2 * Copyright (c) 2012 William Pitcock <nenolod@dereferenced.org>.
4 * Permission to use, copy, modify, and/or distribute this software for any
5 * purpose with or without fee is hereby granted, provided that the above
6 * copyright notice and this permission notice is present in all copies.
8 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
9 * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
10 * WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
11 * DISCLAIMED. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT,
12 * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
13 * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
14 * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
15 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
16 * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING
17 * IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
18 * POSSIBILITY OF SUCH DAMAGE.
33 static int mr_starttls(struct Client
*, struct Client
*, int, const char **);
35 struct Message starttls_msgtab
= {
36 "STARTTLS", 0, 0, 0, MFLG_SLOW
,
37 {{mr_starttls
, 0}, mg_ignore
, mg_ignore
, mg_ignore
, mg_ignore
, mg_ignore
}
40 mapi_clist_av1 starttls_clist
[] = { &starttls_msgtab
, NULL
};
42 DECLARE_MODULE_AV1(starttls
, NULL
, NULL
, starttls_clist
, NULL
, NULL
, "$Revision$");
45 mr_starttls(struct Client
*client_p
, struct Client
*source_p
, int parc
, const char *parv
[])
51 if (!MyConnect(client_p
))
54 if (!ssl_ok
|| !get_ssld_count())
56 sendto_one_numeric(client_p
, ERR_STARTTLS
, form_str(ERR_STARTTLS
), "TLS is not configured");
60 if (rb_socketpair(AF_UNIX
, SOCK_STREAM
, 0, &F
[0], &F
[1], "STARTTLS ssld session") == -1)
62 ilog_error("error creating SSL/TLS socketpair for ssld slave");
63 sendto_one_numeric(client_p
, ERR_STARTTLS
, form_str(ERR_STARTTLS
), "Unable to create SSL/TLS socketpair for ssld offload slave");
67 s_assert(client_p
->localClient
!= NULL
);
69 /* clear out any remaining plaintext lines */
70 rb_linebuf_donebuf(&client_p
->localClient
->buf_recvq
);
72 sendto_one_numeric(client_p
, RPL_STARTTLS
, form_str(RPL_STARTTLS
));
73 send_queued(client_p
);
75 ctl
= start_ssld_accept(client_p
->localClient
->F
, F
[1], rb_get_fd(F
[0]));
78 del_from_cli_fd_hash(client_p
);
79 client_p
->localClient
->F
= F
[0];
80 add_to_cli_fd_hash(client_p
);
81 client_p
->localClient
->ssl_ctl
= ctl
;
88 sendto_one_numeric(client_p
, ERR_STARTTLS
, form_str(ERR_STARTTLS
), "TLS is not configured");