2 * ircd-ratbox: A slightly useful ircd.
3 * s_serv.c: Server related functions.
5 * Copyright (C) 1990 Jarkko Oikarinen and University of Oulu, Co Center
6 * Copyright (C) 1996-2002 Hybrid Development Team
7 * Copyright (C) 2002-2005 ircd-ratbox development team
9 * This program is free software; you can redistribute it and/or modify
10 * it under the terms of the GNU General Public License as published by
11 * the Free Software Foundation; either version 2 of the License, or
12 * (at your option) any later version.
14 * This program is distributed in the hope that it will be useful,
15 * but WITHOUT ANY WARRANTY; without even the implied warranty of
16 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
17 * GNU General Public License for more details.
19 * You should have received a copy of the GNU General Public License
20 * along with this program; if not, write to the Free Software
21 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307
28 #include <openssl/rsa.h>
37 #include "ircd_defs.h"
41 #include "s_newconf.h"
48 #include "channel.h" /* chcap_usage_counts stuff... */
53 #include "capability.h"
56 int MaxConnectionCount
= 1;
57 int MaxClientCount
= 1;
58 int refresh_user_links
= 0;
60 static char buf
[BUFSIZE
];
63 * list of recognized server capabilities. "TS" is not on the list
64 * because all servers that we talk to already do TS, and the kludged
65 * extra argument to "PASS" takes care of checking that. -orabidoo
67 struct CapabilityIndex
*serv_capindex
= NULL
;
68 struct CapabilityIndex
*cli_capindex
= NULL
;
77 unsigned int CAP_KNOCK
;
79 unsigned int CAP_UNKLN
;
80 unsigned int CAP_CLUSTER
;
81 unsigned int CAP_ENCAP
;
83 unsigned int CAP_SERVICE
;
84 unsigned int CAP_RSFNC
;
85 unsigned int CAP_SAVE
;
86 unsigned int CAP_EUID
;
87 unsigned int CAP_EOPMOD
;
89 unsigned int CAP_MLOCK
;
91 unsigned int CLICAP_MULTI_PREFIX
;
92 unsigned int CLICAP_ACCOUNT_NOTIFY
;
93 unsigned int CLICAP_EXTENDED_JOIN
;
94 unsigned int CLICAP_AWAY_NOTIFY
;
95 unsigned int CLICAP_USERHOST_IN_NAMES
;
96 unsigned int CLICAP_CAP_NOTIFY
;
97 unsigned int CLICAP_CHGHOST
;
98 unsigned int CLICAP_ECHO_MESSAGE
;
101 * initialize our builtin capability table. --nenolod
104 init_builtin_capabs(void)
106 serv_capindex
= capability_index_create("server capabilities");
108 /* These two are not set via CAPAB/GCAP keywords. */
109 CAP_CAP
= capability_put_anonymous(serv_capindex
);
110 CAP_TS6
= capability_put_anonymous(serv_capindex
);
112 CAP_QS
= capability_put(serv_capindex
, "QS", NULL
);
113 CAP_EX
= capability_put(serv_capindex
, "EX", NULL
);
114 CAP_CHW
= capability_put(serv_capindex
, "CHW", NULL
);
115 CAP_IE
= capability_put(serv_capindex
, "IE", NULL
);
116 CAP_KLN
= capability_put(serv_capindex
, "KLN", NULL
);
117 CAP_KNOCK
= capability_put(serv_capindex
, "KNOCK", NULL
);
118 CAP_ZIP
= capability_put(serv_capindex
, "ZIP", NULL
);
119 CAP_TB
= capability_put(serv_capindex
, "TB", NULL
);
120 CAP_UNKLN
= capability_put(serv_capindex
, "UNKLN", NULL
);
121 CAP_CLUSTER
= capability_put(serv_capindex
, "CLUSTER", NULL
);
122 CAP_ENCAP
= capability_put(serv_capindex
, "ENCAP", NULL
);
123 CAP_SERVICE
= capability_put(serv_capindex
, "SERVICES", NULL
);
124 CAP_RSFNC
= capability_put(serv_capindex
, "RSFNC", NULL
);
125 CAP_SAVE
= capability_put(serv_capindex
, "SAVE", NULL
);
126 CAP_EUID
= capability_put(serv_capindex
, "EUID", NULL
);
127 CAP_EOPMOD
= capability_put(serv_capindex
, "EOPMOD", NULL
);
128 CAP_BAN
= capability_put(serv_capindex
, "BAN", NULL
);
129 CAP_MLOCK
= capability_put(serv_capindex
, "MLOCK", NULL
);
131 capability_require(serv_capindex
, "QS");
132 capability_require(serv_capindex
, "EX");
133 capability_require(serv_capindex
, "IE");
134 capability_require(serv_capindex
, "ENCAP");
136 cli_capindex
= capability_index_create("client capabilities");
138 CLICAP_MULTI_PREFIX
= capability_put(cli_capindex
, "multi-prefix", NULL
);
139 CLICAP_ACCOUNT_NOTIFY
= capability_put(cli_capindex
, "account-notify", NULL
);
140 CLICAP_EXTENDED_JOIN
= capability_put(cli_capindex
, "extended-join", NULL
);
141 CLICAP_AWAY_NOTIFY
= capability_put(cli_capindex
, "away-notify", NULL
);
142 CLICAP_USERHOST_IN_NAMES
= capability_put(cli_capindex
, "userhost-in-names", NULL
);
143 CLICAP_CAP_NOTIFY
= capability_put(cli_capindex
, "cap-notify", NULL
);
144 CLICAP_CHGHOST
= capability_put(cli_capindex
, "chghost", NULL
);
145 CLICAP_ECHO_MESSAGE
= capability_put(cli_capindex
, "echo-message", NULL
);
148 static CNCB serv_connect_callback
;
149 static CNCB serv_connect_ssl_callback
;
150 static SSL_OPEN_CB serv_connect_ssl_open_callback
;
153 * hunt_server - Do the basic thing in delivering the message (command)
154 * across the relays to the specific server (server) for
157 * Note: The command is a format string and *MUST* be
158 * of prefixed style (e.g. ":%s COMMAND %s ...").
159 * Command can have only max 8 parameters.
161 * server parv[server] is the parameter identifying the
165 * parv[server] is replaced with the pointer to the
166 * real servername from the matched client (I'm lazy
169 * returns: (see #defines)
172 hunt_server(struct Client
*client_p
, struct Client
*source_p
,
173 const char *command
, int server
, int parc
, const char *parv
[])
175 struct Client
*target_p
;
182 * Assume it's me, if no server
184 if(parc
<= server
|| EmptyString(parv
[server
]) ||
185 match(parv
[server
], me
.name
) || (strcmp(parv
[server
], me
.id
) == 0))
186 return (HUNTED_ISME
);
188 new = LOCAL_COPY(parv
[server
]);
191 * These are to pickup matches that would cause the following
192 * message to go in the wrong direction while doing quick fast
193 * non-matching lookups.
195 if(MyClient(source_p
))
196 target_p
= find_named_client(new);
198 target_p
= find_client(new);
201 if(target_p
->from
== source_p
->from
&& !MyConnect(target_p
))
205 wilds
= (strchr(new, '?') || strchr(new, '*'));
208 * Again, if there are no wild cards involved in the server
209 * name, use the hash lookup
211 if(!target_p
&& wilds
)
213 RB_DLINK_FOREACH(ptr
, global_serv_list
.head
)
215 if(match(new, ((struct Client
*) (ptr
->data
))->name
))
217 target_p
= ptr
->data
;
223 if(target_p
&& !IsRegistered(target_p
))
228 if(IsMe(target_p
) || MyClient(target_p
))
232 parv
[server
] = get_id(target_p
, target_p
);
234 sendto_one(target_p
, command
, get_id(source_p
, target_p
),
235 parv
[1], parv
[2], parv
[3], parv
[4], parv
[5], parv
[6], parv
[7], parv
[8]);
237 return (HUNTED_PASS
);
240 if(MyClient(source_p
) || !IsDigit(parv
[server
][0]))
241 sendto_one_numeric(source_p
, ERR_NOSUCHSERVER
,
242 form_str(ERR_NOSUCHSERVER
), parv
[server
]);
243 return (HUNTED_NOSUCH
);
247 * try_connections - scan through configuration and try new connections.
248 * Returns the calendar time when the next call to this
249 * function should be made latest. (No harm done if this
250 * is called earlier or later...)
253 try_connections(void *unused
)
255 struct Client
*client_p
;
256 struct server_conf
*server_p
= NULL
;
257 struct server_conf
*tmp_p
;
260 bool connecting
= false;
264 RB_DLINK_FOREACH(ptr
, server_conf_list
.head
)
268 if(ServerConfIllegal(tmp_p
) || !ServerConfAutoconn(tmp_p
))
271 /* don't allow ssl connections if ssl isn't setup */
272 if(ServerConfSSL(tmp_p
) && (!ircd_ssl_ok
|| !get_ssld_count()))
275 cltmp
= tmp_p
->class;
278 * Skip this entry if the use of it is still on hold until
279 * future. Otherwise handle this entry (and set it on hold
280 * until next time). Will reset only hold times, if already
281 * made one successfull connection... [this algorithm is
282 * a bit fuzzy... -- msa >;) ]
284 if(tmp_p
->hold
> rb_current_time())
286 if(next
> tmp_p
->hold
|| next
== 0)
291 confrq
= get_con_freq(cltmp
);
292 tmp_p
->hold
= rb_current_time() + confrq
;
295 * Found a CONNECT config with port specified, scan clients
296 * and see if this server is already connected?
298 client_p
= find_server(NULL
, tmp_p
->name
);
300 if(!client_p
&& (CurrUsers(cltmp
) < MaxUsers(cltmp
)) && !connecting
)
304 /* We connect only one at time... */
308 if((next
> tmp_p
->hold
) || (next
== 0))
312 /* TODO: change this to set active flag to 0 when added to event! --Habeeb */
313 if(GlobalSetOptions
.autoconn
== 0)
319 /* move this connect entry to end.. */
320 rb_dlinkDelete(&server_p
->node
, &server_conf_list
);
321 rb_dlinkAddTail(server_p
, &server_p
->node
, &server_conf_list
);
324 * We used to only print this if serv_connect() actually
325 * suceeded, but since rb_tcp_connect() can call the callback
326 * immediately if there is an error, we were getting error messages
327 * in the wrong order. SO, we just print out the activated line,
328 * and let serv_connect() / serv_connect_callback() print an
329 * error afterwards if it fails.
332 sendto_realops_snomask(SNO_GENERAL
, L_ALL
,
333 "Connection to %s activated",
336 serv_connect(server_p
, 0);
340 check_server(const char *name
, struct Client
*client_p
)
342 struct server_conf
*server_p
= NULL
;
343 struct server_conf
*tmp_p
;
347 bool name_matched
= false;
348 bool host_matched
= false;
349 bool certfp_failed
= false;
351 s_assert(NULL
!= client_p
);
355 if(!(client_p
->localClient
->passwd
))
358 if(strlen(name
) > HOSTLEN
)
361 RB_DLINK_FOREACH(ptr
, server_conf_list
.head
)
363 struct rb_sockaddr_storage client_addr
;
367 if(ServerConfIllegal(tmp_p
))
370 if(!match(tmp_p
->name
, name
))
375 if(rb_inet_pton_sock(client_p
->sockhost
, (struct sockaddr
*)&client_addr
) <= 0)
376 SET_SS_FAMILY(&client_addr
, AF_UNSPEC
);
378 if((tmp_p
->connect_host
&& match(tmp_p
->connect_host
, client_p
->host
))
379 || (GET_SS_FAMILY(&client_addr
) == GET_SS_FAMILY(&tmp_p
->connect4
)
380 && comp_with_mask_sock((struct sockaddr
*)&client_addr
,
381 (struct sockaddr
*)&tmp_p
->connect4
, 32))
382 || (GET_SS_FAMILY(&client_addr
) == GET_SS_FAMILY(&tmp_p
->connect6
)
383 && comp_with_mask_sock((struct sockaddr
*)&client_addr
,
384 (struct sockaddr
*)&tmp_p
->connect6
, 128))
391 if(ServerConfEncrypted(tmp_p
))
393 encr
= rb_crypt(client_p
->localClient
->passwd
,
395 if(encr
!= NULL
&& !strcmp(tmp_p
->passwd
, encr
))
403 else if(strcmp(tmp_p
->passwd
, client_p
->localClient
->passwd
))
409 if(!client_p
->certfp
|| rb_strcasecmp(tmp_p
->certfp
, client_p
->certfp
) != 0) {
410 certfp_failed
= true;
422 /* return the most specific error */
425 else if(host_matched
)
427 else if(name_matched
)
433 if(ServerConfSSL(server_p
) && client_p
->localClient
->ssl_ctl
== NULL
)
438 if (client_p
->localClient
->att_sconf
&& client_p
->localClient
->att_sconf
->class == server_p
->class) {
439 /* this is an outgoing connection that is already attached to the correct class */
440 } else if (CurrUsers(server_p
->class) >= MaxUsers(server_p
->class)) {
443 attach_server_conf(client_p
, server_p
);
445 /* clear ZIP/TB if they support but we dont want them */
447 if(!ServerConfCompressed(server_p
))
449 ClearCap(client_p
, CAP_ZIP
);
451 if(!ServerConfTb(server_p
))
452 ClearCap(client_p
, CAP_TB
);
460 * inputs - Client pointer to send to
461 * - int flag of capabilities that this server has
463 * side effects - send the CAPAB line to a server -orabidoo
466 send_capabilities(struct Client
*client_p
, unsigned int cap_can_send
)
468 sendto_one(client_p
, "CAPAB :%s", capability_index_list(serv_capindex
, cap_can_send
));
472 burst_ban(struct Client
*client_p
)
475 struct ConfItem
*aconf
;
476 const char *type
, *oper
;
477 /* +5 for !,@,{,} and null */
478 char operbuf
[NICKLEN
+ USERLEN
+ HOSTLEN
+ HOSTLEN
+ 5];
482 melen
= strlen(me
.name
);
483 RB_DLINK_FOREACH(ptr
, prop_bans
.head
)
487 /* Skip expired stuff. */
488 if(aconf
->lifetime
< rb_current_time())
490 switch(aconf
->status
& ~CONF_ILLEGAL
)
492 case CONF_KILL
: type
= "K"; break;
493 case CONF_DLINE
: type
= "D"; break;
494 case CONF_XLINE
: type
= "X"; break;
495 case CONF_RESV_NICK
: type
= "R"; break;
496 case CONF_RESV_CHANNEL
: type
= "R"; break;
500 oper
= aconf
->info
.oper
;
501 if(aconf
->flags
& CONF_FLAGS_MYOPER
)
503 /* Our operator{} names may not be meaningful
504 * to other servers, so rewrite to our server
507 rb_strlcpy(operbuf
, aconf
->info
.oper
, sizeof operbuf
);
508 p
= strrchr(operbuf
, '{');
510 operbuf
+ sizeof operbuf
- p
> (ptrdiff_t)(melen
+ 2))
512 memcpy(p
+ 1, me
.name
, melen
);
518 sendto_one(client_p
, ":%s BAN %s %s %s %lu %d %d %s :%s%s%s",
521 aconf
->user
? aconf
->user
: "*", aconf
->host
,
522 (unsigned long)aconf
->created
,
523 (int)(aconf
->hold
- aconf
->created
),
524 (int)(aconf
->lifetime
- aconf
->created
),
527 aconf
->spasswd
? "|" : "",
528 aconf
->spasswd
? aconf
->spasswd
: "");
534 * input - client to burst to, channel name, list to burst, mode flag
536 * side effects - client is sent a list of +b, +e, or +I modes
539 burst_modes_TS6(struct Client
*client_p
, struct Channel
*chptr
,
540 rb_dlink_list
*list
, char flag
)
549 cur_len
= mlen
= sprintf(buf
, ":%s BMASK %ld %s %c :",
550 me
.id
, (long) chptr
->channelts
, chptr
->chname
, flag
);
553 RB_DLINK_FOREACH(ptr
, list
->head
)
557 tlen
= strlen(banptr
->banstr
) + (banptr
->forward
? strlen(banptr
->forward
) + 1 : 0) + 1;
560 if(cur_len
+ tlen
> BUFSIZE
- 3)
562 /* the one we're trying to send doesnt fit at all! */
569 /* chop off trailing space and send.. */
571 sendto_one(client_p
, "%s", buf
);
577 sprintf(t
, "%s$%s ", banptr
->banstr
, banptr
->forward
);
579 sprintf(t
, "%s ", banptr
->banstr
);
584 /* cant ever exit the loop above without having modified buf,
585 * chop off trailing space and send.
588 sendto_one(client_p
, "%s", buf
);
594 * inputs - client (server) to send nick towards
595 * - client to send nick for
597 * side effects - NICK message is sent towards given client_p
600 burst_TS6(struct Client
*client_p
)
603 struct Client
*target_p
;
604 struct Channel
*chptr
;
605 struct membership
*msptr
;
606 hook_data_client hclientinfo
;
607 hook_data_channel hchaninfo
;
614 hclientinfo
.client
= hchaninfo
.client
= client_p
;
616 RB_DLINK_FOREACH(ptr
, global_client_list
.head
)
618 target_p
= ptr
->data
;
620 if(!IsPerson(target_p
))
623 if(MyClient(target_p
->from
) && target_p
->localClient
->att_sconf
!= NULL
&& ServerConfNoExport(target_p
->localClient
->att_sconf
))
626 send_umode(NULL
, target_p
, 0, ubuf
);
633 if(IsCapable(client_p
, CAP_EUID
))
634 sendto_one(client_p
, ":%s EUID %s %d %ld %s %s %s %s %s %s %s :%s",
635 target_p
->servptr
->id
, target_p
->name
,
636 target_p
->hopcount
+ 1,
637 (long) target_p
->tsinfo
, ubuf
,
638 target_p
->username
, target_p
->host
,
639 IsIPSpoof(target_p
) ? "0" : target_p
->sockhost
,
641 IsDynSpoof(target_p
) ? target_p
->orighost
: "*",
642 EmptyString(target_p
->user
->suser
) ? "*" : target_p
->user
->suser
,
645 sendto_one(client_p
, ":%s UID %s %d %ld %s %s %s %s %s :%s",
646 target_p
->servptr
->id
, target_p
->name
,
647 target_p
->hopcount
+ 1,
648 (long) target_p
->tsinfo
, ubuf
,
649 target_p
->username
, target_p
->host
,
650 IsIPSpoof(target_p
) ? "0" : target_p
->sockhost
,
651 target_p
->id
, target_p
->info
);
653 if(!EmptyString(target_p
->certfp
))
654 sendto_one(client_p
, ":%s ENCAP * CERTFP :%s",
655 use_id(target_p
), target_p
->certfp
);
657 if(!IsCapable(client_p
, CAP_EUID
))
659 if(IsDynSpoof(target_p
))
660 sendto_one(client_p
, ":%s ENCAP * REALHOST %s",
661 use_id(target_p
), target_p
->orighost
);
662 if(!EmptyString(target_p
->user
->suser
))
663 sendto_one(client_p
, ":%s ENCAP * LOGIN %s",
664 use_id(target_p
), target_p
->user
->suser
);
667 if(ConfigFileEntry
.burst_away
&& !EmptyString(target_p
->user
->away
))
668 sendto_one(client_p
, ":%s AWAY :%s",
670 target_p
->user
->away
);
672 hclientinfo
.target
= target_p
;
673 call_hook(h_burst_client
, &hclientinfo
);
676 RB_DLINK_FOREACH(ptr
, global_channel_list
.head
)
680 if(*chptr
->chname
!= '#')
683 cur_len
= mlen
= sprintf(buf
, ":%s SJOIN %ld %s %s :", me
.id
,
684 (long) chptr
->channelts
, chptr
->chname
,
685 channel_modes(chptr
, client_p
));
689 RB_DLINK_FOREACH(uptr
, chptr
->members
.head
)
693 tlen
= strlen(use_id(msptr
->client_p
)) + 1;
699 if(cur_len
+ tlen
>= BUFSIZE
- 3)
702 sendto_one(client_p
, "%s", buf
);
707 sprintf(t
, "%s%s ", find_channel_status(msptr
, 1),
708 use_id(msptr
->client_p
));
714 if (rb_dlink_list_length(&chptr
->members
) > 0)
716 /* remove trailing space */
719 sendto_one(client_p
, "%s", buf
);
721 if(rb_dlink_list_length(&chptr
->banlist
) > 0)
722 burst_modes_TS6(client_p
, chptr
, &chptr
->banlist
, 'b');
724 if(IsCapable(client_p
, CAP_EX
) &&
725 rb_dlink_list_length(&chptr
->exceptlist
) > 0)
726 burst_modes_TS6(client_p
, chptr
, &chptr
->exceptlist
, 'e');
728 if(IsCapable(client_p
, CAP_IE
) &&
729 rb_dlink_list_length(&chptr
->invexlist
) > 0)
730 burst_modes_TS6(client_p
, chptr
, &chptr
->invexlist
, 'I');
732 if(rb_dlink_list_length(&chptr
->quietlist
) > 0)
733 burst_modes_TS6(client_p
, chptr
, &chptr
->quietlist
, 'q');
735 if(IsCapable(client_p
, CAP_TB
) && chptr
->topic
!= NULL
)
736 sendto_one(client_p
, ":%s TB %s %ld %s%s:%s",
737 me
.id
, chptr
->chname
, (long) chptr
->topic_time
,
738 ConfigChannel
.burst_topicwho
? chptr
->topic_info
: "",
739 ConfigChannel
.burst_topicwho
? " " : "",
742 if(IsCapable(client_p
, CAP_MLOCK
))
743 sendto_one(client_p
, ":%s MLOCK %ld %s :%s",
744 me
.id
, (long) chptr
->channelts
, chptr
->chname
,
745 EmptyString(chptr
->mode_lock
) ? "" : chptr
->mode_lock
);
747 hchaninfo
.chptr
= chptr
;
748 call_hook(h_burst_channel
, &hchaninfo
);
751 hclientinfo
.target
= NULL
;
752 call_hook(h_burst_finished
, &hclientinfo
);
756 * show_capabilities - show current server capabilities
758 * inputs - pointer to an struct Client
759 * output - pointer to static string
760 * side effects - build up string representing capabilities of server listed
763 show_capabilities(struct Client
*target_p
)
765 static char msgbuf
[BUFSIZE
];
770 rb_strlcpy(msgbuf
, " TS6", sizeof(msgbuf
));
773 rb_strlcat(msgbuf
, " SSL", sizeof(msgbuf
));
775 if(!IsServer(target_p
) || !target_p
->serv
->caps
) /* short circuit if no caps */
778 rb_strlcat(msgbuf
, " ", sizeof(msgbuf
));
779 rb_strlcat(msgbuf
, capability_index_list(serv_capindex
, target_p
->serv
->caps
), sizeof(msgbuf
));
787 * inputs - pointer to a struct Client
792 server_estab(struct Client
*client_p
)
794 struct Client
*target_p
;
795 struct server_conf
*server_p
;
796 hook_data_client hdata
;
799 char note
[HOSTLEN
+ 15];
801 s_assert(NULL
!= client_p
);
805 host
= client_p
->name
;
807 if((server_p
= client_p
->localClient
->att_sconf
) == NULL
)
809 /* This shouldn't happen, better tell the ops... -A1kmm */
810 sendto_realops_snomask(SNO_GENERAL
, is_remote_connect(client_p
) ? L_NETWIDE
: L_ALL
,
811 "Warning: Lost connect{} block for server %s!", host
);
812 return exit_client(client_p
, client_p
, client_p
, "Lost connect{} block!");
815 /* We shouldn't have to check this, it should already done before
816 * server_estab is called. -A1kmm
818 if(client_p
->localClient
->passwd
)
820 memset(client_p
->localClient
->passwd
, 0, strlen(client_p
->localClient
->passwd
));
821 rb_free(client_p
->localClient
->passwd
);
822 client_p
->localClient
->passwd
= NULL
;
825 /* Its got identd , since its a server */
828 if(IsUnknown(client_p
))
830 /* the server may be linking based on certificate fingerprint now. --nenolod */
831 sendto_one(client_p
, "PASS %s TS %d :%s",
832 EmptyString(server_p
->spasswd
) ? "*" : server_p
->spasswd
, TS_CURRENT
, me
.id
);
834 /* pass info to new server */
835 send_capabilities(client_p
, default_server_capabs
| CAP_MASK
836 | (ServerConfCompressed(server_p
) ? CAP_ZIP_SUPPORTED
: 0)
837 | (ServerConfTb(server_p
) ? CAP_TB
: 0));
839 sendto_one(client_p
, "SERVER %s 1 :%s%s",
841 ConfigServerHide
.hidden
? "(H) " : "",
842 (me
.info
[0]) ? (me
.info
) : "IRCers United");
845 if(!rb_set_buffers(client_p
->localClient
->F
, READBUF_SIZE
))
846 ilog_error("rb_set_buffers failed for server");
848 /* Enable compression now */
849 if(IsCapable(client_p
, CAP_ZIP
))
851 start_zlib_session(client_p
);
854 client_p
->servptr
= &me
;
856 if(IsAnyDead(client_p
))
857 return CLIENT_EXITED
;
859 sendto_one(client_p
, "SVINFO %d %d 0 :%ld", TS_CURRENT
, TS_MIN
, (long int)rb_current_time());
861 rb_dlinkAdd(client_p
, &client_p
->lnode
, &me
.serv
->servers
);
862 rb_dlinkMoveNode(&client_p
->localClient
->tnode
, &unknown_list
, &serv_list
);
863 rb_dlinkAddTailAlloc(client_p
, &global_serv_list
);
866 add_to_id_hash(client_p
->id
, client_p
);
868 add_to_client_hash(client_p
->name
, client_p
);
869 /* doesnt duplicate client_p->serv if allocated this struct already */
870 make_server(client_p
);
873 client_p
->serv
->caps
= client_p
->localClient
->caps
;
875 if(client_p
->localClient
->fullcaps
)
877 client_p
->serv
->fullcaps
= rb_strdup(client_p
->localClient
->fullcaps
);
878 rb_free(client_p
->localClient
->fullcaps
);
879 client_p
->localClient
->fullcaps
= NULL
;
882 client_p
->serv
->nameinfo
= scache_connect(client_p
->name
, client_p
->info
, IsHidden(client_p
));
883 client_p
->localClient
->firsttime
= rb_current_time();
884 /* fixing eob timings.. -gnp */
886 if((rb_dlink_list_length(&lclient_list
) + rb_dlink_list_length(&serv_list
)) >
887 (unsigned long)MaxConnectionCount
)
888 MaxConnectionCount
= rb_dlink_list_length(&lclient_list
) +
889 rb_dlink_list_length(&serv_list
);
891 /* Show the real host/IP to admins */
892 sendto_realops_snomask(SNO_GENERAL
, L_ALL
,
893 "Link with %s established: (%s) link",
895 show_capabilities(client_p
));
897 ilog(L_SERVER
, "Link with %s established: (%s) link",
898 log_client_name(client_p
, SHOW_IP
), show_capabilities(client_p
));
901 hdata
.target
= client_p
;
902 call_hook(h_server_introduced
, &hdata
);
904 snprintf(note
, sizeof(note
), "Server: %s", client_p
->name
);
905 rb_note(client_p
->localClient
->F
, note
);
908 ** Old sendto_serv_but_one() call removed because we now
909 ** need to send different names to different servers
910 ** (domain name matching) Send new server to other servers.
912 RB_DLINK_FOREACH(ptr
, serv_list
.head
)
914 target_p
= ptr
->data
;
916 if(target_p
== client_p
)
919 if(target_p
->localClient
->att_sconf
!= NULL
&& ServerConfNoExport(target_p
->localClient
->att_sconf
))
922 if(has_id(target_p
) && has_id(client_p
))
924 sendto_one(target_p
, ":%s SID %s 2 %s :%s%s",
925 me
.id
, client_p
->name
, client_p
->id
,
926 IsHidden(client_p
) ? "(H) " : "", client_p
->info
);
928 if(!EmptyString(client_p
->serv
->fullcaps
))
929 sendto_one(target_p
, ":%s ENCAP * GCAP :%s",
930 client_p
->id
, client_p
->serv
->fullcaps
);
934 sendto_one(target_p
, ":%s SERVER %s 2 :%s%s",
935 me
.name
, client_p
->name
,
936 IsHidden(client_p
) ? "(H) " : "", client_p
->info
);
938 if(!EmptyString(client_p
->serv
->fullcaps
))
939 sendto_one(target_p
, ":%s ENCAP * GCAP :%s",
940 client_p
->name
, client_p
->serv
->fullcaps
);
945 ** Pass on my client information to the new server
947 ** First, pass only servers (idea is that if the link gets
948 ** cancelled beacause the server was already there,
949 ** there are no NICK's to be cancelled...). Of course,
950 ** if cancellation occurs, all this info is sent anyway,
951 ** and I guess the link dies when a read is attempted...? --msa
953 ** Note: Link cancellation to occur at this point means
954 ** that at least two servers from my fragment are building
955 ** up connection this other fragment at the same time, it's
956 ** a race condition, not the normal way of operation...
958 ** ALSO NOTE: using the get_client_name for server names--
959 ** see previous *WARNING*!!! (Also, original inpath
962 RB_DLINK_FOREACH(ptr
, global_serv_list
.head
)
964 target_p
= ptr
->data
;
966 /* target_p->from == target_p for target_p == client_p */
967 if(IsMe(target_p
) || target_p
->from
== client_p
)
970 /* don't distribute downstream leaves of servers that are no-export */
971 if(MyClient(target_p
->from
) && target_p
->from
->localClient
->att_sconf
!= NULL
&& ServerConfNoExport(target_p
->from
->localClient
->att_sconf
))
974 /* presumption, if target has an id, so does its uplink */
975 if(has_id(client_p
) && has_id(target_p
))
976 sendto_one(client_p
, ":%s SID %s %d %s :%s%s",
977 target_p
->servptr
->id
, target_p
->name
,
978 target_p
->hopcount
+ 1, target_p
->id
,
979 IsHidden(target_p
) ? "(H) " : "", target_p
->info
);
981 sendto_one(client_p
, ":%s SERVER %s %d :%s%s",
982 target_p
->servptr
->name
,
983 target_p
->name
, target_p
->hopcount
+ 1,
984 IsHidden(target_p
) ? "(H) " : "", target_p
->info
);
986 if(!EmptyString(target_p
->serv
->fullcaps
))
987 sendto_one(client_p
, ":%s ENCAP * GCAP :%s",
988 get_id(target_p
, client_p
),
989 target_p
->serv
->fullcaps
);
992 if(IsCapable(client_p
, CAP_BAN
))
997 /* Always send a PING after connect burst is done */
998 sendto_one(client_p
, "PING :%s", get_id(&me
, client_p
));
1000 free_pre_client(client_p
);
1002 send_pop_queue(client_p
);
1008 * New server connection code
1009 * Based upon the stuff floating about in s_bsd.c
1014 * serv_connect() - initiate a server connection
1016 * inputs - pointer to conf
1017 * - pointer to client doing the connet
1021 * This code initiates a connection to a server. It first checks to make
1022 * sure the given server exists. If this is the case, it creates a socket,
1023 * creates a client, saves the socket information in the client, and
1024 * initiates a connection to the server through rb_connect_tcp(). The
1025 * completion of this goes through serv_completed_connection().
1027 * We return 1 if the connection is attempted, since we don't know whether
1028 * it suceeded or not, and 0 if it fails in here somewhere.
1031 serv_connect(struct server_conf
*server_p
, struct Client
*by
)
1033 struct Client
*client_p
;
1034 struct sockaddr_storage sa_connect
[2];
1035 struct sockaddr_storage sa_bind
[ARRAY_SIZE(sa_connect
)];
1036 char note
[HOSTLEN
+ 10];
1039 s_assert(server_p
!= NULL
);
1040 if(server_p
== NULL
)
1043 for (int i
= 0; i
< ARRAY_SIZE(sa_connect
); i
++) {
1044 SET_SS_FAMILY(&sa_connect
[i
], AF_UNSPEC
);
1045 SET_SS_FAMILY(&sa_bind
[i
], AF_UNSPEC
);
1048 if(server_p
->aftype
== AF_UNSPEC
1049 && GET_SS_FAMILY(&server_p
->connect4
) == AF_INET
1050 && GET_SS_FAMILY(&server_p
->connect6
) == AF_INET6
)
1054 sa_connect
[0] = server_p
->connect4
;
1055 sa_connect
[1] = server_p
->connect6
;
1056 sa_bind
[0] = server_p
->bind4
;
1057 sa_bind
[1] = server_p
->bind6
;
1061 sa_connect
[0] = server_p
->connect6
;
1062 sa_connect
[1] = server_p
->connect4
;
1063 sa_bind
[0] = server_p
->bind6
;
1064 sa_bind
[1] = server_p
->bind4
;
1067 else if(server_p
->aftype
== AF_INET
|| GET_SS_FAMILY(&server_p
->connect4
) == AF_INET
)
1069 sa_connect
[0] = server_p
->connect4
;
1070 sa_bind
[0] = server_p
->bind4
;
1072 else if(server_p
->aftype
== AF_INET6
|| GET_SS_FAMILY(&server_p
->connect6
) == AF_INET6
)
1074 sa_connect
[0] = server_p
->connect6
;
1075 sa_bind
[0] = server_p
->bind6
;
1080 if (ServerConfSCTP(server_p
) && GET_SS_FAMILY(&sa_connect
[1]) != AF_UNSPEC
) {
1081 char buf2
[HOSTLEN
+ 1];
1085 rb_inet_ntop_sock((struct sockaddr
*)&sa_connect
[0], buf
, sizeof(buf
));
1086 rb_inet_ntop_sock((struct sockaddr
*)&sa_connect
[1], buf2
, sizeof(buf2
));
1087 ilog(L_SERVER
, "Connect to *[%s] @%s&%s", server_p
->name
, buf
, buf2
);
1093 rb_inet_ntop_sock((struct sockaddr
*)&sa_connect
[0], buf
, sizeof(buf
));
1094 ilog(L_SERVER
, "Connect to *[%s] @%s", server_p
->name
, buf
);
1098 * Make sure this server isn't already connected
1100 if((client_p
= find_server(NULL
, server_p
->name
)))
1102 sendto_realops_snomask(SNO_GENERAL
, L_ALL
,
1103 "Server %s already present from %s",
1104 server_p
->name
, client_p
->name
);
1105 if(by
&& IsPerson(by
) && !MyClient(by
))
1106 sendto_one_notice(by
, ":Server %s already present from %s",
1107 server_p
->name
, client_p
->name
);
1111 if (CurrUsers(server_p
->class) >= MaxUsers(server_p
->class)) {
1112 sendto_realops_snomask(SNO_GENERAL
, L_ALL
,
1113 "No more connections allowed in class \"%s\" for server %s",
1114 server_p
->class->class_name
, server_p
->name
);
1115 if(by
&& IsPerson(by
) && !MyClient(by
))
1116 sendto_one_notice(by
, ":No more connections allowed in class \"%s\" for server %s",
1117 server_p
->class->class_name
, server_p
->name
);
1121 /* create a socket for the server connection */
1122 if(GET_SS_FAMILY(&sa_connect
[0]) == AF_UNSPEC
) {
1123 ilog_error("unspecified socket address family");
1126 } else if (ServerConfSCTP(server_p
)) {
1127 if ((F
= rb_socket(AF_INET6
, SOCK_STREAM
, IPPROTO_SCTP
, NULL
)) == NULL
) {
1128 ilog_error("opening a stream socket");
1132 } else if ((F
= rb_socket(GET_SS_FAMILY(&sa_connect
[0]), SOCK_STREAM
, IPPROTO_TCP
, NULL
)) == NULL
) {
1133 ilog_error("opening a stream socket");
1137 /* servernames are always guaranteed under HOSTLEN chars */
1138 snprintf(note
, sizeof(note
), "Server: %s", server_p
->name
);
1141 /* Create a local client */
1142 client_p
= make_client(NULL
);
1144 /* Copy in the server, hostname, fd */
1145 rb_strlcpy(client_p
->name
, server_p
->name
, sizeof(client_p
->name
));
1146 if(server_p
->connect_host
)
1147 rb_strlcpy(client_p
->host
, server_p
->connect_host
, sizeof(client_p
->host
));
1149 rb_strlcpy(client_p
->host
, buf
, sizeof(client_p
->host
));
1150 rb_strlcpy(client_p
->sockhost
, buf
, sizeof(client_p
->sockhost
));
1151 client_p
->localClient
->F
= F
;
1152 /* shove the port number into the sockaddr */
1153 SET_SS_PORT(&sa_connect
[0], htons(server_p
->port
));
1154 SET_SS_PORT(&sa_connect
[1], htons(server_p
->port
));
1157 * Set up the initial server evilness, ripped straight from
1158 * connect_server(), so don't blame me for it being evil.
1162 if(!rb_set_buffers(client_p
->localClient
->F
, READBUF_SIZE
))
1164 ilog_error("setting the buffer size for a server connection");
1168 * Attach config entries to client here rather than in
1169 * serv_connect_callback(). This to avoid null pointer references.
1171 attach_server_conf(client_p
, server_p
);
1174 * at this point we have a connection in progress and C/N lines
1175 * attached to the client, the socket info should be saved in the
1176 * client and it should either be resolved or have a valid address.
1178 * The socket has been connected or connect is in progress.
1180 make_server(client_p
);
1181 if(by
&& IsClient(by
))
1182 rb_strlcpy(client_p
->serv
->by
, by
->name
, sizeof(client_p
->serv
->by
));
1184 strcpy(client_p
->serv
->by
, "AutoConn.");
1186 SetConnecting(client_p
);
1187 rb_dlinkAddTail(client_p
, &client_p
->node
, &global_client_list
);
1189 for (int i
= 0; i
< ARRAY_SIZE(sa_connect
); i
++) {
1190 if (GET_SS_FAMILY(&sa_bind
[i
]) == AF_UNSPEC
) {
1191 if (GET_SS_FAMILY(&sa_connect
[i
]) == GET_SS_FAMILY(&ServerInfo
.bind4
))
1192 sa_bind
[i
] = ServerInfo
.bind4
;
1193 if (GET_SS_FAMILY(&sa_connect
[i
]) == GET_SS_FAMILY(&ServerInfo
.bind6
))
1194 sa_bind
[i
] = ServerInfo
.bind6
;
1199 if (ServerConfSCTP(server_p
)) {
1200 rb_connect_sctp(client_p
->localClient
->F
,
1201 sa_connect
, ARRAY_SIZE(sa_connect
), sa_bind
, ARRAY_SIZE(sa_bind
),
1202 ServerConfSSL(server_p
) ? serv_connect_ssl_callback
: serv_connect_callback
,
1203 client_p
, ConfigFileEntry
.connect_timeout
);
1208 rb_connect_tcp(client_p
->localClient
->F
,
1209 (struct sockaddr
*)&sa_connect
[0],
1210 GET_SS_FAMILY(&sa_bind
[0]) == AF_UNSPEC
? NULL
: (struct sockaddr
*)&sa_bind
[0],
1211 ServerConfSSL(server_p
) ? serv_connect_ssl_callback
: serv_connect_callback
,
1212 client_p
, ConfigFileEntry
.connect_timeout
);
1218 serv_connect_ssl_callback(rb_fde_t
*F
, int status
, void *data
)
1220 struct Client
*client_p
= data
;
1222 rb_connect_sockaddr(F
, (struct sockaddr
*)&client_p
->localClient
->ip
, sizeof(client_p
->localClient
->ip
));
1225 /* Print error message, just like non-SSL. */
1226 serv_connect_callback(F
, status
, data
);
1229 if(rb_socketpair(AF_UNIX
, SOCK_STREAM
, 0, &xF
[0], &xF
[1], "Outgoing ssld connection") == -1)
1231 ilog_error("rb_socketpair failed for server");
1232 serv_connect_callback(F
, RB_ERROR
, data
);
1236 client_p
->localClient
->F
= xF
[0];
1237 client_p
->localClient
->ssl_callback
= serv_connect_ssl_open_callback
;
1239 client_p
->localClient
->ssl_ctl
= start_ssld_connect(F
, xF
[1], connid_get(client_p
));
1240 if(!client_p
->localClient
->ssl_ctl
)
1242 serv_connect_callback(client_p
->localClient
->F
, RB_ERROR
, data
);
1249 serv_connect_ssl_open_callback(struct Client
*client_p
, int status
)
1251 serv_connect_callback(client_p
->localClient
->F
, status
, client_p
);
1252 return 1; /* suppress default exit_client handler for status != RB_OK */
1256 * serv_connect_callback() - complete a server connection.
1258 * This routine is called after the server connection attempt has
1259 * completed. If unsucessful, an error is sent to ops and the client
1260 * is closed. If sucessful, it goes through the initialisation/check
1261 * procedures, the capabilities are sent, and the socket is then
1262 * marked for reading.
1265 serv_connect_callback(rb_fde_t
*F
, int status
, void *data
)
1267 struct Client
*client_p
= data
;
1268 struct server_conf
*server_p
;
1271 /* First, make sure its a real client! */
1272 s_assert(client_p
!= NULL
);
1273 s_assert(client_p
->localClient
->F
== F
);
1275 if(client_p
== NULL
)
1278 /* while we were waiting for the callback, its possible this already
1281 if(find_server(NULL
, client_p
->name
) != NULL
)
1283 exit_client(client_p
, client_p
, &me
, "Server Exists");
1287 if(client_p
->localClient
->ssl_ctl
== NULL
)
1288 rb_connect_sockaddr(F
, (struct sockaddr
*)&client_p
->localClient
->ip
, sizeof(client_p
->localClient
->ip
));
1290 /* Check the status */
1293 /* COMM_ERR_TIMEOUT wont have an errno associated with it,
1294 * the others will.. --fl
1296 if(status
== RB_ERR_TIMEOUT
|| status
== RB_ERROR_SSL
)
1298 sendto_realops_snomask(SNO_GENERAL
, is_remote_connect(client_p
) ? L_NETWIDE
: L_ALL
,
1299 "Error connecting to %s[%s]: %s",
1303 ilog(L_SERVER
, "Error connecting to %s[%s]: %s",
1304 client_p
->name
, client_p
->sockhost
,
1309 errstr
= strerror(rb_get_sockerr(F
));
1310 sendto_realops_snomask(SNO_GENERAL
, is_remote_connect(client_p
) ? L_NETWIDE
: L_ALL
,
1311 "Error connecting to %s[%s]: %s (%s)",
1314 rb_errstr(status
), errstr
);
1315 ilog(L_SERVER
, "Error connecting to %s[%s]: %s (%s)",
1316 client_p
->name
, client_p
->sockhost
,
1317 rb_errstr(status
), errstr
);
1320 exit_client(client_p
, client_p
, &me
, rb_errstr(status
));
1324 /* COMM_OK, so continue the connection procedure */
1325 /* Get the C/N lines */
1326 if((server_p
= client_p
->localClient
->att_sconf
) == NULL
)
1328 sendto_realops_snomask(SNO_GENERAL
, is_remote_connect(client_p
) ? L_NETWIDE
: L_ALL
, "Lost connect{} block for %s",
1330 exit_client(client_p
, client_p
, &me
, "Lost connect{} block");
1334 if(server_p
->certfp
&& (!client_p
->certfp
|| rb_strcasecmp(server_p
->certfp
, client_p
->certfp
) != 0))
1336 sendto_realops_snomask(SNO_GENERAL
, is_remote_connect(client_p
) ? L_NETWIDE
: L_ALL
,
1337 "Connection to %s has invalid certificate fingerprint %s",
1338 client_p
->name
, client_p
->certfp
);
1339 ilog(L_SERVER
, "Access denied, invalid certificate fingerprint %s from %s",
1340 client_p
->certfp
, log_client_name(client_p
, SHOW_IP
));
1342 exit_client(client_p
, client_p
, &me
, "Invalid fingerprint.");
1346 /* Next, send the initial handshake */
1347 SetHandshake(client_p
);
1349 /* the server may be linking based on certificate fingerprint now. --nenolod */
1350 sendto_one(client_p
, "PASS %s TS %d :%s",
1351 EmptyString(server_p
->spasswd
) ? "*" : server_p
->spasswd
, TS_CURRENT
, me
.id
);
1353 /* pass my info to the new server */
1354 send_capabilities(client_p
, default_server_capabs
| CAP_MASK
1355 | (ServerConfCompressed(server_p
) ? CAP_ZIP_SUPPORTED
: 0)
1356 | (ServerConfTb(server_p
) ? CAP_TB
: 0));
1358 sendto_one(client_p
, "SERVER %s 1 :%s%s",
1360 ConfigServerHide
.hidden
? "(H) " : "", me
.info
);
1363 * If we've been marked dead because a send failed, just exit
1364 * here now and save everyone the trouble of us ever existing.
1366 if(IsAnyDead(client_p
))
1368 sendto_realops_snomask(SNO_GENERAL
, is_remote_connect(client_p
) ? L_NETWIDE
: L_ALL
,
1369 "%s went dead during handshake", client_p
->name
);
1370 exit_client(client_p
, client_p
, &me
, "Went dead during handshake");
1374 /* don't move to serv_list yet -- we haven't sent a burst! */
1376 /* If we get here, we're ok, so lets start reading some data */
1377 read_packet(F
, client_p
);