptr->mode_lock) ? "" : chptr->mode_lock); | |
715 | ||
716 | hchaninfo.chptr = chptr; | |
717 | call_hook(h_burst_channel, &hchaninfo); | |
718 | } | |
719 | ||
720 | hclientinfo.target = NULL; | |
721 | call_hook(h_burst_finished, &hclientinfo); | |
722 | } | |
723 | ||
724 | /* | |
725 | * show_capabilities - show current server capabilities | |
726 | * | |
727 | * inputs - pointer to an struct Client | |
728 | * output - pointer to static string | |
729 | * side effects - build up string representing capabilities of server listed | |
730 | */ | |
731 | const char * | |
732 | show_capabilities(struct Client *target_p) | |
733 | { | |
734 | static char msgbuf[BUFSIZE]; | |
735 | ||
736 | *msgbuf = '\0'; | |
737 | ||
738 | if(has_id(target_p)) | |
739 | rb_strlcpy(msgbuf, " TS6", sizeof(msgbuf)); | |
740 | ||
741 | if(IsSSL(target_p)) | |
742 | rb_strlcat(msgbuf, " SSL", sizeof(msgbuf)); | |
743 | ||
744 | if(!IsServer(target_p) || !target_p->serv->caps) /* short circuit if no caps */ | |
745 | return msgbuf + 1; | |
746 | ||
747 | rb_strlcat(msgbuf, " ", sizeof(msgbuf)); | |
748 | rb_strlcat(msgbuf, capability_index_list(serv_capindex, target_p->serv->caps), sizeof(msgbuf)); | |
749 | ||
750 | return msgbuf + 1; | |
751 | } | |
752 | ||
753 | /* | |
754 | * server_estab | |
755 | * | |
756 | * inputs - pointer to a struct Client | |
757 | * output - | |
758 | * side effects - | |
759 | */ | |
760 | int | |
761 | server_estab(struct Client *client_p) | |
762 | { | |
763 | struct Client *target_p; | |
764 | struct server_conf *server_p; | |
765 | hook_data_client hdata; | |
766 | char *host; | |
767 | rb_dlink_node *ptr; | |
768 | char note[HOSTLEN + 15]; | |
769 | ||
770 | s_assert(NULL != client_p); | |
771 | if(client_p == NULL) | |
772 | return -1; | |
773 | ||
774 | host = client_p->name; | |
775 | ||
776 | if((server_p = client_p->localClient->att_sconf) == NULL) | |
777 | { | |
778 | /* This shouldn't happen, better tell the ops... -A1kmm */ | |
779 | sendto_realops_snomask(SNO_GENERAL, L_NETWIDE, | |
780 | "Warning: Lost connect{} block for server %s!", host); | |
781 | return exit_client(client_p, client_p, client_p, "Lost connect{} block!"); | |
782 | } | |
783 | ||
784 | /* We shouldn't have to check this, it should already done before | |
785 | * server_estab is called. -A1kmm | |
786 | */ | |
787 | if(client_p->localClient->passwd) | |
788 | { | |
789 | memset(client_p->localClient->passwd, 0, strlen(client_p->localClient->passwd)); | |
790 | rb_free(client_p->localClient->passwd); | |
791 | client_p->localClient->passwd = NULL; | |
792 | } | |
793 | ||
794 | /* Its got identd , since its a server */ | |
795 | SetGotId(client_p); | |
796 | ||
797 | if(IsUnknown(client_p)) | |
798 | { | |
799 | /* the server may be linking based on certificate fingerprint now. --nenolod */ | |
800 | sendto_one(client_p, "PASS %s TS %d :%s", | |
801 | EmptyString(server_p->spasswd) ? "*" : server_p->spasswd, TS_CURRENT, me.id); | |
802 | ||
803 | /* pass info to new server */ | |
804 | send_capabilities(client_p, default_server_capabs | CAP_MASK | |
805 | | (ServerConfTb(server_p) ? CAP_TB : 0)); | |
806 | ||
807 | sendto_one(client_p, "SERVER %s 1 :%s%s", | |
808 | me.name, | |
809 | ConfigServerHide.hidden ? "(H) " : "", | |
810 | (me.info[0]) ? (me.info) : "IRCers United"); | |
811 | } | |
812 | ||
813 | if(!rb_set_buffers(client_p->localClient->F, READBUF_SIZE)) | |
814 | ilog_error("rb_set_buffers failed for server"); | |
815 | ||
816 | client_p->servptr = &me; | |
817 | ||
818 | if(IsAnyDead(client_p)) | |
819 | return CLIENT_EXITED; | |
820 | ||
821 | sendto_one(client_p, "SVINFO %d %d 0 :%ld", TS_CURRENT, TS_MIN, (long int)rb_current_time()); | |
822 | ||
823 | rb_dlinkAdd(client_p, &client_p->lnode, &me.serv->servers); | |
824 | rb_dlinkMoveNode(&client_p->localClient->tnode, &unknown_list, &serv_list); | |
825 | rb_dlinkAddTailAlloc(client_p, &global_serv_list); | |
826 | ||
827 | if(has_id(client_p)) | |
828 | add_to_id_hash(client_p->id, client_p); | |
829 | ||
830 | add_to_client_hash(client_p->name, client_p); | |
831 | /* doesnt duplicate client_p->serv if allocated this struct already */ | |
832 | make_server(client_p); | |
833 | SetServer(client_p); | |
834 | ||
835 | client_p->serv->caps = client_p->localClient->caps; | |
836 | ||
837 | if(client_p->localClient->fullcaps) | |
838 | { | |
839 | client_p->serv->fullcaps = rb_strdup(client_p->localClient->fullcaps); | |
840 | rb_free(client_p->localClient->fullcaps); | |
841 | client_p->localClient->fullcaps = NULL; | |
842 | } | |
843 | ||
844 | client_p->serv->nameinfo = scache_connect(client_p->name, client_p->info, IsHidden(client_p)); | |
845 | client_p->localClient->firsttime = rb_current_time(); | |
846 | /* fixing eob timings.. -gnp */ | |
847 | ||
848 | if((rb_dlink_list_length(&lclient_list) + rb_dlink_list_length(&serv_list)) > | |
849 | (unsigned long)MaxConnectionCount) | |
850 | MaxConnectionCount = rb_dlink_list_length(&lclient_list) + | |
851 | rb_dlink_list_length(&serv_list); | |
852 | ||
853 | /* Show the real host/IP to admins */ | |
854 | sendto_realops_snomask(SNO_GENERAL, L_ALL, | |
855 | "Link with %s established: (%s) link", | |
856 | client_p->name, | |
857 | show_capabilities(client_p)); | |
858 | ||
859 | ilog(L_SERVER, "Link with %s established: (%s) link", | |
860 | log_client_name(client_p, SHOW_IP), show_capabilities(client_p)); | |
861 | ||
862 | hdata.client = &me; | |
863 | hdata.target = client_p; | |
864 | call_hook(h_server_introduced, &hdata); | |
865 | ||
866 | snprintf(note, sizeof(note), "Server: %s", client_p->name); | |
867 | rb_note(client_p->localClient->F, note); | |
868 | ||
869 | /* | |
870 | ** Old sendto_serv_but_one() call removed because we now | |
871 | ** need to send different names to different servers | |
872 | ** (domain name matching) Send new server to other servers. | |
873 | */ | |
874 | RB_DLINK_FOREACH(ptr, serv_list.head) | |
875 | { | |
876 | target_p = ptr->data; | |
877 | ||
878 | if(target_p == client_p) | |
879 | continue; | |
880 | ||
881 | if(target_p->localClient->att_sconf != NULL && ServerConfNoExport(target_p->localClient->att_sconf)) | |
882 | continue; | |
883 | ||
884 | if(has_id(target_p) && has_id(client_p)) | |
885 | { | |
886 | sendto_one(target_p, ":%s SID %s 2 %s :%s%s", | |
887 | me.id, client_p->name, client_p->id, | |
888 | IsHidden(client_p) ? "(H) " : "", client_p->info); | |
889 | ||
890 | if(!EmptyString(client_p->serv->fullcaps)) | |
891 | sendto_one(target_p, ":%s ENCAP * GCAP :%s", | |
892 | client_p->id, client_p->serv->fullcaps); | |
893 | } | |
894 | else | |
895 | { | |
896 | sendto_one(target_p, ":%s SERVER %s 2 :%s%s", | |
897 | me.name, client_p->name, | |
898 | IsHidden(client_p) ? "(H) " : "", client_p->info); | |
899 | ||
900 | if(!EmptyString(client_p->serv->fullcaps)) | |
901 | sendto_one(target_p, ":%s ENCAP * GCAP :%s", | |
902 | client_p->name, client_p->serv->fullcaps); | |
903 | } | |
904 | } | |
905 | ||
906 | /* | |
907 | ** Pass on my client information to the new server | |
908 | ** | |
909 | ** First, pass only servers (idea is that if the link gets | |
910 | ** cancelled beacause the server was already there, | |
911 | ** there are no NICK's to be cancelled...). Of course, | |
912 | ** if cancellation occurs, all this info is sent anyway, | |
913 | ** and I guess the link dies when a read is attempted...? --msa | |
914 | ** | |
915 | ** Note: Link cancellation to occur at this point means | |
916 | ** that at least two servers from my fragment are building | |
917 | ** up connection this other fragment at the same time, it's | |
918 | ** a race condition, not the normal way of operation... | |
919 | ** | |
920 | ** ALSO NOTE: using the get_client_name for server names-- | |
921 | ** see previous *WARNING*!!! (Also, original inpath | |
922 | ** is destroyed...) | |
923 | */ | |
924 | RB_DLINK_FOREACH(ptr, global_serv_list.head) | |
925 | { | |
926 | target_p = ptr->data; | |
927 | ||
928 | /* target_p->from == target_p for target_p == client_p */ | |
929 | if(IsMe(target_p) || target_p->from == client_p) | |
930 | continue; | |
931 | ||
932 | /* don't distribute downstream leaves of servers that are no-export */ | |
933 | if(MyClient(target_p->from) && target_p->from->localClient->att_sconf != NULL && ServerConfNoExport(target_p->from->localClient->att_sconf)) | |
934 | continue; | |
935 | ||
936 | /* presumption, if target has an id, so does its uplink */ | |
937 | if(has_id(client_p) && has_id(target_p)) | |
938 | sendto_one(client_p, ":%s SID %s %d %s :%s%s", | |
939 | target_p->servptr->id, target_p->name, | |
940 | target_p->hopcount + 1, target_p->id, | |
941 | IsHidden(target_p) ? "(H) " : "", target_p->info); | |
942 | else | |
943 | sendto_one(client_p, ":%s SERVER %s %d :%s%s", | |
944 | target_p->servptr->name, | |
945 | target_p->name, target_p->hopcount + 1, | |
946 | IsHidden(target_p) ? "(H) " : "", target_p->info); | |
947 | ||
948 | if(!EmptyString(target_p->serv->fullcaps)) | |
949 | sendto_one(client_p, ":%s ENCAP * GCAP :%s", | |
950 | get_id(target_p, client_p), | |
951 | target_p->serv->fullcaps); | |
952 | } | |
953 | ||
954 | if(IsCapable(client_p, CAP_BAN)) | |
955 | burst_ban(client_p); | |
956 | ||
957 | burst_TS6(client_p); | |
958 | ||
959 | /* Always send a PING after connect burst is done */ | |
960 | sendto_one(client_p, "PING :%s", get_id(&me, client_p)); | |
961 | ||
962 | free_pre_client(client_p); | |
963 | ||
964 | send_pop_queue(client_p); | |
965 | ||
966 | return 0; | |
967 | } | |
968 | ||
969 | /* | |
970 | * New server connection code | |
971 | * Based upon the stuff floating about in s_bsd.c | |
972 | * -- adrian | |
973 | */ | |
974 | ||
975 | /* | |
976 | * serv_connect() - initiate a server connection | |
977 | * | |
978 | * inputs - pointer to conf | |
979 | * - pointer to client doing the connet | |
980 | * output - | |
981 | * side effects - | |
982 | * | |
983 | * This code initiates a connection to a server. It first checks to make | |
984 | * sure the given server exists. If this is the case, it creates a socket, | |
985 | * creates a client, saves the socket information in the client, and | |
986 | * initiates a connection to the server through rb_connect_tcp(). The | |
987 | * completion of this goes through serv_completed_connection(). | |
988 | * | |
989 | * We return 1 if the connection is attempted, since we don't know whether | |
990 | * it suceeded or not, and 0 if it fails in here somewhere. | |
991 | */ | |
992 | int | |
993 | serv_connect(struct server_conf *server_p, struct Client *by) | |
994 | { | |
995 | struct Client *client_p; | |
996 | struct sockaddr_storage sa_connect[2]; | |
997 | struct sockaddr_storage sa_bind[ARRAY_SIZE(sa_connect)]; | |
998 | char note[HOSTLEN + 10]; | |
999 | rb_fde_t *F; | |
1000 | ||
1001 | s_assert(server_p != NULL); | |
1002 | if(server_p == NULL) | |
1003 | return 0; | |
1004 | ||
1005 | for (int i = 0; i < ARRAY_SIZE(sa_connect); i++) { | |
1006 | SET_SS_FAMILY(&sa_connect[i], AF_UNSPEC); | |
1007 | SET_SS_FAMILY(&sa_bind[i], AF_UNSPEC); | |
1008 | } | |
1009 | ||
1010 | if(server_p->aftype == AF_UNSPEC | |
1011 | && GET_SS_FAMILY(&server_p->connect4) == AF_INET | |
1012 | && GET_SS_FAMILY(&server_p->connect6) == AF_INET6) | |
1013 | { | |
1014 | if(rand() % 2 == 0) | |
1015 | { | |
1016 | sa_connect[0] = server_p->connect4; | |
1017 | sa_connect[1] = server_p->connect6; | |
1018 | sa_bind[0] = server_p->bind4; | |
1019 | sa_bind[1] = server_p->bind6; | |
1020 | } | |
1021 | else | |
1022 | { | |
1023 | sa_connect[0] = server_p->connect6; | |
1024 | sa_connect[1] = server_p->connect4; | |
1025 | sa_bind[0] = server_p->bind6; | |
1026 | sa_bind[1] = server_p->bind4; | |
1027 | } | |
1028 | } | |
1029 | else if(server_p->aftype == AF_INET || GET_SS_FAMILY(&server_p->connect4) == AF_INET) | |
1030 | { | |
1031 | sa_connect[0] = server_p->connect4; | |
1032 | sa_connect[1] = server_p->connect6; | |
1033 | sa_bind[0] = server_p->bind4; | |
1034 | sa_bind[1] = server_p->bind6; | |
1035 | } | |
1036 | else if(server_p->aftype == AF_INET6 || GET_SS_FAMILY(&server_p->connect6) == AF_INET6) | |
1037 | { | |
1038 | sa_connect[0] = server_p->connect6; | |
1039 | sa_connect[1] = server_p->connect4; | |
1040 | sa_bind[0] = server_p->bind6; | |
1041 | sa_bind[1] = server_p->bind4; | |
1042 | } | |
1043 | ||
1044 | /* log */ | |
1045 | #ifdef HAVE_LIBSCTP | |
1046 | if (ServerConfSCTP(server_p) && GET_SS_FAMILY(&sa_connect[1]) != AF_UNSPEC) { | |
1047 | char buf2[HOSTLEN + 1]; | |
1048 | ||
1049 | buf[0] = 0; | |
1050 | buf2[0] = 0; | |
1051 | rb_inet_ntop_sock((struct sockaddr *)&sa_connect[0], buf, sizeof(buf)); | |
1052 | rb_inet_ntop_sock((struct sockaddr *)&sa_connect[1], buf2, sizeof(buf2)); | |
1053 | ilog(L_SERVER, "Connect to *[%s] @%s&%s", server_p->name, buf, buf2); | |
1054 | } else { | |
1055 | #else | |
1056 | { | |
1057 | #endif | |
1058 | buf[0] = 0; | |
1059 | rb_inet_ntop_sock((struct sockaddr *)&sa_connect[0], buf, sizeof(buf)); | |
1060 | ilog(L_SERVER, "Connect to *[%s] @%s", server_p->name, buf); | |
1061 | } | |
1062 | ||
1063 | /* | |
1064 | * Make sure this server isn't already connected | |
1065 | */ | |
1066 | if((client_p = find_server(NULL, server_p->name))) | |
1067 | { | |
1068 | sendto_realops_snomask(SNO_GENERAL, L_NETWIDE, | |
1069 | "Server %s already present from %s", | |
1070 | server_p->name, client_p->name); | |
1071 | if(by && IsPerson(by) && !MyClient(by)) | |
1072 | sendto_one_notice(by, ":Server %s already present from %s", | |
1073 | server_p->name, client_p->name); | |
1074 | return 0; | |
1075 | } | |
1076 | ||
1077 | if (CurrUsers(server_p->class) >= MaxUsers(server_p->class)) { | |
1078 | sendto_realops_snomask(SNO_GENERAL, L_NETWIDE, | |
1079 | "No more connections allowed in class \"%s\" for server %s", | |
1080 | server_p->class->class_name, server_p->name); | |
1081 | if(by && IsPerson(by) && !MyClient(by)) | |
1082 | sendto_one_notice(by, ":No more connections allowed in class \"%s\" for server %s", | |
1083 | server_p->class->class_name, server_p->name); | |
1084 | return 0; | |
1085 | } | |
1086 | ||
1087 | /* create a socket for the server connection */ | |
1088 | if(GET_SS_FAMILY(&sa_connect[0]) == AF_UNSPEC) { | |
1089 | ilog_error("unspecified socket address family"); | |
1090 | return 0; | |
1091 | #ifdef HAVE_LIBSCTP | |
1092 | } else if (ServerConfSCTP(server_p)) { | |
1093 | if ((F = rb_socket(AF_INET6, SOCK_STREAM, IPPROTO_SCTP, NULL)) == NULL) { | |
1094 | ilog_error("opening a stream socket"); | |
1095 | return 0; | |
1096 | } | |
1097 | #endif | |
1098 | } else if ((F = rb_socket(GET_SS_FAMILY(&sa_connect[0]), SOCK_STREAM, IPPROTO_TCP, NULL)) == NULL) { | |
1099 | ilog_error("opening a stream socket"); | |
1100 | return 0; | |
1101 | } | |
1102 | ||
1103 | /* servernames are always guaranteed under HOSTLEN chars */ | |
1104 | snprintf(note, sizeof(note), "Server: %s", server_p->name); | |
1105 | rb_note(F, note); | |
1106 | ||
1107 | /* Create a local client */ | |
1108 | client_p = make_client(NULL); | |
1109 | ||
1110 | /* Copy in the server, hostname, fd */ | |
1111 | rb_strlcpy(client_p->name, server_p->name, sizeof(client_p->name)); | |
1112 | if(server_p->connect_host) | |
1113 | rb_strlcpy(client_p->host, server_p->connect_host, sizeof(client_p->host)); | |
1114 | else | |
1115 | rb_strlcpy(client_p->host, buf, sizeof(client_p->host)); | |
1116 | rb_strlcpy(client_p->sockhost, buf, sizeof(client_p->sockhost)); | |
1117 | client_p->localClient->F = F; | |
1118 | /* shove the port number into the sockaddr */ | |
1119 | SET_SS_PORT(&sa_connect[0], htons(server_p->port)); | |
1120 | SET_SS_PORT(&sa_connect[1], htons(server_p->port)); | |
1121 | ||
1122 | /* | |
1123 | * Set up the initial server evilness, ripped straight from | |
1124 | * connect_server(), so don't blame me for it being evil. | |
1125 | * -- adrian | |
1126 | */ | |
1127 | ||
1128 | if(!rb_set_buffers(client_p->localClient->F, READBUF_SIZE)) | |
1129 | { | |
1130 | ilog_error("setting the buffer size for a server connection"); | |
1131 | } | |
1132 | ||
1133 | /* | |
1134 | * Attach config entries to client here rather than in | |
1135 | * serv_connect_callback(). This to avoid null pointer references. | |
1136 | */ | |
1137 | attach_server_conf(client_p, server_p); | |
1138 | ||
1139 | /* | |
1140 | * at this point we have a connection in progress and C/N lines | |
1141 | * attached to the client, the socket info should be saved in the | |
1142 | * client and it should either be resolved or have a valid address. | |
1143 | * | |
1144 | * The socket has been connected or connect is in progress. | |
1145 | */ | |
1146 | make_server(client_p); | |
1147 | if(by && IsClient(by)) | |
1148 | rb_strlcpy(client_p->serv->by, by->name, sizeof(client_p->serv->by)); | |
1149 | else | |
1150 | strcpy(client_p->serv->by, "AutoConn."); | |
1151 | ||
1152 | SetConnecting(client_p); | |
1153 | rb_dlinkAddTail(client_p, &client_p->node, &global_client_list); | |
1154 | ||
1155 | for (int i = 0; i < ARRAY_SIZE(sa_connect); i++) { | |
1156 | if (GET_SS_FAMILY(&sa_bind[i]) == AF_UNSPEC) { | |
1157 | if (GET_SS_FAMILY(&sa_connect[i]) == GET_SS_FAMILY(&ServerInfo.bind4)) | |
1158 | sa_bind[i] = ServerInfo.bind4; | |
1159 | if (GET_SS_FAMILY(&sa_connect[i]) == GET_SS_FAMILY(&ServerInfo.bind6)) | |
1160 | sa_bind[i] = ServerInfo.bind6; | |
1161 | } | |
1162 | } | |
1163 | ||
1164 | #ifdef HAVE_LIBSCTP | |
1165 | if (ServerConfSCTP(server_p)) { | |
1166 | rb_connect_sctp(client_p->localClient->F, | |
1167 | sa_connect, ARRAY_SIZE(sa_connect), sa_bind, ARRAY_SIZE(sa_bind), | |
1168 | ServerConfSSL(server_p) ? serv_connect_ssl_callback : serv_connect_callback, | |
1169 | client_p, ConfigFileEntry.connect_timeout); | |
1170 | } else { | |
1171 | #else | |
1172 | { | |
1173 | #endif | |
1174 | rb_connect_tcp(client_p->localClient->F, | |
1175 | (struct sockaddr *)&sa_connect[0], | |
1176 | GET_SS_FAMILY(&sa_bind[0]) == AF_UNSPEC ? NULL : (struct sockaddr *)&sa_bind[0], | |
1177 | ServerConfSSL(server_p) ? serv_connect_ssl_callback : serv_connect_callback, | |
1178 | client_p, ConfigFileEntry.connect_timeout); | |
1179 | } | |
1180 | return 1; | |
1181 | } | |
1182 | ||
1183 | static void | |
1184 | serv_connect_ssl_callback(rb_fde_t *F, int status, void *data) | |
1185 | { | |
1186 | struct Client *client_p = data; | |
1187 | rb_fde_t *xF[2]; | |
1188 | rb_connect_sockaddr(F, (struct sockaddr *)&client_p->localClient->ip, sizeof(client_p->localClient->ip)); | |
1189 | if(status != RB_OK) | |
1190 | { | |
1191 | /* Print error message, just like non-SSL. */ | |
1192 | serv_connect_callback(F, status, data); | |
1193 | return; | |
1194 | } | |
1195 | if(rb_socketpair(AF_UNIX, SOCK_STREAM, 0, &xF[0], &xF[1], "Outgoing ssld connection") == -1) | |
1196 | { | |
1197 | ilog_error("rb_socketpair failed for server"); | |
1198 | serv_connect_callback(F, RB_ERROR, data); | |
1199 | return; | |
1200 | ||
1201 | } | |
1202 | client_p->localClient->F = xF[0]; | |
1203 | client_p->localClient->ssl_callback = serv_connect_ssl_open_callback; | |
1204 | ||
1205 | client_p->localClient->ssl_ctl = start_ssld_connect(F, xF[1], connid_get(client_p)); | |
1206 | if(!client_p->localClient->ssl_ctl) | |
1207 | { | |
1208 | serv_connect_callback(client_p->localClient->F, RB_ERROR, data); | |
1209 | return; | |
1210 | } | |
1211 | SetSSL(client_p); | |
1212 | } | |
1213 | ||
1214 | static int | |
1215 | serv_connect_ssl_open_callback(struct Client *client_p, int status) | |
1216 | { | |
1217 | serv_connect_callback(client_p->localClient->F, status, client_p); | |
1218 | return 1; /* suppress default exit_client handler for status != RB_OK */ | |
1219 | } | |
1220 | ||
1221 | /* | |
1222 | * serv_connect_callback() - complete a server connection. | |
1223 | * | |
1224 | * This routine is called after the server connection attempt has | |
1225 | * completed. If unsucessful, an error is sent to ops and the client | |
1226 | * is closed. If sucessful, it goes through the initialisation/check | |
1227 | * procedures, the capabilities are sent, and the socket is then | |
1228 | * marked for reading. | |
1229 | */ | |
1230 | static void | |
1231 | serv_connect_callback(rb_fde_t *F, int status, void *data) | |
1232 | { | |
1233 | struct Client *client_p = data; | |
1234 | struct server_conf *server_p; | |
1235 | char *errstr; | |
1236 | ||
1237 | /* First, make sure its a real client! */ | |
1238 | s_assert(client_p != NULL); | |
1239 | s_assert(client_p->localClient->F == F); | |
1240 | ||
1241 | if(client_p == NULL) | |
1242 | return; | |
1243 | ||
1244 | /* while we were waiting for the callback, its possible this already | |
1245 | * linked in.. --fl | |
1246 | */ | |
1247 | if(find_server(NULL, client_p->name) != NULL) | |
1248 | { | |
1249 | exit_client(client_p, client_p, &me, "Server Exists"); | |
1250 | return; | |
1251 | } | |
1252 | ||
1253 | if(client_p->localClient->ssl_ctl == NULL) | |
1254 | rb_connect_sockaddr(F, (struct sockaddr *)&client_p->localClient->ip, sizeof(client_p->localClient->ip)); | |
1255 | ||
1256 | /* Check the status */ | |
1257 | if(status != RB_OK) | |
1258 | { | |
1259 | /* COMM_ERR_TIMEOUT wont have an errno associated with it, | |
1260 | * the others will.. --fl | |
1261 | */ | |
1262 | if(status == RB_ERR_TIMEOUT || status == RB_ERROR_SSL) | |
1263 | { | |
1264 | sendto_realops_snomask(SNO_GENERAL, L_NETWIDE, | |
1265 | "Error connecting to %s[%s]: %s", | |
1266 | client_p->name, | |
1267 | "255.255.255.255", | |
1268 | rb_errstr(status)); | |
1269 | ilog(L_SERVER, "Error connecting to %s[%s]: %s", | |
1270 | client_p->name, client_p->sockhost, | |
1271 | rb_errstr(status)); | |
1272 | } | |
1273 | else | |
1274 | { | |
1275 | errstr = strerror(rb_get_sockerr(F)); | |
1276 | sendto_realops_snomask(SNO_GENERAL, L_NETWIDE, | |
1277 | "Error connecting to %s[%s]: %s (%s)", | |
1278 | client_p->name, | |
1279 | "255.255.255.255", | |
1280 | rb_errstr(status), errstr); | |
1281 | ilog(L_SERVER, "Error connecting to %s[%s]: %s (%s)", | |
1282 | client_p->name, client_p->sockhost, | |
1283 | rb_errstr(status), errstr); | |
1284 | } | |
1285 | ||
1286 | exit_client(client_p, client_p, &me, rb_errstr(status)); | |
1287 | return; | |
1288 | } | |
1289 | ||
1290 | /* COMM_OK, so continue the connection procedure */ | |
1291 | /* Get the C/N lines */ | |
1292 | if((server_p = client_p->localClient->att_sconf) == NULL) | |
1293 | { | |
1294 | sendto_realops_snomask(SNO_GENERAL, L_NETWIDE, "Lost connect{} block for %s", | |
1295 | client_p->name); | |
1296 | exit_client(client_p, client_p, &me, "Lost connect{} block"); | |
1297 | return; | |
1298 | } | |
1299 | ||
1300 | if(server_p->certfp && (!client_p->certfp || rb_strcasecmp(server_p->certfp, client_p->certfp) != 0)) | |
1301 | { | |
1302 | sendto_realops_snomask(SNO_GENERAL, L_NETWIDE, | |
1303 | "Connection to %s has invalid certificate fingerprint %s", | |
1304 | client_p->name, client_p->certfp); | |
1305 | ilog(L_SERVER, "Access denied, invalid certificate fingerprint %s from %s", | |
1306 | client_p->certfp, log_client_name(client_p, SHOW_IP)); | |
1307 | ||
1308 | exit_client(client_p, client_p, &me, "Invalid fingerprint."); | |
1309 | return; | |
1310 | } | |
1311 | ||
1312 | /* Next, send the initial handshake */ | |
1313 | SetHandshake(client_p); | |
1314 | ||
1315 | /* the server may be linking based on certificate fingerprint now. --nenolod */ | |
1316 | sendto_one(client_p, "PASS %s TS %d :%s", | |
1317 | EmptyString(server_p->spasswd) ? "*" : server_p->spasswd, TS_CURRENT, me.id); | |
1318 | ||
1319 | /* pass my info to the new server */ | |
1320 | send_capabilities(client_p, default_server_capabs | CAP_MASK | |
1321 | | (ServerConfTb(server_p) ? CAP_TB : 0)); | |
1322 | ||
1323 | sendto_one(client_p, "SERVER %s 1 :%s%s", | |
1324 | me.name, | |
1325 | ConfigServerHide.hidden ? "(H) " : "", me.info); | |
1326 | ||
1327 | /* | |
1328 | * If we've been marked dead because a send failed, just exit | |
1329 | * here now and save everyone the trouble of us ever existing. | |
1330 | */ | |
1331 | if(IsAnyDead(client_p)) | |
1332 | { | |
1333 | sendto_realops_snomask(SNO_GENERAL, L_NETWIDE, | |
1334 | "%s went dead during handshake", client_p->name); | |
1335 | exit_client(client_p, client_p, &me, "Went dead during handshake"); | |
1336 | return; | |
1337 | } | |
1338 | ||
1339 | /* don't move to serv_list yet -- we haven't sent a burst! */ | |
1340 | ||
1341 | /* If we get here, we're ok, so lets start reading some data */ | |
1342 | read_packet(F, client_p); | |
1343 | } |