]> git.netwichtig.de Git - user/henk/code/inspircd.git/blobdiff - src/modules/m_spanningtree.cpp
Changed AES negotiation to occur before SERVER
[user/henk/code/inspircd.git] / src / modules / m_spanningtree.cpp
index 8b8b28092f60a144b142e11982a21697f8895b80..09a3b2c56b2a0b302e62d858c3dbc290621f2b4c 100644 (file)
@@ -39,6 +39,9 @@ using namespace std;
 #include "hashcomp.h"
 #include "message.h"
 #include "xline.h"
+#include "typedefs.h"
+#include "cull_list.h"
+#include "aes.h"
 
 #ifdef GCC3
 #define nspace __gnu_cxx
@@ -92,8 +95,8 @@ extern int MODCOUNT;
 enum ServerState { LISTENER, CONNECTING, WAIT_AUTH_1, WAIT_AUTH_2, CONNECTED };
 
 /* We need to import these from the core for use in netbursts */
-typedef nspace::hash_map<std::string, userrec*, nspace::hash<string>, irc::StrHashComp> user_hash;
-typedef nspace::hash_map<std::string, chanrec*, nspace::hash<string>, irc::StrHashComp> chan_hash;
+/*typedef nspace::hash_map<std::string, userrec*, nspace::hash<string>, irc::StrHashComp> user_hash;
+typedef nspace::hash_map<std::string, chanrec*, nspace::hash<string>, irc::StrHashComp> chan_hash;*/
 extern user_hash clientlist;
 extern chan_hash chanlist;
 
@@ -106,6 +109,8 @@ class TreeSocket;
  */
 TreeServer *TreeRoot;
 
+Server* Srv;
+
 /* This hash_map holds the hash equivalent of the server
  * tree, used for rapid linear lookups.
  */
@@ -172,7 +177,7 @@ class TreeServer
                ServerDesc = "";
                VersionString = "";
                UserCount = OperCount = 0;
-               VersionString = GetVersionString();
+               VersionString = Srv->GetVersion();
        }
 
        /* We use this constructor only to create the 'root' item, TreeRoot, which
@@ -184,7 +189,7 @@ class TreeServer
                Parent = NULL;
                VersionString = "";
                UserCount = OperCount = 0;
-               VersionString = GetVersionString();
+               VersionString = Srv->GetVersion();
                Route = NULL;
                AddHashEntry();
        }
@@ -435,6 +440,7 @@ class Link
         std::string RecvPass;
         unsigned long AutoConnect;
         time_t NextConnectTime;
+        std::string EncryptionKey;
 };
 
 /* The usual stuff for inspircd modules,
@@ -442,7 +448,6 @@ class Link
  * use to store the <link> tags from the config
  * file.
  */
-Server *Srv;
 ConfigReader *Conf;
 std::vector<Link> LinkBlocks;
 
@@ -533,6 +538,8 @@ class TreeSocket : public InspSocket
        time_t NextPing;
        bool LastPingWasGood;
        bool bursting;
+       AES* ctx;
+       unsigned int keylength;
        
  public:
 
@@ -564,6 +571,33 @@ class TreeSocket : public InspSocket
        {
                this->LinkState = WAIT_AUTH_1;
        }
+
+       void InitAES(std::string key)
+       {
+               if (key == "")
+                       return;
+
+               ctx = new AES();
+               log(DEBUG,"Initialized AES key %s",key.c_str());
+               // key must be 16, 24, 32 etc bytes (multiple of 8)
+               keylength = key.length();
+               if (!(keylength == 16 || keylength == 24 || keylength == 32))
+               {
+                       WriteOpers("\2ERROR\2: Key length for encryptionkey is not 16, 24 or 32 bytes in length!");
+                       log(DEBUG,"Key length not 16, 24 or 32 characters!");
+               }
+               else
+               {
+                       std::string SName = myhost;
+                       if (InboundServerName != "")
+                       {
+                               SName = InboundServerName;
+                       }
+                       WriteOpers("\2AES\2: Initialized %d bit encryption to server %s",keylength*8,SName.c_str());
+                       ctx->MakeKey(key.c_str(), "\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\
+                               \0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", keylength, keylength);
+               }
+       }
        
        /* When an outbound connection finishes connecting, we receive
         * this event, and must send our SERVER string to the other
@@ -581,6 +615,11 @@ class TreeSocket : public InspSocket
                        {
                                if (x->Name == this->myhost)
                                {
+                                       if (x->EncryptionKey != "")
+                                       {
+                                               this->WriteLine("AES "+Srv->GetServerName());
+                                               this->InitAES(x->EncryptionKey);
+                                       }
                                        /* found who we're supposed to be connecting to, send the neccessary gubbins. */
                                        this->WriteLine("SERVER "+Srv->GetServerName()+" "+x->SendPass+" 0 :"+Srv->GetServerDescription());
                                        return true;
@@ -643,7 +682,7 @@ class TreeSocket : public InspSocket
         * is having a REAL bad hair day, this function shouldnt be called
         * too many times a month ;-)
         */
-       void SquitServer(TreeServer* Current)
+       void SquitServer(TreeServer* Current, CullList* Goners)
        {
                /* recursively squit the servers attached to 'Current'.
                 * We're going backwards so we don't remove users
@@ -652,29 +691,17 @@ class TreeSocket : public InspSocket
                for (unsigned int q = 0; q < Current->ChildCount(); q++)
                {
                        TreeServer* recursive_server = Current->GetChild(q);
-                       this->SquitServer(recursive_server);
+                       this->SquitServer(recursive_server,Goners);
                }
                /* Now we've whacked the kids, whack self */
                num_lost_servers++;
-               bool quittingpeople = true;
-               while (quittingpeople)
-               {
-                       /* Yup i know, "ew". We cant continue to loop through the
-                        * iterator if we modify it, so whenever we modify it with a
-                        * QUIT we have to start alllll over again. If anyone knows
-                        * a better faster way of *safely* doing this, please let me
-                        * know!
-                        */
-                       quittingpeople = false;
-                       for (user_hash::iterator u = clientlist.begin(); u != clientlist.end(); u++)
+               for (user_hash::iterator u = clientlist.begin(); u != clientlist.end(); u++)
+               {
+                       if (!strcasecmp(u->second->server,Current->GetName().c_str()))
                        {
-                               if (!strcasecmp(u->second->server,Current->GetName().c_str()))
-                               {
-                                       Srv->QuitUser(u->second,Current->GetName()+" "+std::string(Srv->GetServerName()));
-                                       num_lost_users++;
-                                       quittingpeople = true;
-                                       break;
-                               }
+                               std::string qreason = Current->GetName()+" "+std::string(Srv->GetServerName());
+                               Goners->AddItem(u->second,qreason);
+                               num_lost_users++;
                        }
                }
        }
@@ -701,10 +728,13 @@ class TreeSocket : public InspSocket
                        }
                        num_lost_servers = 0;
                        num_lost_users = 0;
-                       SquitServer(Current);
+                       CullList* Goners = new CullList();
+                       SquitServer(Current, Goners);
+                       Goners->Apply();
                        Current->Tidy();
                        Current->GetParent()->DelChild(Current);
                        delete Current;
+                       delete Goners;
                        WriteOpers("Netsplit complete, lost \002%d\002 users on \002%d\002 servers.", num_lost_users, num_lost_servers);
                }
                else
@@ -938,11 +968,13 @@ class TreeSocket : public InspSocket
                clientlist[tempnick]->signon = age;
                strlcpy(clientlist[tempnick]->modes, modes.c_str(),53);
                strlcpy(clientlist[tempnick]->ip,ip.c_str(),16);
+
+               ucrec a;
+               a.channel = NULL;
+               a.uc_modes = 0;
                for (int i = 0; i < MAXCHANS; i++)
-               {
-                       clientlist[tempnick]->chans[i].channel = NULL;
-                       clientlist[tempnick]->chans[i].uc_modes = 0;
-               }
+                       clientlist[tempnick]->chans.push_back(a);
+
                if (!this->bursting)
                {
                        WriteOpers("*** Client connecting at %s: %s!%s@%s [%s]",clientlist[tempnick]->server,clientlist[tempnick]->nick,clientlist[tempnick]->ident,clientlist[tempnick]->host,clientlist[tempnick]->ip);
@@ -958,6 +990,7 @@ class TreeSocket : public InspSocket
         */
        void SendFJoins(TreeServer* Current, chanrec* c)
        {
+               log(DEBUG,"Sending FJOINs to other server for %s",c->name);
                char list[MAXBUF];
                snprintf(list,MAXBUF,":%s FJOIN %s %lu",Srv->GetServerName().c_str(),c->name,(unsigned long)c->age);
                std::vector<char*> *ulist = c->GetUsers();
@@ -970,12 +1003,14 @@ class TreeSocket : public InspSocket
                        strlcat(list,otheruser->nick,MAXBUF);
                        if (strlen(list)>(480-NICKMAX))
                        {
+                               log(DEBUG,"FJOIN line wrapped");
                                this->WriteLine(list);
                                snprintf(list,MAXBUF,":%s FJOIN %s %lu",Srv->GetServerName().c_str(),c->name,(unsigned long)c->age);
                        }
                }
                if (list[strlen(list)-1] != ':')
                {
+                       log(DEBUG,"Final FJOIN line");
                        this->WriteLine(list);
                }
        }
@@ -1093,7 +1128,7 @@ class TreeSocket : public InspSocket
                Srv->SendOpers("*** Bursting to \2"+s->GetName()+"\2.");
                this->WriteLine("BURST");
                /* send our version string */
-               this->WriteLine(":"+Srv->GetServerName()+" VERSION :"+GetVersionString());
+               this->WriteLine(":"+Srv->GetServerName()+" VERSION :"+Srv->GetVersion());
                /* Send server tree */
                this->SendServers(TreeRoot,s,1);
                /* Send users and their oper status */
@@ -1137,6 +1172,18 @@ class TreeSocket : public InspSocket
                                /* Process this one, abort if it
                                 * didnt return true.
                                 */
+                               if (this->ctx)
+                               {
+                                       char out[1024];
+                                       char result[1024];
+                                       log(DEBUG,"Original string '%s'",ret.c_str());
+                                       int nbytes = from64tobits(out, ret.c_str(), 1024);
+                                       log(DEBUG,"m_spanningtree: decrypt %d bytes",nbytes);
+                                       ctx->Decrypt(out, result, nbytes, 0);
+                                       for (int t = 0; t < nbytes; t++)
+                                               if (result[t] == '\7') result[t] = 0;
+                                       ret = result;
+                               }
                                if (!this->ProcessLine(ret))
                                {
                                        return false;
@@ -1148,6 +1195,28 @@ class TreeSocket : public InspSocket
 
        int WriteLine(std::string line)
        {
+               log(DEBUG,"OUT: %s",line.c_str());
+               if (this->ctx)
+               {
+                       log(DEBUG,"AES context");
+                       char result[1024];
+                       char result64[1024];
+                       if (this->keylength)
+                       {
+                               while (line.length() % this->keylength != 0)
+                               {
+                                       // pad it to be a multiple of the key length
+                                       line = line + "\7";
+                               }
+                       }
+                       ctx->Encrypt(line.c_str(), result, line.length(),0);
+                       to64frombits((unsigned char*)result64,
+                                       (unsigned char*)result,
+                                       line.length());
+                       line = result64;
+                       log(DEBUG,"Encrypted: %s",line.c_str());
+                       //int from64tobits(char *out, const char *in, int maxlen);
+               }
                return this->Write(line + "\r\n");
        }
 
@@ -1399,7 +1468,7 @@ class TreeSocket : public InspSocket
                        if (params.size() == 1)
                        {
                                userrec* x = Srv->FindNick(params[0]);
-                               if (std::string(x->server) == Srv->GetServerName())
+                               if (x->fd > -1)
                                {
                                        userrec* x = Srv->FindNick(params[0]);
                                        log(DEBUG,"Got IDLE");
@@ -1425,14 +1494,14 @@ class TreeSocket : public InspSocket
                        {
                                std::string who_did_the_whois = params[0];
                                userrec* who_to_send_to = Srv->FindNick(who_did_the_whois);
-                               if (std::string(who_to_send_to->server) == Srv->GetServerName())
+                               if (who_to_send_to->fd > -1)
                                {
                                        log(DEBUG,"Got final IDLE");
                                        // an incoming reply to a whois we sent out
                                        std::string nick_whoised = prefix;
                                        unsigned long signon = atoi(params[1].c_str());
                                        unsigned long idle = atoi(params[2].c_str());
-                                       if ((who_to_send_to) && (std::string(who_to_send_to->server) == Srv->GetServerName()))
+                                       if ((who_to_send_to) && (who_to_send_to->fd > -1))
                                                do_whois(who_to_send_to,u,signon,idle,(char*)nick_whoised.c_str());
                                }
                                else
@@ -1622,7 +1691,7 @@ class TreeSocket : public InspSocket
                line = l;
                if (line == "")
                        return true;
-               Srv->Log(DEBUG,"IN: '"+line+"'");
+               Srv->Log(DEBUG,"IN: "+line);
                std::deque<std::string> params;
                this->Split(line,true,params);
                std::string command = "";
@@ -1642,6 +1711,19 @@ class TreeSocket : public InspSocket
                        command = params[0];
                        params.pop_front();
                }
+
+               if ((!this->ctx) && (command == "AES"))
+               {
+                        std::string sserv = params[0];
+                        for (std::vector<Link>::iterator x = LinkBlocks.begin(); x < LinkBlocks.end(); x++)
+                        {
+                                if ((x->EncryptionKey != "") && (x->Name == sserv))
+                                {
+                                        this->InitAES(x->EncryptionKey);
+                                }
+                        }
+                        return true;
+               }
                
                switch (this->LinkState)
                {
@@ -1956,7 +2038,7 @@ void GetListOfServersForChannel(chanrec* c, std::deque<TreeServer*> &list)
        {
                char* o = (*ulist)[i];
                userrec* otheruser = (userrec*)o;
-               if (std::string(otheruser->server) != Srv->GetServerName())
+               if (otheruser->fd < 0)
                {
                        TreeServer* best = BestRouteTo(otheruser->server);
                        if (best)
@@ -2137,9 +2219,18 @@ void ReadConfiguration(bool rebind)
                L.SendPass = Conf->ReadValue("link","sendpass",j);
                L.RecvPass = Conf->ReadValue("link","recvpass",j);
                L.AutoConnect = Conf->ReadInteger("link","autoconnect",j,true);
+               L.EncryptionKey =  Conf->ReadValue("link","encryptionkey",j);
                L.NextConnectTime = time(NULL) + L.AutoConnect;
-               LinkBlocks.push_back(L);
-               log(DEBUG,"m_spanningtree: Read server %s with host %s:%d",L.Name.c_str(),L.IPAddr.c_str(),L.Port);
+               /* Bugfix by brain, do not allow people to enter bad configurations */
+               if ((L.RecvPass != "") && (L.SendPass != "") && (L.Name != "") && (L.Port))
+               {
+                       LinkBlocks.push_back(L);
+                       log(DEBUG,"m_spanningtree: Read server %s with host %s:%d",L.Name.c_str(),L.IPAddr.c_str(),L.Port);
+               }
+               else
+               {
+                       log(DEFAULT,"m_spanningtree: Invalid configuration for server '%s', ignored!",L.Name.c_str());
+               }
        }
        delete Conf;
 }
@@ -2312,10 +2403,10 @@ class ModuleSpanningTree : public Module
 
        int HandleRemoteWhois(char** parameters, int pcnt, userrec* user)
        {
-               if ((std::string(user->server) == Srv->GetServerName()) && (pcnt > 1))
+               if ((user->fd > -1) && (pcnt > 1))
                {
                        userrec* remote = Srv->FindNick(parameters[1]);
-                       if ((remote) && (std::string(remote->server) != Srv->GetServerName()))
+                       if ((remote) && (remote->fd < 0))
                        {
                                std::deque<std::string> params;
                                params.push_back(parameters[1]);
@@ -2515,7 +2606,7 @@ class ModuleSpanningTree : public Module
 
        virtual void OnUserInvite(userrec* source,userrec* dest,chanrec* channel)
        {
-               if (std::string(source->server) == Srv->GetServerName())
+               if (source->fd > -1)
                {
                        std::deque<std::string> params;
                        params.push_back(dest->nick);
@@ -2534,7 +2625,7 @@ class ModuleSpanningTree : public Module
 
        virtual void OnWallops(userrec* user, std::string text)
        {
-               if (std::string(user->server) == Srv->GetServerName())
+               if (user->fd > -1)
                {
                        std::deque<std::string> params;
                        params.push_back(":"+text);
@@ -2547,7 +2638,7 @@ class ModuleSpanningTree : public Module
                if (target_type == TYPE_USER)
                {
                        userrec* d = (userrec*)dest;
-                       if ((std::string(d->server) != Srv->GetServerName()) && (std::string(user->server) == Srv->GetServerName()))
+                       if ((d->fd < 0) && (user->fd > -1))
                        {
                                std::deque<std::string> params;
                                params.clear();
@@ -2558,7 +2649,7 @@ class ModuleSpanningTree : public Module
                }
                else
                {
-                       if (std::string(user->server) == Srv->GetServerName())
+                       if (user->fd > -1)
                        {
                                chanrec *c = (chanrec*)dest;
                                std::deque<TreeServer*> list;
@@ -2581,7 +2672,7 @@ class ModuleSpanningTree : public Module
                        // route private messages which are targetted at clients only to the server
                        // which needs to receive them
                        userrec* d = (userrec*)dest;
-                       if ((std::string(d->server) != Srv->GetServerName()) && (std::string(user->server) == Srv->GetServerName()))
+                       if ((d->fd < 0) && (user->fd > -1))
                        {
                                std::deque<std::string> params;
                                params.clear();
@@ -2592,7 +2683,7 @@ class ModuleSpanningTree : public Module
                }
                else
                {
-                       if (std::string(user->server) == Srv->GetServerName())
+                       if (user->fd > -1)
                        {
                                chanrec *c = (chanrec*)dest;
                                std::deque<TreeServer*> list;
@@ -2617,7 +2708,7 @@ class ModuleSpanningTree : public Module
        virtual void OnUserJoin(userrec* user, chanrec* channel)
        {
                // Only do this for local users
-               if (std::string(user->server) == Srv->GetServerName())
+               if (user->fd > -1)
                {
                        std::deque<std::string> params;
                        params.clear();
@@ -2669,7 +2760,7 @@ class ModuleSpanningTree : public Module
 
        virtual void OnUserPart(userrec* user, chanrec* channel)
        {
-               if (std::string(user->server) == Srv->GetServerName())
+               if (user->fd > -1)
                {
                        std::deque<std::string> params;
                        params.push_back(channel->name);
@@ -2680,7 +2771,7 @@ class ModuleSpanningTree : public Module
        virtual void OnUserConnect(userrec* user)
        {
                char agestr[MAXBUF];
-               if (std::string(user->server) == Srv->GetServerName())
+               if (user->fd > -1)
                {
                        std::deque<std::string> params;
                        snprintf(agestr,MAXBUF,"%lu",(unsigned long)user->age);
@@ -2698,7 +2789,7 @@ class ModuleSpanningTree : public Module
 
        virtual void OnUserQuit(userrec* user, std::string reason)
        {
-               if ((std::string(user->server) == Srv->GetServerName()) && (user->registered == 7))
+               if ((user->fd > -1) && (user->registered == 7))
                {
                        std::deque<std::string> params;
                        params.push_back(":"+reason);
@@ -2708,7 +2799,7 @@ class ModuleSpanningTree : public Module
 
        virtual void OnUserPostNick(userrec* user, std::string oldnick)
        {
-               if (std::string(user->server) == Srv->GetServerName())
+               if (user->fd > -1)
                {
                        std::deque<std::string> params;
                        params.push_back(user->nick);
@@ -2718,7 +2809,7 @@ class ModuleSpanningTree : public Module
 
        virtual void OnUserKick(userrec* source, userrec* user, chanrec* chan, std::string reason)
        {
-               if (std::string(source->server) == Srv->GetServerName())
+               if (source->fd > -1)
                {
                        std::deque<std::string> params;
                        params.push_back(chan->name);
@@ -2758,7 +2849,7 @@ class ModuleSpanningTree : public Module
        // locally.
        virtual void OnOper(userrec* user, std::string opertype)
        {
-               if (std::string(user->server) == Srv->GetServerName())
+               if (user->fd > -1)
                {
                        std::deque<std::string> params;
                        params.push_back(opertype);
@@ -2768,7 +2859,7 @@ class ModuleSpanningTree : public Module
 
        void OnLine(userrec* source, std::string host, bool adding, char linetype, long duration, std::string reason)
        {
-               if (std::string(source->server) == Srv->GetServerName())
+               if (source->fd > -1)
                {
                        char type[8];
                        snprintf(type,8,"%cLINE",linetype);
@@ -2834,7 +2925,7 @@ class ModuleSpanningTree : public Module
 
        virtual void OnMode(userrec* user, void* dest, int target_type, std::string text)
        {
-               if ((std::string(user->server) == Srv->GetServerName()) && (user->registered == 7))
+               if ((user->fd > -1) && (user->registered == 7))
                {
                        if (target_type == TYPE_USER)
                        {