5 Author: Pekka Riikonen <priikone@silcnet.org>
7 Copyright (C) 1997 - 2002 Pekka Riikonen
9 This program is free software; you can redistribute it and/or modify
10 it under the terms of the GNU General Public License as published by
11 the Free Software Foundation; either version 2 of the License, or
12 (at your option) any later version.
14 This program is distributed in the hope that it will be useful,
15 but WITHOUT ANY WARRANTY; without even the implied warranty of
16 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
17 GNU General Public License for more details.
21 * This is the actual SILC server than handles everything relating to
22 * servicing the SILC connections. This is also a SILC router as a router
23 * is also normal server.
27 #include "serverincludes.h"
28 #include "server_internal.h"
30 /* Static prototypes */
31 SILC_TASK_CALLBACK(silc_server_connect_to_router_retry);
32 SILC_TASK_CALLBACK(silc_server_connect_router);
33 SILC_TASK_CALLBACK(silc_server_connect_to_router);
34 SILC_TASK_CALLBACK(silc_server_connect_to_router_second);
35 SILC_TASK_CALLBACK(silc_server_connect_to_router_final);
36 SILC_TASK_CALLBACK(silc_server_accept_new_connection);
37 SILC_TASK_CALLBACK(silc_server_accept_new_connection_second);
38 SILC_TASK_CALLBACK(silc_server_accept_new_connection_final);
39 SILC_TASK_CALLBACK(silc_server_packet_process);
40 SILC_TASK_CALLBACK(silc_server_packet_parse_real);
41 SILC_TASK_CALLBACK(silc_server_close_connection_final);
42 SILC_TASK_CALLBACK(silc_server_free_client_data_timeout);
43 SILC_TASK_CALLBACK(silc_server_timeout_remote);
44 SILC_TASK_CALLBACK(silc_server_channel_key_rekey);
45 SILC_TASK_CALLBACK(silc_server_failure_callback);
46 SILC_TASK_CALLBACK(silc_server_rekey_callback);
47 SILC_TASK_CALLBACK(silc_server_get_stats);
49 /* Allocates a new SILC server object. This has to be done before the server
50 can be used. After allocation one must call silc_server_init to initialize
51 the server. The new allocated server object is returned to the new_server
54 int silc_server_alloc(SilcServer *new_server)
58 SILC_LOG_DEBUG(("Allocating new server object"));
60 server = silc_calloc(1, sizeof(*server));
61 server->server_type = SILC_SERVER;
62 server->standalone = TRUE;
63 server->local_list = silc_calloc(1, sizeof(*server->local_list));
64 server->global_list = silc_calloc(1, sizeof(*server->global_list));
65 server->pending_commands = silc_dlist_init();
67 server->sim = silc_dlist_init();
75 /* Free's the SILC server object. This is called at the very end before
78 void silc_server_free(SilcServer server)
84 while ((sim = silc_dlist_get(server->sim)) != SILC_LIST_END) {
85 silc_dlist_del(server->sim, sim);
88 silc_dlist_uninit(server->sim);
91 silc_server_config_unref(&server->config_ref);
93 silc_rng_free(server->rng);
95 silc_pkcs_free(server->pkcs);
96 if (server->public_key)
97 silc_pkcs_public_key_free(server->public_key);
98 if (server->private_key)
99 silc_pkcs_private_key_free(server->private_key);
100 if (server->pending_commands)
101 silc_dlist_uninit(server->pending_commands);
102 if (server->id_entry)
103 silc_idlist_del_server(server->local_list, server->id_entry);
105 silc_idcache_free(server->local_list->clients);
106 silc_idcache_free(server->local_list->servers);
107 silc_idcache_free(server->local_list->channels);
108 silc_idcache_free(server->global_list->clients);
109 silc_idcache_free(server->global_list->servers);
110 silc_idcache_free(server->global_list->channels);
112 silc_free(server->sockets);
117 /* Opens a listening port.
118 XXX This function will become more general and will support multiple
121 static bool silc_server_listen(SilcServer server, int *sock)
124 *sock = silc_net_create_server(server->config->server_info->port,
125 server->config->server_info->server_ip);
127 SILC_LOG_ERROR(("Could not create server listener: %s on %hu",
128 server->config->server_info->server_ip,
129 server->config->server_info->port));
135 /* Initializes the entire SILC server. This is called always before running
136 the server. This is called only once at the initialization of the program.
137 This binds the server to its listenning port. After this function returns
138 one should call silc_server_run to start the server. This returns TRUE
139 when everything is ok to run the server. Configuration file must be
140 read and parsed before calling this. */
142 bool silc_server_init(SilcServer server)
146 SilcServerEntry id_entry;
147 SilcIDListPurge purge;
148 SilcSocketConnection newsocket = NULL;
150 SILC_LOG_DEBUG(("Initializing server"));
152 server->starttime = time(NULL);
154 /* Take config object for us */
155 silc_server_config_ref(&server->config_ref, server->config,
158 /* Steal public and private key from the config object */
159 server->public_key = server->config->server_info->public_key;
160 server->private_key = server->config->server_info->private_key;
161 server->config->server_info->public_key = NULL;
162 server->config->server_info->private_key = NULL;
164 /* Register all configured ciphers, PKCS and hash functions. */
165 if (!silc_server_config_register_ciphers(server))
166 silc_cipher_register_default();
167 if (!silc_server_config_register_pkcs(server))
168 silc_pkcs_register_default();
169 if (!silc_server_config_register_hashfuncs(server))
170 silc_hash_register_default();
171 if (!silc_server_config_register_hmacs(server))
172 silc_hmac_register_default();
174 /* Initialize random number generator for the server. */
175 server->rng = silc_rng_alloc();
176 silc_rng_init(server->rng);
177 silc_rng_global_init(server->rng);
179 /* Initialize hash functions for server to use */
180 silc_hash_alloc("md5", &server->md5hash);
181 silc_hash_alloc("sha1", &server->sha1hash);
183 /* Allocate PKCS context for local public and private keys */
184 if (!silc_pkcs_alloc(server->public_key->name, &server->pkcs))
186 silc_pkcs_public_key_set(server->pkcs, server->public_key);
187 silc_pkcs_private_key_set(server->pkcs, server->private_key);
189 /* Initialize the scheduler */
190 server->schedule = silc_schedule_init(server->config->param.connections_max);
191 if (!server->schedule)
194 /* First, register log files configuration for error output */
195 silc_server_config_setlogfiles(server);
197 /* Initialize ID caches */
198 server->local_list->clients =
199 silc_idcache_alloc(0, SILC_ID_CLIENT, silc_idlist_client_destructor);
200 server->local_list->servers = silc_idcache_alloc(0, SILC_ID_SERVER, NULL);
201 server->local_list->channels = silc_idcache_alloc(0, SILC_ID_CHANNEL, NULL);
203 /* These are allocated for normal server as well as these hold some
204 global information that the server has fetched from its router. For
205 router these are used as they are supposed to be used on router. */
206 server->global_list->clients =
207 silc_idcache_alloc(0, SILC_ID_CLIENT, silc_idlist_client_destructor);
208 server->global_list->servers = silc_idcache_alloc(0, SILC_ID_SERVER, NULL);
209 server->global_list->channels = silc_idcache_alloc(0, SILC_ID_CHANNEL, NULL);
211 /* Create a listening server */
212 if (!silc_server_listen(server, &sock))
215 /* Set socket to non-blocking mode */
216 silc_net_set_socket_nonblock(sock);
219 /* Allocate the entire socket list that is used in server. Eventually
220 all connections will have entry in this table (it is a table of
221 pointers to the actual object that is allocated individually
223 server->sockets = silc_calloc(server->config->param.connections_max,
224 sizeof(*server->sockets));
225 if (!server->sockets)
228 /* Add ourselves also to the socket table. The entry allocated above
229 is sent as argument for fast referencing in the future. */
230 silc_socket_alloc(sock, SILC_SOCKET_TYPE_SERVER, NULL, &newsocket);
231 server->sockets[sock] = newsocket;
233 /* Perform name and address lookups to resolve the listenning address
235 if (!silc_net_check_local_by_sock(sock, &newsocket->hostname,
237 if ((server->config->require_reverse_lookup && !newsocket->hostname) ||
239 SILC_LOG_ERROR(("IP/DNS lookup failed for local host %s",
240 newsocket->hostname ? newsocket->hostname :
241 newsocket->ip ? newsocket->ip : ""));
242 server->stat.conn_failures++;
245 if (!newsocket->hostname)
246 newsocket->hostname = strdup(newsocket->ip);
248 newsocket->port = silc_net_get_local_port(sock);
250 /* Create a Server ID for the server. */
251 silc_id_create_server_id(newsocket->ip, newsocket->port, server->rng, &id);
256 server->id_string = silc_id_id2str(id, SILC_ID_SERVER);
257 server->id_string_len = silc_id_get_len(id, SILC_ID_SERVER);
258 server->id_type = SILC_ID_SERVER;
259 server->server_name = server->config->server_info->server_name;
260 server->config->server_info->server_name = NULL;
262 /* Add ourselves to the server list. We don't have a router yet
263 beacuse we haven't established a route yet. It will be done later.
264 For now, NULL is sent as router. This allocates new entry to
267 silc_idlist_add_server(server->local_list, strdup(server->server_name),
268 server->server_type, server->id, NULL, NULL);
270 SILC_LOG_ERROR(("Could not add ourselves to cache"));
273 id_entry->data.status |= SILC_IDLIST_STATUS_REGISTERED;
275 /* Put the allocated socket pointer also to the entry allocated above
276 for fast back-referencing to the socket list. */
277 newsocket->user_data = (void *)id_entry;
278 id_entry->connection = (void *)newsocket;
279 server->id_entry = id_entry;
281 /* Register protocols */
282 silc_server_protocols_register();
284 /* Add the first task to the scheduler. This is task that is executed by
285 timeout. It expires as soon as the caller calls silc_server_run. This
286 task performs authentication protocol and key exchange with our
288 silc_schedule_task_add(server->schedule, 0,
289 silc_server_connect_to_router,
290 (void *)server, 0, 1,
292 SILC_TASK_PRI_NORMAL);
294 /* Add listener task to the scheduler. This task receives new connections
295 to the server. This task remains on the queue until the end of the
297 silc_schedule_task_add(server->schedule, sock,
298 silc_server_accept_new_connection,
299 (void *)server, 0, 0,
301 SILC_TASK_PRI_NORMAL);
302 server->listenning = TRUE;
304 /* If server connections has been configured then we must be router as
305 normal server cannot have server connections, only router connections. */
306 if (server->config->servers) {
307 SilcServerConfigServer *ptr = server->config->servers;
309 server->server_type = SILC_ROUTER;
311 if (ptr->backup_router) {
312 server->server_type = SILC_BACKUP_ROUTER;
313 server->backup_router = TRUE;
314 server->id_entry->server_type = SILC_BACKUP_ROUTER;
321 /* Register the ID Cache purge task. This periodically purges the ID cache
322 and removes the expired cache entries. */
324 /* Clients local list */
325 purge = silc_calloc(1, sizeof(*purge));
326 purge->cache = server->local_list->clients;
327 purge->schedule = server->schedule;
328 purge->timeout = 600;
329 silc_schedule_task_add(purge->schedule, 0,
331 (void *)purge, purge->timeout, 0,
332 SILC_TASK_TIMEOUT, SILC_TASK_PRI_LOW);
334 /* Clients global list */
335 purge = silc_calloc(1, sizeof(*purge));
336 purge->cache = server->global_list->clients;
337 purge->schedule = server->schedule;
338 purge->timeout = 300;
339 silc_schedule_task_add(purge->schedule, 0,
341 (void *)purge, purge->timeout, 0,
342 SILC_TASK_TIMEOUT, SILC_TASK_PRI_LOW);
344 /* If we are normal server we'll retrieve network statisticial information
345 once in a while from the router. */
346 if (server->server_type == SILC_SERVER)
347 silc_schedule_task_add(purge->schedule, 0, silc_server_get_stats,
348 server, 10, 0, SILC_TASK_TIMEOUT,
351 SILC_LOG_DEBUG(("Server initialized"));
353 /* We are done here, return succesfully */
357 silc_server_config_unref(&server->config_ref);
358 silc_net_close_server(sock);
362 /* This function basically reads the config file again and switches the config
363 object pointed by the server object. After that, we have to fix various
364 things such as the server_name and the listening ports.
365 Keep in mind that we no longer have the root privileges at this point. */
367 bool silc_server_rehash(SilcServer server)
369 SilcServerConfig newconfig;
371 SILC_LOG_INFO(("Rehashing server"));
373 /* Reset the logging system */
374 silc_log_quick = TRUE;
375 silc_log_flush_all();
377 /* Start the main rehash phase (read again the config file) */
378 newconfig = silc_server_config_alloc(server->config_file);
380 SILC_LOG_ERROR(("Rehash FAILED."));
384 /* Reinit scheduler if necessary */
385 if (newconfig->param.connections_max > server->config->param.connections_max)
386 if (!silc_schedule_reinit(server->schedule,
387 newconfig->param.connections_max))
390 /* Fix the server_name field */
391 if (strcmp(server->server_name, newconfig->server_info->server_name)) {
392 silc_free(server->server_name);
393 server->server_name = newconfig->server_info->server_name;
394 newconfig->server_info->server_name = NULL;
396 /* Update the idcache list with a fresh pointer */
397 silc_free(server->id_entry->server_name);
398 server->id_entry->server_name = strdup(server->server_name);
399 if (!silc_idcache_del_by_context(server->local_list->servers,
402 if (!silc_idcache_add(server->local_list->servers,
403 server->id_entry->server_name,
404 server->id_entry->id, server->id_entry, 0, NULL))
409 silc_server_config_setlogfiles(server);
411 /* Change new key pair if necessary */
412 if (newconfig->server_info->public_key &&
413 !silc_pkcs_public_key_compare(server->public_key,
414 newconfig->server_info->public_key)) {
415 silc_pkcs_public_key_free(server->public_key);
416 silc_pkcs_private_key_free(server->private_key);
417 server->public_key = newconfig->server_info->public_key;
418 server->private_key = newconfig->server_info->private_key;
419 newconfig->server_info->public_key = NULL;
420 newconfig->server_info->private_key = NULL;
422 /* Allocate PKCS context for local public and private keys */
423 silc_pkcs_free(server->pkcs);
424 if (!silc_pkcs_alloc(server->public_key->name, &server->pkcs))
426 silc_pkcs_public_key_set(server->pkcs, server->public_key);
427 silc_pkcs_private_key_set(server->pkcs, server->private_key);
430 /* Go through all configured routers after rehash */
431 silc_schedule_task_add(server->schedule, 0,
432 silc_server_connect_to_router,
433 (void *)server, 0, 1,
435 SILC_TASK_PRI_NORMAL);
437 /* Check whether our router status has changed */
438 if (newconfig->servers) {
439 SilcServerConfigServer *ptr = newconfig->servers;
441 server->server_type = SILC_ROUTER;
443 if (ptr->backup_router) {
444 server->server_type = SILC_BACKUP_ROUTER;
445 server->backup_router = TRUE;
446 server->id_entry->server_type = SILC_BACKUP_ROUTER;
453 /* Our old config is gone now. We'll unreference our reference made in
454 silc_server_init and then destroy it since we are destroying it
455 underneath the application (layer which called silc_server_init). */
456 silc_server_config_unref(&server->config_ref);
457 silc_server_config_destroy(server->config);
459 /* Take new config context */
460 server->config = newconfig;
461 silc_server_config_ref(&server->config_ref, server->config, server->config);
463 SILC_LOG_DEBUG(("Server rehashed"));
468 /* The heart of the server. This runs the scheduler thus runs the server.
469 When this returns the server has been stopped and the program will
472 void silc_server_run(SilcServer server)
474 SILC_LOG_INFO(("SILC Server started"));
476 /* Start the scheduler, the heart of the SILC server. When this returns
477 the program will be terminated. */
478 silc_schedule(server->schedule);
481 /* Stops the SILC server. This function is used to shutdown the server.
482 This is usually called after the scheduler has returned. After stopping
483 the server one should call silc_server_free. */
485 void silc_server_stop(SilcServer server)
487 SILC_LOG_DEBUG(("Stopping server"));
489 if (server->schedule) {
490 silc_schedule_stop(server->schedule);
491 silc_schedule_uninit(server->schedule);
492 server->schedule = NULL;
495 silc_server_protocols_unregister();
497 SILC_LOG_DEBUG(("Server stopped"));
500 /* Function that is called when the network connection to a router has
501 been established. This will continue with the key exchange protocol
502 with the remote router. */
504 void silc_server_start_key_exchange(SilcServer server,
505 SilcServerConnection sconn,
508 SilcSocketConnection newsocket;
509 SilcProtocol protocol;
510 SilcServerKEInternalContext *proto_ctx;
511 SilcServerConfigRouter *conn =
512 (SilcServerConfigRouter *) sconn->conn.ref_ptr;
515 /* Cancel any possible retry timeouts */
516 silc_schedule_task_del_by_callback(server->schedule,
517 silc_server_connect_router);
519 /* Set socket options */
520 silc_net_set_socket_nonblock(sock);
521 silc_net_set_socket_opt(sock, SOL_SOCKET, SO_REUSEADDR, 1);
523 /* Create socket connection for the connection. Even though we
524 know that we are connecting to a router we will mark the socket
525 to be unknown connection until we have executed authentication
527 silc_socket_alloc(sock, SILC_SOCKET_TYPE_UNKNOWN, NULL, &newsocket);
528 server->sockets[sock] = newsocket;
529 newsocket->hostname = strdup(sconn->remote_host);
530 newsocket->ip = strdup(sconn->remote_host);
531 newsocket->port = sconn->remote_port;
532 sconn->sock = newsocket;
534 /* Allocate internal protocol context. This is sent as context
536 proto_ctx = silc_calloc(1, sizeof(*proto_ctx));
537 proto_ctx->server = (void *)server;
538 proto_ctx->context = (void *)sconn;
539 proto_ctx->sock = newsocket;
540 proto_ctx->rng = server->rng;
541 proto_ctx->responder = FALSE;
543 /* Set Key Exchange flags from configuration, but fall back to global
545 SILC_GET_SKE_FLAGS(conn, proto_ctx);
546 if (server->config->param.key_exchange_pfs)
547 proto_ctx->flags |= SILC_SKE_SP_FLAG_PFS;
549 /* Perform key exchange protocol. silc_server_connect_to_router_second
550 will be called after the protocol is finished. */
551 silc_protocol_alloc(SILC_PROTOCOL_SERVER_KEY_EXCHANGE,
552 &protocol, proto_ctx,
553 silc_server_connect_to_router_second);
554 newsocket->protocol = protocol;
556 /* Register a timeout task that will be executed if the protocol
557 is not executed within set limit. */
558 proto_ctx->timeout_task =
559 silc_schedule_task_add(server->schedule, sock,
560 silc_server_timeout_remote,
561 server, server->config->key_exchange_timeout, 0,
565 /* Register the connection for network input and output. This sets
566 that scheduler will listen for incoming packets for this connection
567 and sets that outgoing packets may be sent to this connection as
568 well. However, this doesn't set the scheduler for outgoing traffic,
569 it will be set separately by calling SILC_SET_CONNECTION_FOR_OUTPUT,
570 later when outgoing data is available. */
571 context = (void *)server;
572 SILC_REGISTER_CONNECTION_FOR_IO(sock);
574 /* Run the protocol */
575 silc_protocol_execute(protocol, server->schedule, 0, 0);
578 /* Timeout callback that will be called to retry connecting to remote
579 router. This is used by both normal and router server. This will wait
580 before retrying the connecting. The timeout is generated by exponential
581 backoff algorithm. */
583 SILC_TASK_CALLBACK(silc_server_connect_to_router_retry)
585 SilcServerConnection sconn = (SilcServerConnection)context;
586 SilcServer server = sconn->server;
587 SilcServerConfigRouter *conn = sconn->conn.ref_ptr;
588 SilcServerConfigConnParams *param =
589 (conn->param ? conn->param : &server->config->param);
591 SILC_LOG_INFO(("Retrying connecting to a router"));
593 /* Calculate next timeout */
594 if (sconn->retry_count >= 1) {
595 sconn->retry_timeout = sconn->retry_timeout * SILC_SERVER_RETRY_MULTIPLIER;
596 if (sconn->retry_timeout > param->reconnect_interval_max)
597 sconn->retry_timeout = param->reconnect_interval_max;
599 sconn->retry_timeout = param->reconnect_interval;
601 sconn->retry_count++;
602 sconn->retry_timeout = sconn->retry_timeout +
603 silc_rng_get_rn32(server->rng) % SILC_SERVER_RETRY_RANDOMIZER;
605 /* If we've reached max retry count, give up. */
606 if ((sconn->retry_count > param->reconnect_count) &&
607 !param->reconnect_keep_trying) {
608 SILC_LOG_ERROR(("Could not connect to router, giving up"));
609 silc_server_config_unref(&sconn->conn);
610 silc_free(sconn->remote_host);
611 silc_free(sconn->backup_replace_ip);
616 /* We will lookup a fresh pointer later */
617 silc_server_config_unref(&sconn->conn);
619 /* Wait one before retrying */
620 silc_schedule_task_add(server->schedule, 0, silc_server_connect_router,
621 context, sconn->retry_timeout, 0,
622 SILC_TASK_TIMEOUT, SILC_TASK_PRI_NORMAL);
625 /* Generic routine to use connect to a router. */
627 SILC_TASK_CALLBACK(silc_server_connect_router)
629 SilcServerConnection sconn = (SilcServerConnection)context;
630 SilcServer server = sconn->server;
631 SilcServerConfigRouter *rconn;
634 SILC_LOG_INFO(("Connecting to the %s %s on port %d",
635 (sconn->backup ? "backup router" : "router"),
636 sconn->remote_host, sconn->remote_port));
638 server->router_connect = time(NULL);
639 rconn = silc_server_config_find_router_conn(server, sconn->remote_host,
642 SILC_LOG_INFO(("Unconfigured %s connection %s:%d, cannot connect",
643 (sconn->backup ? "backup router" : "router"),
644 sconn->remote_host, sconn->remote_port));
645 silc_free(sconn->remote_host);
646 silc_free(sconn->backup_replace_ip);
650 silc_server_config_ref(&sconn->conn, server->config, (void *)rconn);
652 /* Connect to remote host */
653 sock = silc_net_create_connection(server->config->server_info->server_ip,
657 SILC_LOG_ERROR(("Could not connect to router %s:%d",
658 sconn->remote_host, sconn->remote_port));
659 if (!sconn->no_reconnect)
660 silc_schedule_task_add(server->schedule, 0,
661 silc_server_connect_to_router_retry,
662 context, 0, 1, SILC_TASK_TIMEOUT,
663 SILC_TASK_PRI_NORMAL);
665 silc_server_config_unref(&sconn->conn);
669 /* Continue with key exchange protocol */
670 silc_server_start_key_exchange(server, sconn, sock);
673 /* This function connects to our primary router or if we are a router this
674 establishes all our primary routes. This is called at the start of the
675 server to do authentication and key exchange with our router - called
678 SILC_TASK_CALLBACK(silc_server_connect_to_router)
680 SilcServer server = (SilcServer)context;
681 SilcServerConnection sconn;
682 SilcServerConfigRouter *ptr;
684 SILC_LOG_DEBUG(("Connecting to router(s)"));
686 if (server->server_type == SILC_SERVER) {
687 SILC_LOG_DEBUG(("We are normal server"));
688 } else if (server->server_type == SILC_ROUTER) {
689 SILC_LOG_DEBUG(("We are router"));
691 SILC_LOG_DEBUG(("We are backup router/normal server"));
694 if (!server->config->routers) {
695 /* There wasn't a configured router, we will continue but we don't
696 have a connection to outside world. We will be standalone server. */
697 SILC_LOG_DEBUG(("No router(s), server will be standalone"));
698 server->standalone = TRUE;
702 /* Cancel any possible retry timeouts */
703 silc_schedule_task_del_by_callback(server->schedule,
704 silc_server_connect_router);
705 silc_schedule_task_del_by_callback(server->schedule,
706 silc_server_connect_to_router_retry);
708 /* Create the connections to all our routes */
709 for (ptr = server->config->routers; ptr; ptr = ptr->next) {
711 SILC_LOG_DEBUG(("%s connection [%s] %s:%d",
712 ptr->backup_router ? "Backup router" : "Router",
713 ptr->initiator ? "Initiator" : "Responder",
714 ptr->host, ptr->port));
716 if (ptr->initiator) {
717 /* Check whether we are connected to this host already */
718 if (silc_server_num_sockets_by_remote(server,
719 silc_net_is_ip(ptr->host) ?
721 silc_net_is_ip(ptr->host) ?
722 NULL : ptr->host, ptr->port,
723 SILC_SOCKET_TYPE_ROUTER)) {
724 SILC_LOG_DEBUG(("We are already connected to this router"));
728 /* Allocate connection object for hold connection specific stuff. */
729 sconn = silc_calloc(1, sizeof(*sconn));
730 sconn->server = server;
731 sconn->remote_host = strdup(ptr->host);
732 sconn->remote_port = ptr->port;
733 sconn->backup = ptr->backup_router;
735 sconn->backup_replace_ip = strdup(ptr->backup_replace_ip);
736 sconn->backup_replace_port = ptr->backup_replace_port;
739 if (!server->router_conn && !sconn->backup)
740 server->router_conn = sconn;
742 silc_schedule_task_add(server->schedule, 0,
743 silc_server_connect_router,
744 (void *)sconn, 0, 1, SILC_TASK_TIMEOUT,
745 SILC_TASK_PRI_NORMAL);
750 /* Second part of connecting to router(s). Key exchange protocol has been
751 executed and now we will execute authentication protocol. */
753 SILC_TASK_CALLBACK(silc_server_connect_to_router_second)
755 SilcProtocol protocol = (SilcProtocol)context;
756 SilcServerKEInternalContext *ctx =
757 (SilcServerKEInternalContext *)protocol->context;
758 SilcServer server = (SilcServer)ctx->server;
759 SilcServerConnection sconn = (SilcServerConnection)ctx->context;
760 SilcSocketConnection sock = ctx->sock;
761 SilcServerConnAuthInternalContext *proto_ctx;
762 SilcServerConfigRouter *conn = NULL;
764 SILC_LOG_DEBUG(("Start"));
766 if (protocol->state == SILC_PROTOCOL_STATE_ERROR ||
767 protocol->state == SILC_PROTOCOL_STATE_FAILURE) {
768 /* Error occured during protocol */
769 silc_protocol_free(protocol);
770 sock->protocol = NULL;
771 silc_ske_free_key_material(ctx->keymat);
773 silc_packet_context_free(ctx->packet);
775 silc_ske_free(ctx->ske);
776 silc_free(ctx->dest_id);
778 silc_server_config_unref(&sconn->conn);
779 silc_free(sconn->remote_host);
780 silc_free(sconn->backup_replace_ip);
782 silc_schedule_task_del_by_callback(server->schedule,
783 silc_server_failure_callback);
784 silc_server_disconnect_remote(server, sock, "Server closed connection: "
785 "Key exchange failed");
789 /* We now have the key material as the result of the key exchange
790 protocol. Take the key material into use. Free the raw key material
791 as soon as we've set them into use. */
792 if (!silc_server_protocol_ke_set_keys(server, ctx->ske,
793 ctx->sock, ctx->keymat,
794 ctx->ske->prop->cipher,
795 ctx->ske->prop->pkcs,
796 ctx->ske->prop->hash,
797 ctx->ske->prop->hmac,
798 ctx->ske->prop->group,
800 silc_protocol_free(protocol);
801 sock->protocol = NULL;
802 silc_ske_free_key_material(ctx->keymat);
804 silc_packet_context_free(ctx->packet);
806 silc_ske_free(ctx->ske);
807 silc_free(ctx->dest_id);
809 silc_server_config_unref(&sconn->conn);
810 silc_free(sconn->remote_host);
811 silc_free(sconn->backup_replace_ip);
813 silc_schedule_task_del_by_callback(server->schedule,
814 silc_server_failure_callback);
815 silc_server_disconnect_remote(server, sock, "Server closed connection: "
816 "Key exchange failed");
819 silc_ske_free_key_material(ctx->keymat);
821 /* Allocate internal context for the authentication protocol. This
822 is sent as context for the protocol. */
823 proto_ctx = silc_calloc(1, sizeof(*proto_ctx));
824 proto_ctx->server = (void *)server;
825 proto_ctx->context = (void *)sconn;
826 proto_ctx->sock = sock;
827 proto_ctx->ske = ctx->ske; /* Save SKE object from previous protocol */
828 proto_ctx->dest_id_type = ctx->dest_id_type;
829 proto_ctx->dest_id = ctx->dest_id;
831 /* Resolve the authentication method used in this connection. Check if
832 we find a match from user configured connections */
833 if (!sconn->conn.ref_ptr)
834 conn = silc_server_config_find_router_conn(server, sock->hostname,
837 conn = sconn->conn.ref_ptr;
840 /* Match found. Use the configured authentication method. Take only
841 the passphrase, since for public key auth we automatically use
842 our local key pair. */
843 if (conn->passphrase) {
844 if (conn->publickeys && !server->config->prefer_passphrase_auth) {
845 proto_ctx->auth_meth = SILC_AUTH_PUBLIC_KEY;
847 proto_ctx->auth_data = strdup(conn->passphrase);
848 proto_ctx->auth_data_len = strlen(conn->passphrase);
849 proto_ctx->auth_meth = SILC_AUTH_PASSWORD;
851 } else if (conn->publickeys) {
852 proto_ctx->auth_meth = SILC_AUTH_PUBLIC_KEY;
854 proto_ctx->auth_meth = SILC_AUTH_NONE;
857 SILC_LOG_ERROR(("Could not find connection data for %s (%s) on port",
858 sock->hostname, sock->ip, sock->port));
859 silc_protocol_free(protocol);
860 sock->protocol = NULL;
862 silc_packet_context_free(ctx->packet);
864 silc_ske_free(ctx->ske);
865 silc_free(ctx->dest_id);
867 silc_server_config_unref(&sconn->conn);
868 silc_free(sconn->remote_host);
869 silc_free(sconn->backup_replace_ip);
871 silc_schedule_task_del_by_callback(server->schedule,
872 silc_server_failure_callback);
873 silc_server_disconnect_remote(server, sock, "Server closed connection: "
874 "Key exchange failed");
878 /* Free old protocol as it is finished now */
879 silc_protocol_free(protocol);
881 silc_packet_context_free(ctx->packet);
883 sock->protocol = NULL;
885 /* Allocate the authentication protocol. This is allocated here
886 but we won't start it yet. We will be receiving party of this
887 protocol thus we will wait that connecting party will make
889 silc_protocol_alloc(SILC_PROTOCOL_SERVER_CONNECTION_AUTH,
890 &sock->protocol, proto_ctx,
891 silc_server_connect_to_router_final);
893 /* Register timeout task. If the protocol is not executed inside
894 this timelimit the connection will be terminated. */
895 proto_ctx->timeout_task =
896 silc_schedule_task_add(server->schedule, sock->sock,
897 silc_server_timeout_remote,
899 server->config->conn_auth_timeout, 0,
903 /* Run the protocol */
904 silc_protocol_execute(sock->protocol, server->schedule, 0, 0);
907 /* Finalizes the connection to router. Registers a server task to the
908 queue so that we can accept new connections. */
910 SILC_TASK_CALLBACK(silc_server_connect_to_router_final)
912 SilcProtocol protocol = (SilcProtocol)context;
913 SilcServerConnAuthInternalContext *ctx =
914 (SilcServerConnAuthInternalContext *)protocol->context;
915 SilcServer server = (SilcServer)ctx->server;
916 SilcServerConnection sconn = (SilcServerConnection)ctx->context;
917 SilcSocketConnection sock = ctx->sock;
918 SilcServerEntry id_entry;
920 SilcServerHBContext hb_context;
921 unsigned char *id_string;
923 SilcIDListData idata;
924 SilcServerConfigRouter *conn = NULL;
925 SilcServerConfigConnParams *param = NULL;
927 SILC_LOG_DEBUG(("Start"));
929 if (protocol->state == SILC_PROTOCOL_STATE_ERROR ||
930 protocol->state == SILC_PROTOCOL_STATE_FAILURE) {
931 /* Error occured during protocol */
932 silc_free(ctx->dest_id);
933 silc_server_disconnect_remote(server, sock, "Server closed connection: "
934 "Authentication failed");
938 /* Add a task to the queue. This task receives new connections to the
939 server. This task remains on the queue until the end of the program. */
940 if (!server->listenning && !sconn->backup) {
941 silc_schedule_task_add(server->schedule, server->sock,
942 silc_server_accept_new_connection,
943 (void *)server, 0, 0,
945 SILC_TASK_PRI_NORMAL);
946 server->listenning = TRUE;
949 /* Send NEW_SERVER packet to the router. We will become registered
950 to the SILC network after sending this packet. */
951 id_string = silc_id_id2str(server->id, SILC_ID_SERVER);
952 id_len = silc_id_get_len(server->id, SILC_ID_SERVER);
953 packet = silc_buffer_alloc(2 + 2 + id_len + strlen(server->server_name));
954 silc_buffer_pull_tail(packet, SILC_BUFFER_END(packet));
955 silc_buffer_format(packet,
956 SILC_STR_UI_SHORT(id_len),
957 SILC_STR_UI_XNSTRING(id_string, id_len),
958 SILC_STR_UI_SHORT(strlen(server->server_name)),
959 SILC_STR_UI_XNSTRING(server->server_name,
960 strlen(server->server_name)),
963 /* Send the packet */
964 silc_server_packet_send(server, ctx->sock, SILC_PACKET_NEW_SERVER, 0,
965 packet->data, packet->len, TRUE);
966 silc_buffer_free(packet);
967 silc_free(id_string);
969 SILC_LOG_INFO(("Connected to router %s", sock->hostname));
971 /* Check that we do not have this ID already */
972 id_entry = silc_idlist_find_server_by_id(server->local_list,
973 ctx->dest_id, TRUE, NULL);
975 silc_idcache_del_by_context(server->local_list->servers, id_entry);
977 id_entry = silc_idlist_find_server_by_id(server->global_list,
978 ctx->dest_id, TRUE, NULL);
980 silc_idcache_del_by_context(server->global_list->servers, id_entry);
983 SILC_LOG_DEBUG(("New server id(%s)",
984 silc_id_render(ctx->dest_id, SILC_ID_SERVER)));
986 /* Add the connected router to global server list */
987 id_entry = silc_idlist_add_server(server->global_list,
988 strdup(sock->hostname),
989 SILC_ROUTER, ctx->dest_id, NULL, sock);
991 silc_free(ctx->dest_id);
992 SILC_LOG_ERROR(("Cannot add new server entry to cache"));
993 silc_server_disconnect_remote(server, sock, "Server closed connection: "
994 "Authentication failed");
998 silc_idlist_add_data(id_entry, (SilcIDListData)sock->user_data);
999 silc_free(sock->user_data);
1000 sock->user_data = (void *)id_entry;
1001 sock->type = SILC_SOCKET_TYPE_ROUTER;
1002 idata = (SilcIDListData)sock->user_data;
1003 idata->status |= SILC_IDLIST_STATUS_REGISTERED;
1005 conn = sconn->conn.ref_ptr;
1006 param = &server->config->param;
1007 if (conn && conn->param)
1008 param = conn->param;
1010 /* Perform keepalive. The `hb_context' will be freed automatically
1011 when finally calling the silc_socket_free function. */
1012 hb_context = silc_calloc(1, sizeof(*hb_context));
1013 hb_context->server = server;
1014 silc_socket_set_heartbeat(sock, param->keepalive_secs, hb_context,
1015 silc_server_perform_heartbeat,
1018 /* Register re-key timeout */
1019 idata->rekey->timeout = param->key_exchange_rekey;
1020 idata->rekey->context = (void *)server;
1021 silc_schedule_task_add(server->schedule, sock->sock,
1022 silc_server_rekey_callback,
1023 (void *)sock, idata->rekey->timeout, 0,
1024 SILC_TASK_TIMEOUT, SILC_TASK_PRI_NORMAL);
1026 if (!sconn->backup) {
1027 /* Mark this router our primary router if we're still standalone */
1028 if (server->standalone) {
1029 server->id_entry->router = id_entry;
1030 server->router = id_entry;
1031 server->standalone = FALSE;
1033 /* If we are router then announce our possible servers. */
1034 if (server->server_type == SILC_ROUTER)
1035 silc_server_announce_servers(server, FALSE, 0,
1036 server->router->connection);
1038 /* Announce our clients and channels to the router */
1039 silc_server_announce_clients(server, 0, server->router->connection);
1040 silc_server_announce_channels(server, 0, server->router->connection);
1043 /* Add this server to be our backup router */
1044 silc_server_backup_add(server, id_entry, sconn->backup_replace_ip,
1045 sconn->backup_replace_port, FALSE);
1048 sock->protocol = NULL;
1050 /* Call the completion callback to indicate that we've connected to
1052 if (sconn->callback)
1053 (*sconn->callback)(server, id_entry, sconn->callback_context);
1056 /* Free the temporary connection data context */
1058 silc_server_config_unref(&sconn->conn);
1059 silc_free(sconn->remote_host);
1060 silc_free(sconn->backup_replace_ip);
1063 if (sconn == server->router_conn)
1064 server->router_conn = NULL;
1066 /* Free the protocol object */
1067 if (sock->protocol == protocol)
1068 sock->protocol = NULL;
1069 silc_protocol_free(protocol);
1071 silc_packet_context_free(ctx->packet);
1073 silc_ske_free(ctx->ske);
1074 if (ctx->auth_meth == SILC_AUTH_PASSWORD)
1075 silc_free(ctx->auth_data);
1079 /* Host lookup callback that is called after the incoming connection's
1080 IP and FQDN lookup is performed. This will actually check the acceptance
1081 of the incoming connection and will register the key exchange protocol
1082 for this connection. */
1085 silc_server_accept_new_connection_lookup(SilcSocketConnection sock,
1088 SilcServer server = (SilcServer)context;
1089 SilcServerKEInternalContext *proto_ctx;
1090 SilcServerConfigClient *cconfig = NULL;
1091 SilcServerConfigServer *sconfig = NULL;
1092 SilcServerConfigRouter *rconfig = NULL;
1093 SilcServerConfigDeny *deny;
1096 SILC_LOG_DEBUG(("Start"));
1098 /* Check whether we could resolve both IP and FQDN. */
1099 if (!sock->ip || (!strcmp(sock->ip, sock->hostname) &&
1100 server->config->require_reverse_lookup)) {
1101 SILC_LOG_ERROR(("IP/DNS lookup failed %s",
1102 sock->hostname ? sock->hostname :
1103 sock->ip ? sock->ip : ""));
1104 server->stat.conn_failures++;
1105 silc_server_disconnect_remote(server, sock,
1106 "Server closed connection: Unknown host");
1110 /* Register the connection for network input and output. This sets
1111 that scheduler will listen for incoming packets for this connection
1112 and sets that outgoing packets may be sent to this connection as well.
1113 However, this doesn't set the scheduler for outgoing traffic, it
1114 will be set separately by calling SILC_SET_CONNECTION_FOR_OUTPUT,
1115 later when outgoing data is available. */
1116 SILC_REGISTER_CONNECTION_FOR_IO(sock->sock);
1118 SILC_LOG_INFO(("Incoming connection %s (%s)", sock->hostname,
1121 port = server->sockets[server->sock]->port; /* Listenning port */
1123 /* Check whether this connection is denied to connect to us. */
1124 deny = silc_server_config_find_denied(server, sock->ip);
1126 deny = silc_server_config_find_denied(server, sock->hostname);
1128 /* The connection is denied */
1129 SILC_LOG_INFO(("Connection %s (%s) is denied",
1130 sock->hostname, sock->ip));
1131 silc_server_disconnect_remote(server, sock, deny->reason ?
1133 "Server closed connection: "
1134 "Connection refused");
1135 server->stat.conn_failures++;
1139 /* Check whether we have configured this sort of connection at all. We
1140 have to check all configurations since we don't know what type of
1141 connection this is. */
1142 if (!(cconfig = silc_server_config_find_client(server, sock->ip)))
1143 cconfig = silc_server_config_find_client(server, sock->hostname);
1144 if (!(sconfig = silc_server_config_find_server_conn(server, sock->ip)))
1145 sconfig = silc_server_config_find_server_conn(server, sock->hostname);
1146 if (server->server_type == SILC_ROUTER) {
1147 if (!(rconfig = silc_server_config_find_router_conn(server,
1149 rconfig = silc_server_config_find_router_conn(server, sock->hostname,
1152 if (!cconfig && !sconfig && !rconfig) {
1153 SILC_LOG_INFO(("Connection %s (%s) is not allowed", sock->hostname,
1155 silc_server_disconnect_remote(server, sock,
1156 "Server closed connection: "
1157 "Connection refused");
1158 server->stat.conn_failures++;
1162 /* The connection is allowed */
1164 /* Allocate internal context for key exchange protocol. This is
1165 sent as context for the protocol. */
1166 proto_ctx = silc_calloc(1, sizeof(*proto_ctx));
1167 proto_ctx->server = context;
1168 proto_ctx->sock = sock;
1169 proto_ctx->rng = server->rng;
1170 proto_ctx->responder = TRUE;
1171 silc_server_config_ref(&proto_ctx->cconfig, server->config, cconfig);
1172 silc_server_config_ref(&proto_ctx->sconfig, server->config, sconfig);
1173 silc_server_config_ref(&proto_ctx->rconfig, server->config, rconfig);
1175 /* Take flags for key exchange. Since we do not know what type of connection
1176 this is, we go through all found configurations and use the global ones
1177 as well. This will result always into strictest key exchange flags. */
1178 SILC_GET_SKE_FLAGS(cconfig, proto_ctx);
1179 SILC_GET_SKE_FLAGS(sconfig, proto_ctx);
1180 SILC_GET_SKE_FLAGS(rconfig, proto_ctx);
1181 if (server->config->param.key_exchange_pfs)
1182 proto_ctx->flags |= SILC_SKE_SP_FLAG_PFS;
1184 /* Prepare the connection for key exchange protocol. We allocate the
1185 protocol but will not start it yet. The connector will be the
1186 initiator of the protocol thus we will wait for initiation from
1187 there before we start the protocol. */
1188 server->stat.auth_attempts++;
1189 silc_protocol_alloc(SILC_PROTOCOL_SERVER_KEY_EXCHANGE,
1190 &sock->protocol, proto_ctx,
1191 silc_server_accept_new_connection_second);
1193 /* Register a timeout task that will be executed if the connector
1194 will not start the key exchange protocol within specified timeout
1195 and the connection will be closed. */
1196 proto_ctx->timeout_task =
1197 silc_schedule_task_add(server->schedule, sock->sock,
1198 silc_server_timeout_remote,
1199 context, server->config->key_exchange_timeout, 0,
1204 /* Accepts new connections to the server. Accepting new connections are
1205 done in three parts to make it async. */
1207 SILC_TASK_CALLBACK(silc_server_accept_new_connection)
1209 SilcServer server = (SilcServer)context;
1210 SilcSocketConnection newsocket;
1213 SILC_LOG_DEBUG(("Accepting new connection"));
1215 server->stat.conn_attempts++;
1217 sock = silc_net_accept_connection(server->sock);
1219 SILC_LOG_ERROR(("Could not accept new connection: %s", strerror(errno)));
1220 server->stat.conn_failures++;
1224 /* Check for maximum allowed connections */
1225 if (sock > server->config->param.connections_max) {
1226 SILC_LOG_ERROR(("Refusing connection, server is full"));
1227 server->stat.conn_failures++;
1228 silc_net_close_connection(sock);
1232 /* Set socket options */
1233 silc_net_set_socket_nonblock(sock);
1234 silc_net_set_socket_opt(sock, SOL_SOCKET, SO_REUSEADDR, 1);
1236 /* We don't create a ID yet, since we don't know what type of connection
1237 this is yet. But, we do add the connection to the socket table. */
1238 silc_socket_alloc(sock, SILC_SOCKET_TYPE_UNKNOWN, NULL, &newsocket);
1239 server->sockets[sock] = newsocket;
1241 /* Perform asynchronous host lookup. This will lookup the IP and the
1242 FQDN of the remote connection. After the lookup is done the connection
1243 is accepted further. */
1244 silc_socket_host_lookup(newsocket, TRUE,
1245 silc_server_accept_new_connection_lookup, context,
1249 /* Second part of accepting new connection. Key exchange protocol has been
1250 performed and now it is time to do little connection authentication
1251 protocol to figure out whether this connection is client or server
1252 and whether it has right to access this server (especially server
1253 connections needs to be authenticated). */
1255 SILC_TASK_CALLBACK(silc_server_accept_new_connection_second)
1257 SilcProtocol protocol = (SilcProtocol)context;
1258 SilcServerKEInternalContext *ctx =
1259 (SilcServerKEInternalContext *)protocol->context;
1260 SilcServer server = (SilcServer)ctx->server;
1261 SilcSocketConnection sock = ctx->sock;
1262 SilcServerConnAuthInternalContext *proto_ctx;
1264 SILC_LOG_DEBUG(("Start"));
1266 if ((protocol->state == SILC_PROTOCOL_STATE_ERROR) ||
1267 (protocol->state == SILC_PROTOCOL_STATE_FAILURE)) {
1268 /* Error occured during protocol */
1269 silc_protocol_free(protocol);
1270 sock->protocol = NULL;
1271 silc_ske_free_key_material(ctx->keymat);
1273 silc_packet_context_free(ctx->packet);
1275 silc_ske_free(ctx->ske);
1276 silc_free(ctx->dest_id);
1277 silc_server_config_unref(&ctx->cconfig);
1278 silc_server_config_unref(&ctx->sconfig);
1279 silc_server_config_unref(&ctx->rconfig);
1281 silc_schedule_task_del_by_callback(server->schedule,
1282 silc_server_failure_callback);
1283 silc_server_disconnect_remote(server, sock, "Server closed connection: "
1284 "Key exchange failed");
1285 server->stat.auth_failures++;
1289 /* We now have the key material as the result of the key exchange
1290 protocol. Take the key material into use. Free the raw key material
1291 as soon as we've set them into use. */
1292 if (!silc_server_protocol_ke_set_keys(server, ctx->ske,
1293 ctx->sock, ctx->keymat,
1294 ctx->ske->prop->cipher,
1295 ctx->ske->prop->pkcs,
1296 ctx->ske->prop->hash,
1297 ctx->ske->prop->hmac,
1298 ctx->ske->prop->group,
1300 silc_protocol_free(protocol);
1301 sock->protocol = NULL;
1302 silc_ske_free_key_material(ctx->keymat);
1304 silc_packet_context_free(ctx->packet);
1306 silc_ske_free(ctx->ske);
1307 silc_free(ctx->dest_id);
1308 silc_server_config_unref(&ctx->cconfig);
1309 silc_server_config_unref(&ctx->sconfig);
1310 silc_server_config_unref(&ctx->rconfig);
1312 silc_schedule_task_del_by_callback(server->schedule,
1313 silc_server_failure_callback);
1314 silc_server_disconnect_remote(server, sock, "Server closed connection: "
1315 "Key exchange failed");
1316 server->stat.auth_failures++;
1319 silc_ske_free_key_material(ctx->keymat);
1321 /* Allocate internal context for the authentication protocol. This
1322 is sent as context for the protocol. */
1323 proto_ctx = silc_calloc(1, sizeof(*proto_ctx));
1324 proto_ctx->server = (void *)server;
1325 proto_ctx->sock = sock;
1326 proto_ctx->ske = ctx->ske; /* Save SKE object from previous protocol */
1327 proto_ctx->responder = TRUE;
1328 proto_ctx->dest_id_type = ctx->dest_id_type;
1329 proto_ctx->dest_id = ctx->dest_id;
1330 proto_ctx->cconfig = ctx->cconfig;
1331 proto_ctx->sconfig = ctx->sconfig;
1332 proto_ctx->rconfig = ctx->rconfig;
1334 /* Free old protocol as it is finished now */
1335 silc_protocol_free(protocol);
1337 silc_packet_context_free(ctx->packet);
1339 sock->protocol = NULL;
1341 /* Allocate the authentication protocol. This is allocated here
1342 but we won't start it yet. We will be receiving party of this
1343 protocol thus we will wait that connecting party will make
1344 their first move. */
1345 silc_protocol_alloc(SILC_PROTOCOL_SERVER_CONNECTION_AUTH,
1346 &sock->protocol, proto_ctx,
1347 silc_server_accept_new_connection_final);
1349 /* Register timeout task. If the protocol is not executed inside
1350 this timelimit the connection will be terminated. */
1351 proto_ctx->timeout_task =
1352 silc_schedule_task_add(server->schedule, sock->sock,
1353 silc_server_timeout_remote,
1355 server->config->conn_auth_timeout, 0,
1360 /* Final part of accepting new connection. The connection has now
1361 been authenticated and keys has been exchanged. We also know whether
1362 this is client or server connection. */
1364 SILC_TASK_CALLBACK(silc_server_accept_new_connection_final)
1366 SilcProtocol protocol = (SilcProtocol)context;
1367 SilcServerConnAuthInternalContext *ctx =
1368 (SilcServerConnAuthInternalContext *)protocol->context;
1369 SilcServer server = (SilcServer)ctx->server;
1370 SilcSocketConnection sock = ctx->sock;
1371 SilcServerHBContext hb_context;
1372 SilcUnknownEntry entry = (SilcUnknownEntry)sock->user_data;
1374 SilcUInt32 hearbeat_timeout = server->config->param.keepalive_secs;
1376 SILC_LOG_DEBUG(("Start"));
1378 if (protocol->state == SILC_PROTOCOL_STATE_ERROR ||
1379 protocol->state == SILC_PROTOCOL_STATE_FAILURE) {
1380 /* Error occured during protocol */
1381 silc_protocol_free(protocol);
1382 sock->protocol = NULL;
1384 silc_packet_context_free(ctx->packet);
1386 silc_ske_free(ctx->ske);
1387 silc_free(ctx->dest_id);
1388 silc_server_config_unref(&ctx->cconfig);
1389 silc_server_config_unref(&ctx->sconfig);
1390 silc_server_config_unref(&ctx->rconfig);
1392 silc_schedule_task_del_by_callback(server->schedule,
1393 silc_server_failure_callback);
1394 silc_server_disconnect_remote(server, sock, "Server closed connection: "
1395 "Authentication failed");
1396 server->stat.auth_failures++;
1400 entry->data.last_receive = time(NULL);
1402 switch (ctx->conn_type) {
1403 case SILC_SOCKET_TYPE_CLIENT:
1405 SilcClientEntry client;
1406 SilcServerConfigClient *conn = ctx->cconfig.ref_ptr;
1408 /* Verify whether this connection is after all allowed to connect */
1409 if (!silc_server_connection_allowed(server, sock, ctx->conn_type,
1410 &server->config->param,
1411 conn->param, ctx->ske)) {
1412 server->stat.auth_failures++;
1416 SILC_LOG_DEBUG(("Remote host is client"));
1417 SILC_LOG_INFO(("Connection %s (%s) is client", sock->hostname,
1420 /* Add the client to the client ID cache. The nickname and Client ID
1421 and other information is created after we have received NEW_CLIENT
1422 packet from client. */
1423 client = silc_idlist_add_client(server->local_list,
1424 NULL, NULL, NULL, NULL, NULL, sock, 0);
1426 SILC_LOG_ERROR(("Could not add new client to cache"));
1427 silc_free(sock->user_data);
1428 silc_server_disconnect_remote(server, sock,
1429 "Server closed connection: "
1430 "Authentication failed");
1431 server->stat.auth_failures++;
1436 server->stat.my_clients++;
1437 server->stat.clients++;
1438 server->stat.cell_clients++;
1440 /* Get connection parameters */
1442 if (conn->param->keepalive_secs)
1443 hearbeat_timeout = conn->param->keepalive_secs;
1446 id_entry = (void *)client;
1449 case SILC_SOCKET_TYPE_SERVER:
1450 case SILC_SOCKET_TYPE_ROUTER:
1452 SilcServerEntry new_server;
1453 bool initiator = FALSE;
1454 bool backup_local = FALSE;
1455 bool backup_router = FALSE;
1456 char *backup_replace_ip = NULL;
1457 SilcUInt16 backup_replace_port = 0;
1458 SilcServerConfigServer *sconn = ctx->sconfig.ref_ptr;
1459 SilcServerConfigRouter *rconn = ctx->rconfig.ref_ptr;
1461 if (ctx->conn_type == SILC_SOCKET_TYPE_ROUTER) {
1462 /* Verify whether this connection is after all allowed to connect */
1463 if (!silc_server_connection_allowed(server, sock, ctx->conn_type,
1464 &server->config->param,
1465 rconn ? rconn->param : NULL,
1467 server->stat.auth_failures++;
1473 if (rconn->param->keepalive_secs)
1474 hearbeat_timeout = rconn->param->keepalive_secs;
1477 initiator = rconn->initiator;
1478 backup_local = rconn->backup_local;
1479 backup_router = rconn->backup_router;
1480 backup_replace_ip = rconn->backup_replace_ip;
1481 backup_replace_port = rconn->backup_replace_port;
1485 if (ctx->conn_type == SILC_SOCKET_TYPE_SERVER) {
1486 /* Verify whether this connection is after all allowed to connect */
1487 if (!silc_server_connection_allowed(server, sock, ctx->conn_type,
1488 &server->config->param,
1489 sconn ? sconn->param : NULL,
1491 server->stat.auth_failures++;
1496 if (sconn->param->keepalive_secs)
1497 hearbeat_timeout = sconn->param->keepalive_secs;
1500 backup_router = sconn->backup_router;
1504 SILC_LOG_DEBUG(("Remote host is %s",
1505 ctx->conn_type == SILC_SOCKET_TYPE_SERVER ?
1506 "server" : (backup_router ?
1507 "backup router" : "router")));
1508 SILC_LOG_INFO(("Connection %s (%s) is %s", sock->hostname,
1509 sock->ip, ctx->conn_type == SILC_SOCKET_TYPE_SERVER ?
1510 "server" : (backup_router ?
1511 "backup router" : "router")));
1513 /* Add the server into server cache. The server name and Server ID
1514 is updated after we have received NEW_SERVER packet from the
1515 server. We mark ourselves as router for this server if we really
1518 silc_idlist_add_server((ctx->conn_type == SILC_SOCKET_TYPE_SERVER ?
1519 server->local_list : (backup_router ?
1520 server->local_list :
1521 server->global_list)),
1523 (ctx->conn_type == SILC_SOCKET_TYPE_SERVER ?
1524 SILC_SERVER : SILC_ROUTER),
1526 (ctx->conn_type == SILC_SOCKET_TYPE_SERVER ?
1527 server->id_entry : (backup_router ?
1528 server->id_entry : NULL)),
1531 SILC_LOG_ERROR(("Could not add new server to cache"));
1532 silc_free(sock->user_data);
1533 silc_server_disconnect_remote(server, sock,
1534 "Server closed connection: "
1535 "Authentication failed");
1536 server->stat.auth_failures++;
1541 if (ctx->conn_type == SILC_SOCKET_TYPE_SERVER)
1542 server->stat.my_servers++;
1544 server->stat.my_routers++;
1545 server->stat.servers++;
1547 id_entry = (void *)new_server;
1549 /* If the incoming connection is router and marked as backup router
1550 then add it to be one of our backups */
1551 if (ctx->conn_type == SILC_SOCKET_TYPE_ROUTER && backup_router) {
1552 silc_server_backup_add(server, new_server, backup_replace_ip,
1553 backup_replace_port, backup_local);
1555 /* Change it back to SERVER type since that's what it really is. */
1557 ctx->conn_type = SILC_SOCKET_TYPE_SERVER;
1559 new_server->server_type = SILC_BACKUP_ROUTER;
1562 /* Check whether this connection is to be our primary router connection
1563 if we do not already have the primary route. */
1564 if (server->standalone && ctx->conn_type == SILC_SOCKET_TYPE_ROUTER) {
1565 if (silc_server_config_is_primary_route(server) && !initiator)
1568 SILC_LOG_DEBUG(("We are not standalone server anymore"));
1569 server->standalone = FALSE;
1570 if (!server->id_entry->router) {
1571 server->id_entry->router = id_entry;
1572 server->router = id_entry;
1583 sock->type = ctx->conn_type;
1585 /* Add the common data structure to the ID entry. */
1586 silc_idlist_add_data(id_entry, (SilcIDListData)sock->user_data);
1588 /* Add to sockets internal pointer for fast referencing */
1589 silc_free(sock->user_data);
1590 sock->user_data = id_entry;
1592 /* Connection has been fully established now. Everything is ok. */
1593 SILC_LOG_DEBUG(("New connection authenticated"));
1595 /* Perform keepalive. The `hb_context' will be freed automatically
1596 when finally calling the silc_socket_free function. */
1597 hb_context = silc_calloc(1, sizeof(*hb_context));
1598 hb_context->server = server;
1599 silc_socket_set_heartbeat(sock, hearbeat_timeout, hb_context,
1600 silc_server_perform_heartbeat,
1604 silc_schedule_task_del_by_callback(server->schedule,
1605 silc_server_failure_callback);
1606 silc_protocol_free(protocol);
1608 silc_packet_context_free(ctx->packet);
1610 silc_ske_free(ctx->ske);
1611 silc_free(ctx->dest_id);
1612 silc_server_config_unref(&ctx->cconfig);
1613 silc_server_config_unref(&ctx->sconfig);
1614 silc_server_config_unref(&ctx->rconfig);
1616 sock->protocol = NULL;
1619 /* This function is used to read packets from network and send packets to
1620 network. This is usually a generic task. */
1622 SILC_TASK_CALLBACK(silc_server_packet_process)
1624 SilcServer server = (SilcServer)context;
1625 SilcSocketConnection sock = server->sockets[fd];
1626 SilcIDListData idata;
1627 SilcCipher cipher = NULL;
1628 SilcHmac hmac = NULL;
1629 SilcUInt32 sequence = 0;
1635 SILC_LOG_DEBUG(("Processing packet"));
1637 /* Packet sending */
1639 if (type == SILC_TASK_WRITE) {
1640 /* Do not send data to disconnected connection */
1641 if (SILC_IS_DISCONNECTED(sock))
1644 server->stat.packets_sent++;
1646 /* Send the packet */
1647 ret = silc_packet_send(sock, TRUE);
1649 /* If returned -2 could not write to connection now, will do
1655 SILC_LOG_ERROR(("Error sending packet to connection "
1656 "%s:%d [%s]", sock->hostname, sock->port,
1657 (sock->type == SILC_SOCKET_TYPE_UNKNOWN ? "Unknown" :
1658 sock->type == SILC_SOCKET_TYPE_CLIENT ? "Client" :
1659 sock->type == SILC_SOCKET_TYPE_SERVER ? "Server" :
1664 /* The packet has been sent and now it is time to set the connection
1665 back to only for input. When there is again some outgoing data
1666 available for this connection it will be set for output as well.
1667 This call clears the output setting and sets it only for input. */
1668 SILC_SET_CONNECTION_FOR_INPUT(server->schedule, fd);
1669 SILC_UNSET_OUTBUF_PENDING(sock);
1671 silc_buffer_clear(sock->outbuf);
1675 /* Packet receiving */
1677 /* Read some data from connection */
1678 ret = silc_packet_receive(sock);
1682 SILC_LOG_ERROR(("Error receiving packet from connection "
1683 "%s:%d [%s] %s", sock->hostname, sock->port,
1684 (sock->type == SILC_SOCKET_TYPE_UNKNOWN ? "Unknown" :
1685 sock->type == SILC_SOCKET_TYPE_CLIENT ? "Client" :
1686 sock->type == SILC_SOCKET_TYPE_SERVER ? "Server" :
1687 "Router"), strerror(errno)));
1693 SILC_LOG_DEBUG(("Read EOF"));
1695 /* If connection is disconnecting already we will finally
1696 close the connection */
1697 if (SILC_IS_DISCONNECTING(sock)) {
1698 if (sock->user_data)
1699 silc_server_free_sock_user_data(server, sock, NULL);
1700 silc_server_close_connection(server, sock);
1704 SILC_LOG_DEBUG(("Premature EOF from connection %d", sock->sock));
1705 SILC_SET_DISCONNECTING(sock);
1707 if (sock->user_data) {
1709 if (silc_socket_get_error(sock, tmp, sizeof(tmp) - 1))
1710 silc_server_free_sock_user_data(server, sock, tmp);
1712 silc_server_free_sock_user_data(server, sock, NULL);
1713 } else if (server->router_conn && server->router_conn->sock == sock &&
1714 !server->router && server->standalone)
1715 silc_schedule_task_add(server->schedule, 0,
1716 silc_server_connect_to_router,
1719 SILC_TASK_PRI_NORMAL);
1721 silc_server_close_connection(server, sock);
1725 /* If connection is disconnecting or disconnected we will ignore
1727 if (SILC_IS_DISCONNECTING(sock) || SILC_IS_DISCONNECTED(sock)) {
1728 SILC_LOG_DEBUG(("Ignoring read data from disconnected connection"));
1732 server->stat.packets_received++;
1734 /* Get keys and stuff from ID entry */
1735 idata = (SilcIDListData)sock->user_data;
1737 cipher = idata->receive_key;
1738 hmac = idata->hmac_receive;
1739 sequence = idata->psn_receive;
1742 /* Process the packet. This will call the parser that will then
1743 decrypt and parse the packet. */
1744 ret = silc_packet_receive_process(sock, server->server_type == SILC_ROUTER ?
1745 TRUE : FALSE, cipher, hmac, sequence,
1746 silc_server_packet_parse, server);
1748 /* If this socket connection is not authenticated yet and the packet
1749 processing failed we will drop the connection since it can be
1750 a malicious flooder. */
1751 if (sock->type == SILC_SOCKET_TYPE_UNKNOWN && ret == FALSE &&
1752 (!sock->protocol || sock->protocol->protocol->type ==
1753 SILC_PROTOCOL_SERVER_KEY_EXCHANGE)) {
1754 SILC_LOG_DEBUG(("Bad data sent from unknown connection %d", sock->sock));
1755 SILC_SET_DISCONNECTING(sock);
1757 if (sock->user_data)
1758 silc_server_free_sock_user_data(server, sock, NULL);
1759 silc_server_close_connection(server, sock);
1763 /* Parses whole packet, received earlier. */
1765 SILC_TASK_CALLBACK(silc_server_packet_parse_real)
1767 SilcPacketParserContext *parse_ctx = (SilcPacketParserContext *)context;
1768 SilcServer server = (SilcServer)parse_ctx->context;
1769 SilcSocketConnection sock = parse_ctx->sock;
1770 SilcPacketContext *packet = parse_ctx->packet;
1771 SilcIDListData idata = (SilcIDListData)sock->user_data;
1774 SILC_LOG_DEBUG(("Start"));
1776 /* Parse the packet */
1777 if (parse_ctx->normal)
1778 ret = silc_packet_parse(packet, idata ? idata->receive_key : NULL);
1780 ret = silc_packet_parse_special(packet, idata ? idata->receive_key : NULL);
1782 /* If entry is disabled ignore what we got. */
1783 if (ret != SILC_PACKET_RESUME_ROUTER &&
1784 idata && idata->status & SILC_IDLIST_STATUS_DISABLED) {
1785 SILC_LOG_DEBUG(("Connection is disabled"));
1789 if (ret == SILC_PACKET_NONE)
1792 /* Check that the the current client ID is same as in the client's packet. */
1793 if (sock->type == SILC_SOCKET_TYPE_CLIENT) {
1794 SilcClientEntry client = (SilcClientEntry)sock->user_data;
1795 if (client && client->id) {
1796 void *id = silc_id_str2id(packet->src_id, packet->src_id_len,
1797 packet->src_id_type);
1798 if (!id || !SILC_ID_CLIENT_COMPARE(client->id, id)) {
1806 if (server->server_type == SILC_ROUTER) {
1807 /* Route the packet if it is not destined to us. Other ID types but
1808 server are handled separately after processing them. */
1809 if (!(packet->flags & SILC_PACKET_FLAG_BROADCAST) &&
1810 packet->dst_id_type == SILC_ID_SERVER &&
1811 sock->type != SILC_SOCKET_TYPE_CLIENT &&
1812 memcmp(packet->dst_id, server->id_string, server->id_string_len)) {
1814 /* Route the packet to fastest route for the destination ID */
1815 void *id = silc_id_str2id(packet->dst_id, packet->dst_id_len,
1816 packet->dst_id_type);
1819 silc_server_packet_route(server,
1820 silc_server_route_get(server, id,
1821 packet->dst_id_type),
1828 /* Parse the incoming packet type */
1829 silc_server_packet_parse_type(server, sock, packet);
1831 if (server->server_type == SILC_ROUTER) {
1832 /* Broadcast packet if it is marked as broadcast packet and it is
1833 originated from router and we are router. */
1834 if (sock->type == SILC_SOCKET_TYPE_ROUTER &&
1835 packet->flags & SILC_PACKET_FLAG_BROADCAST &&
1836 !server->standalone) {
1837 /* Broadcast to our primary route */
1838 silc_server_packet_broadcast(server, server->router->connection, packet);
1840 /* If we have backup routers then we need to feed all broadcast
1841 data to those servers. */
1842 silc_server_backup_broadcast(server, sock, packet);
1847 silc_packet_context_free(packet);
1848 silc_free(parse_ctx);
1851 /* Parser callback called by silc_packet_receive_process. This merely
1852 registers timeout that will handle the actual parsing when appropriate. */
1854 bool silc_server_packet_parse(SilcPacketParserContext *parser_context,
1857 SilcServer server = (SilcServer)context;
1858 SilcSocketConnection sock = parser_context->sock;
1859 SilcIDListData idata = (SilcIDListData)sock->user_data;
1862 idata->psn_receive = parser_context->packet->sequence + 1;
1864 /* If protocol for this connection is key exchange or rekey then we'll
1865 process all packets synchronously, since there might be packets in
1866 queue that we are not able to decrypt without first processing the
1867 packets before them. */
1868 if ((parser_context->packet->type == SILC_PACKET_REKEY ||
1869 parser_context->packet->type == SILC_PACKET_REKEY_DONE) ||
1870 (sock->protocol && sock->protocol->protocol &&
1871 (sock->protocol->protocol->type == SILC_PROTOCOL_SERVER_KEY_EXCHANGE ||
1872 sock->protocol->protocol->type == SILC_PROTOCOL_SERVER_REKEY))) {
1873 silc_server_packet_parse_real(server->schedule, 0, sock->sock,
1876 /* Reprocess data since we'll return FALSE here. This is because
1877 the idata->receive_key might have become valid in the last packet
1878 and we want to call this processor with valid cipher. */
1880 silc_packet_receive_process(sock, server->server_type == SILC_ROUTER ?
1881 TRUE : FALSE, idata->receive_key,
1882 idata->hmac_receive, idata->psn_receive,
1883 silc_server_packet_parse, server);
1885 silc_packet_receive_process(sock, server->server_type == SILC_ROUTER ?
1886 TRUE : FALSE, NULL, NULL, 0,
1887 silc_server_packet_parse, server);
1891 switch (sock->type) {
1892 case SILC_SOCKET_TYPE_UNKNOWN:
1893 case SILC_SOCKET_TYPE_CLIENT:
1894 /* Parse the packet with timeout */
1895 silc_schedule_task_add(server->schedule, sock->sock,
1896 silc_server_packet_parse_real,
1897 (void *)parser_context, 0, 100000,
1899 SILC_TASK_PRI_NORMAL);
1901 case SILC_SOCKET_TYPE_SERVER:
1902 case SILC_SOCKET_TYPE_ROUTER:
1903 /* Packets from servers are parsed immediately */
1904 silc_server_packet_parse_real(server->schedule, 0, sock->sock,
1914 /* Parses the packet type and calls what ever routines the packet type
1915 requires. This is done for all incoming packets. */
1917 void silc_server_packet_parse_type(SilcServer server,
1918 SilcSocketConnection sock,
1919 SilcPacketContext *packet)
1921 SilcPacketType type = packet->type;
1922 SilcIDListData idata = (SilcIDListData)sock->user_data;
1924 SILC_LOG_DEBUG(("Parsing packet type %d", type));
1926 /* Parse the packet type */
1928 case SILC_PACKET_DISCONNECT:
1929 SILC_LOG_DEBUG(("Disconnect packet"));
1930 if (packet->flags & SILC_PACKET_FLAG_LIST)
1932 if (silc_string_is_ascii(packet->buffer->data, packet->buffer->len)) {
1933 /* Duplicate to null terminate the string. */
1934 char *message = silc_memdup(packet->buffer->data, packet->buffer->len);
1935 SILC_LOG_ERROR(("%s", message));
1940 case SILC_PACKET_SUCCESS:
1942 * Success received for something. For now we can have only
1943 * one protocol for connection executing at once hence this
1944 * success message is for whatever protocol is executing currently.
1946 SILC_LOG_DEBUG(("Success packet"));
1947 if (packet->flags & SILC_PACKET_FLAG_LIST)
1950 silc_protocol_execute(sock->protocol, server->schedule, 0, 0);
1953 case SILC_PACKET_FAILURE:
1955 * Failure received for something. For now we can have only
1956 * one protocol for connection executing at once hence this
1957 * failure message is for whatever protocol is executing currently.
1959 SILC_LOG_DEBUG(("Failure packet"));
1960 if (packet->flags & SILC_PACKET_FLAG_LIST)
1962 if (sock->protocol) {
1963 SilcServerFailureContext f;
1964 f = silc_calloc(1, sizeof(*f));
1968 /* We will wait 5 seconds to process this failure packet */
1969 silc_schedule_task_add(server->schedule, sock->sock,
1970 silc_server_failure_callback, (void *)f, 5, 0,
1971 SILC_TASK_TIMEOUT, SILC_TASK_PRI_NORMAL);
1975 case SILC_PACKET_REJECT:
1976 SILC_LOG_DEBUG(("Reject packet"));
1977 if (packet->flags & SILC_PACKET_FLAG_LIST)
1982 case SILC_PACKET_NOTIFY:
1984 * Received notify packet. Server can receive notify packets from
1985 * router. Server then relays the notify messages to clients if needed.
1987 SILC_LOG_DEBUG(("Notify packet"));
1988 if (packet->flags & SILC_PACKET_FLAG_LIST)
1989 silc_server_notify_list(server, sock, packet);
1991 silc_server_notify(server, sock, packet);
1997 case SILC_PACKET_CHANNEL_MESSAGE:
1999 * Received channel message. Channel messages are special packets
2000 * (although probably most common ones) thus they are handled
2003 SILC_LOG_DEBUG(("Channel Message packet"));
2004 if (packet->flags & SILC_PACKET_FLAG_LIST)
2006 idata->last_receive = time(NULL);
2007 silc_server_channel_message(server, sock, packet);
2010 case SILC_PACKET_CHANNEL_KEY:
2012 * Received key for channel. As channels are created by the router
2013 * the keys are as well. We will distribute the key to all of our
2014 * locally connected clients on the particular channel. Router
2015 * never receives this channel and thus is ignored.
2017 SILC_LOG_DEBUG(("Channel Key packet"));
2018 if (packet->flags & SILC_PACKET_FLAG_LIST)
2020 silc_server_channel_key(server, sock, packet);
2026 case SILC_PACKET_COMMAND:
2028 * Recived command. Processes the command request and allocates the
2029 * command context and calls the command.
2031 SILC_LOG_DEBUG(("Command packet"));
2032 if (packet->flags & SILC_PACKET_FLAG_LIST)
2034 silc_server_command_process(server, sock, packet);
2037 case SILC_PACKET_COMMAND_REPLY:
2039 * Received command reply packet. Received command reply to command. It
2040 * may be reply to command sent by us or reply to command sent by client
2041 * that we've routed further.
2043 SILC_LOG_DEBUG(("Command Reply packet"));
2044 if (packet->flags & SILC_PACKET_FLAG_LIST)
2046 silc_server_command_reply(server, sock, packet);
2050 * Private Message packets
2052 case SILC_PACKET_PRIVATE_MESSAGE:
2054 * Received private message packet. The packet is coming from either
2057 SILC_LOG_DEBUG(("Private Message packet"));
2058 if (packet->flags & SILC_PACKET_FLAG_LIST)
2060 idata->last_receive = time(NULL);
2061 silc_server_private_message(server, sock, packet);
2064 case SILC_PACKET_PRIVATE_MESSAGE_KEY:
2066 * Private message key packet.
2068 if (packet->flags & SILC_PACKET_FLAG_LIST)
2070 silc_server_private_message_key(server, sock, packet);
2074 * Key Exchange protocol packets
2076 case SILC_PACKET_KEY_EXCHANGE:
2077 SILC_LOG_DEBUG(("KE packet"));
2078 if (packet->flags & SILC_PACKET_FLAG_LIST)
2081 if (sock->protocol && sock->protocol->protocol &&
2082 sock->protocol->protocol->type == SILC_PROTOCOL_SERVER_KEY_EXCHANGE) {
2083 SilcServerKEInternalContext *proto_ctx =
2084 (SilcServerKEInternalContext *)sock->protocol->context;
2086 proto_ctx->packet = silc_packet_context_dup(packet);
2088 /* Let the protocol handle the packet */
2089 silc_protocol_execute(sock->protocol, server->schedule, 0, 100000);
2091 SILC_LOG_ERROR(("Received Key Exchange packet but no key exchange "
2092 "protocol active, packet dropped."));
2096 case SILC_PACKET_KEY_EXCHANGE_1:
2097 SILC_LOG_DEBUG(("KE 1 packet"));
2098 if (packet->flags & SILC_PACKET_FLAG_LIST)
2101 if (sock->protocol && sock->protocol->protocol &&
2102 (sock->protocol->protocol->type == SILC_PROTOCOL_SERVER_KEY_EXCHANGE ||
2103 sock->protocol->protocol->type == SILC_PROTOCOL_SERVER_REKEY)) {
2105 if (sock->protocol->protocol->type == SILC_PROTOCOL_SERVER_REKEY) {
2106 SilcServerRekeyInternalContext *proto_ctx =
2107 (SilcServerRekeyInternalContext *)sock->protocol->context;
2109 if (proto_ctx->packet)
2110 silc_packet_context_free(proto_ctx->packet);
2112 proto_ctx->packet = silc_packet_context_dup(packet);
2114 /* Let the protocol handle the packet */
2115 silc_protocol_execute(sock->protocol, server->schedule, 0, 0);
2117 SilcServerKEInternalContext *proto_ctx =
2118 (SilcServerKEInternalContext *)sock->protocol->context;
2120 if (proto_ctx->packet)
2121 silc_packet_context_free(proto_ctx->packet);
2123 proto_ctx->packet = silc_packet_context_dup(packet);
2124 proto_ctx->dest_id_type = packet->src_id_type;
2125 proto_ctx->dest_id = silc_id_str2id(packet->src_id, packet->src_id_len,
2126 packet->src_id_type);
2127 if (!proto_ctx->dest_id)
2130 /* Let the protocol handle the packet */
2131 silc_protocol_execute(sock->protocol, server->schedule,
2135 SILC_LOG_ERROR(("Received Key Exchange 1 packet but no key exchange "
2136 "protocol active, packet dropped."));
2140 case SILC_PACKET_KEY_EXCHANGE_2:
2141 SILC_LOG_DEBUG(("KE 2 packet"));
2142 if (packet->flags & SILC_PACKET_FLAG_LIST)
2145 if (sock->protocol && sock->protocol->protocol &&
2146 (sock->protocol->protocol->type == SILC_PROTOCOL_SERVER_KEY_EXCHANGE ||
2147 sock->protocol->protocol->type == SILC_PROTOCOL_SERVER_REKEY)) {
2149 if (sock->protocol->protocol->type == SILC_PROTOCOL_SERVER_REKEY) {
2150 SilcServerRekeyInternalContext *proto_ctx =
2151 (SilcServerRekeyInternalContext *)sock->protocol->context;
2153 if (proto_ctx->packet)
2154 silc_packet_context_free(proto_ctx->packet);
2156 proto_ctx->packet = silc_packet_context_dup(packet);
2158 /* Let the protocol handle the packet */
2159 silc_protocol_execute(sock->protocol, server->schedule, 0, 0);
2161 SilcServerKEInternalContext *proto_ctx =
2162 (SilcServerKEInternalContext *)sock->protocol->context;
2164 if (proto_ctx->packet)
2165 silc_packet_context_free(proto_ctx->packet);
2167 proto_ctx->packet = silc_packet_context_dup(packet);
2168 proto_ctx->dest_id_type = packet->src_id_type;
2169 proto_ctx->dest_id = silc_id_str2id(packet->src_id, packet->src_id_len,
2170 packet->src_id_type);
2171 if (!proto_ctx->dest_id)
2174 /* Let the protocol handle the packet */
2175 silc_protocol_execute(sock->protocol, server->schedule,
2179 SILC_LOG_ERROR(("Received Key Exchange 2 packet but no key exchange "
2180 "protocol active, packet dropped."));
2184 case SILC_PACKET_CONNECTION_AUTH_REQUEST:
2186 * Connection authentication request packet. When we receive this packet
2187 * we will send to the other end information about our mandatory
2188 * authentication method for the connection. This packet maybe received
2191 SILC_LOG_DEBUG(("Connection authentication request packet"));
2192 if (packet->flags & SILC_PACKET_FLAG_LIST)
2194 silc_server_connection_auth_request(server, sock, packet);
2198 * Connection Authentication protocol packets
2200 case SILC_PACKET_CONNECTION_AUTH:
2201 /* Start of the authentication protocol. We receive here the
2202 authentication data and will verify it. */
2203 SILC_LOG_DEBUG(("Connection auth packet"));
2204 if (packet->flags & SILC_PACKET_FLAG_LIST)
2207 if (sock->protocol && sock->protocol->protocol->type
2208 == SILC_PROTOCOL_SERVER_CONNECTION_AUTH) {
2210 SilcServerConnAuthInternalContext *proto_ctx =
2211 (SilcServerConnAuthInternalContext *)sock->protocol->context;
2213 proto_ctx->packet = silc_packet_context_dup(packet);
2215 /* Let the protocol handle the packet */
2216 silc_protocol_execute(sock->protocol, server->schedule, 0, 0);
2218 SILC_LOG_ERROR(("Received Connection Auth packet but no authentication "
2219 "protocol active, packet dropped."));
2223 case SILC_PACKET_NEW_ID:
2225 * Received New ID packet. This includes some new ID that has been
2226 * created. It may be for client, server or channel. This is the way
2227 * to distribute information about new registered entities in the
2230 SILC_LOG_DEBUG(("New ID packet"));
2231 if (packet->flags & SILC_PACKET_FLAG_LIST)
2232 silc_server_new_id_list(server, sock, packet);
2234 silc_server_new_id(server, sock, packet);
2237 case SILC_PACKET_NEW_CLIENT:
2239 * Received new client packet. This includes client information that
2240 * we will use to create initial client ID. After creating new
2241 * ID we will send it to the client.
2243 SILC_LOG_DEBUG(("New Client packet"));
2244 if (packet->flags & SILC_PACKET_FLAG_LIST)
2246 silc_server_new_client(server, sock, packet);
2249 case SILC_PACKET_NEW_SERVER:
2251 * Received new server packet. This includes Server ID and some other
2252 * information that we may save. This is received after server has
2255 SILC_LOG_DEBUG(("New Server packet"));
2256 if (packet->flags & SILC_PACKET_FLAG_LIST)
2258 silc_server_new_server(server, sock, packet);
2261 case SILC_PACKET_NEW_CHANNEL:
2263 * Received new channel packet. Information about new channel in the
2264 * network are distributed using this packet.
2266 SILC_LOG_DEBUG(("New Channel packet"));
2267 if (packet->flags & SILC_PACKET_FLAG_LIST)
2268 silc_server_new_channel_list(server, sock, packet);
2270 silc_server_new_channel(server, sock, packet);
2273 case SILC_PACKET_HEARTBEAT:
2275 * Received heartbeat.
2277 SILC_LOG_DEBUG(("Heartbeat packet"));
2278 if (packet->flags & SILC_PACKET_FLAG_LIST)
2282 case SILC_PACKET_KEY_AGREEMENT:
2284 * Received heartbeat.
2286 SILC_LOG_DEBUG(("Key agreement packet"));
2287 if (packet->flags & SILC_PACKET_FLAG_LIST)
2289 silc_server_key_agreement(server, sock, packet);
2292 case SILC_PACKET_REKEY:
2294 * Received re-key packet. The sender wants to regenerate the session
2297 SILC_LOG_DEBUG(("Re-key packet"));
2298 if (packet->flags & SILC_PACKET_FLAG_LIST)
2300 silc_server_rekey(server, sock, packet);
2303 case SILC_PACKET_REKEY_DONE:
2305 * The re-key is done.
2307 SILC_LOG_DEBUG(("Re-key done packet"));
2308 if (packet->flags & SILC_PACKET_FLAG_LIST)
2311 if (sock->protocol && sock->protocol->protocol &&
2312 sock->protocol->protocol->type == SILC_PROTOCOL_SERVER_REKEY) {
2314 SilcServerRekeyInternalContext *proto_ctx =
2315 (SilcServerRekeyInternalContext *)sock->protocol->context;
2317 if (proto_ctx->packet)
2318 silc_packet_context_free(proto_ctx->packet);
2320 proto_ctx->packet = silc_packet_context_dup(packet);
2322 /* Let the protocol handle the packet */
2323 silc_protocol_execute(sock->protocol, server->schedule, 0, 0);
2325 SILC_LOG_ERROR(("Received Re-key done packet but no re-key "
2326 "protocol active, packet dropped."));
2330 case SILC_PACKET_FTP:
2332 SILC_LOG_DEBUG(("FTP packet"));
2333 if (packet->flags & SILC_PACKET_FLAG_LIST)
2335 silc_server_ftp(server, sock, packet);
2338 case SILC_PACKET_RESUME_ROUTER:
2339 /* Resume router packet received. This packet is received for backup
2340 router resuming protocol. */
2341 SILC_LOG_DEBUG(("Resume router packet"));
2342 if (packet->flags & SILC_PACKET_FLAG_LIST)
2344 silc_server_backup_resume_router(server, sock, packet);
2348 SILC_LOG_ERROR(("Incorrect packet type %d, packet dropped", type));
2354 /* Creates connection to a remote router. */
2356 void silc_server_create_connection(SilcServer server,
2357 const char *remote_host, SilcUInt32 port)
2359 SilcServerConnection sconn;
2361 /* Allocate connection object for hold connection specific stuff. */
2362 sconn = silc_calloc(1, sizeof(*sconn));
2363 sconn->server = server;
2364 sconn->remote_host = strdup(remote_host);
2365 sconn->remote_port = port;
2366 sconn->no_reconnect = TRUE;
2368 silc_schedule_task_add(server->schedule, 0,
2369 silc_server_connect_router,
2370 (void *)sconn, 0, 1, SILC_TASK_TIMEOUT,
2371 SILC_TASK_PRI_NORMAL);
2374 SILC_TASK_CALLBACK(silc_server_close_connection_final)
2376 silc_socket_free((SilcSocketConnection)context);
2379 /* Closes connection to socket connection */
2381 void silc_server_close_connection(SilcServer server,
2382 SilcSocketConnection sock)
2384 if (!server->sockets[sock->sock])
2387 SILC_LOG_INFO(("Closing connection %s:%d [%s]", sock->hostname,
2389 (sock->type == SILC_SOCKET_TYPE_UNKNOWN ? "Unknown" :
2390 sock->type == SILC_SOCKET_TYPE_CLIENT ? "Client" :
2391 sock->type == SILC_SOCKET_TYPE_SERVER ? "Server" :
2394 /* We won't listen for this connection anymore */
2395 silc_schedule_unset_listen_fd(server->schedule, sock->sock);
2397 /* Unregister all tasks */
2398 silc_schedule_task_del_by_fd(server->schedule, sock->sock);
2400 /* Close the actual connection */
2401 silc_net_close_connection(sock->sock);
2402 server->sockets[sock->sock] = NULL;
2404 /* If sock->user_data is NULL then we'll check for active protocols
2405 here since the silc_server_free_sock_user_data has not been called
2406 for this connection. */
2407 if (!sock->user_data) {
2408 /* If any protocol is active cancel its execution. It will call
2409 the final callback which will finalize the disconnection. */
2410 if (sock->protocol) {
2411 silc_protocol_cancel(sock->protocol, server->schedule);
2412 sock->protocol->state = SILC_PROTOCOL_STATE_ERROR;
2413 silc_protocol_execute_final(sock->protocol, server->schedule);
2414 sock->protocol = NULL;
2419 silc_schedule_task_add(server->schedule, 0,
2420 silc_server_close_connection_final,
2421 (void *)sock, 0, 1, SILC_TASK_TIMEOUT,
2422 SILC_TASK_PRI_NORMAL);
2425 /* Sends disconnect message to remote connection and disconnects the
2428 void silc_server_disconnect_remote(SilcServer server,
2429 SilcSocketConnection sock,
2430 const char *fmt, ...)
2433 unsigned char buf[4096];
2438 memset(buf, 0, sizeof(buf));
2440 vsprintf(buf, fmt, ap);
2443 SILC_LOG_DEBUG(("Disconnecting remote host"));
2445 /* Notify remote end that the conversation is over. The notify message
2446 is tried to be sent immediately. */
2447 silc_server_packet_send(server, sock, SILC_PACKET_DISCONNECT, 0,
2448 buf, strlen(buf), TRUE);
2449 silc_server_packet_queue_purge(server, sock);
2451 /* Mark the connection to be disconnected */
2452 SILC_SET_DISCONNECTED(sock);
2453 silc_server_close_connection(server, sock);
2458 SilcClientEntry client;
2459 } *FreeClientInternal;
2461 SILC_TASK_CALLBACK(silc_server_free_client_data_timeout)
2463 FreeClientInternal i = (FreeClientInternal)context;
2465 silc_idlist_del_data(i->client);
2466 silc_idcache_purge_by_context(i->server->local_list->clients, i->client);
2470 /* Frees client data and notifies about client's signoff. */
2472 void silc_server_free_client_data(SilcServer server,
2473 SilcSocketConnection sock,
2474 SilcClientEntry client,
2476 const char *signoff)
2478 FreeClientInternal i = silc_calloc(1, sizeof(*i));
2480 /* If there is pending outgoing data for the client then purge it
2481 to the network before removing the client entry. */
2482 silc_server_packet_queue_purge(server, sock);
2487 /* Send SIGNOFF notify to routers. */
2488 if (notify && !server->standalone && server->router)
2489 silc_server_send_notify_signoff(server, server->router->connection,
2490 server->server_type == SILC_SERVER ?
2491 FALSE : TRUE, client->id, signoff);
2493 /* Remove client from all channels */
2495 silc_server_remove_from_channels(server, NULL, client,
2496 TRUE, (char *)signoff, TRUE);
2498 silc_server_remove_from_channels(server, NULL, client,
2499 FALSE, NULL, FALSE);
2501 /* Update statistics */
2502 server->stat.my_clients--;
2503 server->stat.clients--;
2504 if (server->stat.cell_clients)
2505 server->stat.cell_clients--;
2506 SILC_OPER_STATS_UPDATE(client, server, SILC_UMODE_SERVER_OPERATOR);
2507 SILC_OPER_STATS_UPDATE(client, router, SILC_UMODE_ROUTER_OPERATOR);
2509 /* We will not delete the client entry right away. We will take it
2510 into history (for WHOWAS command) for 5 minutes */
2513 silc_schedule_task_add(server->schedule, 0,
2514 silc_server_free_client_data_timeout,
2516 SILC_TASK_TIMEOUT, SILC_TASK_PRI_LOW);
2517 client->data.status &= ~SILC_IDLIST_STATUS_REGISTERED;
2518 client->router = NULL;
2519 client->connection = NULL;
2523 /* Frees user_data pointer from socket connection object. This also sends
2524 appropriate notify packets to the network to inform about leaving
2527 void silc_server_free_sock_user_data(SilcServer server,
2528 SilcSocketConnection sock,
2529 const char *signoff_message)
2531 SILC_LOG_DEBUG(("Start"));
2533 switch (sock->type) {
2534 case SILC_SOCKET_TYPE_CLIENT:
2536 SilcClientEntry user_data = (SilcClientEntry)sock->user_data;
2537 silc_server_free_client_data(server, sock, user_data, TRUE,
2541 case SILC_SOCKET_TYPE_SERVER:
2542 case SILC_SOCKET_TYPE_ROUTER:
2544 SilcServerEntry user_data = (SilcServerEntry)sock->user_data;
2545 SilcServerEntry backup_router = NULL;
2548 backup_router = silc_server_backup_get(server, user_data->id);
2550 /* If this was our primary router connection then we're lost to
2551 the outside world. */
2552 if (server->router == user_data) {
2553 /* Check whether we have a backup router connection */
2554 if (!backup_router || backup_router == user_data) {
2555 silc_schedule_task_add(server->schedule, 0,
2556 silc_server_connect_to_router,
2559 SILC_TASK_PRI_NORMAL);
2561 server->id_entry->router = NULL;
2562 server->router = NULL;
2563 server->standalone = TRUE;
2564 backup_router = NULL;
2566 SILC_LOG_INFO(("New primary router is backup router %s",
2567 backup_router->server_name));
2568 SILC_LOG_DEBUG(("New primary router is backup router %s",
2569 backup_router->server_name));
2570 server->id_entry->router = backup_router;
2571 server->router = backup_router;
2572 server->router_connect = time(0);
2573 server->backup_primary = TRUE;
2574 if (server->server_type == SILC_BACKUP_ROUTER) {
2575 server->server_type = SILC_ROUTER;
2577 /* We'll need to constantly try to reconnect to the primary
2578 router so that we'll see when it comes back online. */
2579 silc_server_backup_reconnect(server, sock->ip, sock->port,
2580 silc_server_backup_connected,
2584 /* Mark this connection as replaced */
2585 silc_server_backup_replaced_add(server, user_data->id,
2588 } else if (backup_router) {
2589 SILC_LOG_INFO(("Enabling the use of backup router %s",
2590 backup_router->server_name));
2591 SILC_LOG_DEBUG(("Enabling the use of backup router %s",
2592 backup_router->server_name));
2594 /* Mark this connection as replaced */
2595 silc_server_backup_replaced_add(server, user_data->id,
2599 if (!backup_router) {
2600 /* Free all client entries that this server owns as they will
2601 become invalid now as well. */
2603 silc_server_remove_clients_by_server(server, user_data, TRUE);
2604 if (server->server_type == SILC_SERVER)
2605 silc_server_remove_channels_by_server(server, user_data);
2607 /* Update the client entries of this server to the new backup
2608 router. This also removes the clients that *really* was owned
2609 by the primary router and went down with the router. */
2610 silc_server_update_clients_by_server(server, user_data, backup_router,
2612 silc_server_update_servers_by_server(server, user_data, backup_router);
2613 if (server->server_type == SILC_SERVER)
2614 silc_server_update_channels_by_server(server, user_data,
2618 /* Free the server entry */
2619 silc_server_backup_del(server, user_data);
2620 silc_server_backup_replaced_del(server, user_data);
2621 silc_idlist_del_data(user_data);
2622 if (!silc_idlist_del_server(server->local_list, user_data))
2623 silc_idlist_del_server(server->global_list, user_data);
2624 server->stat.my_servers--;
2625 server->stat.servers--;
2626 if (server->server_type == SILC_ROUTER)
2627 server->stat.cell_servers--;
2629 if (backup_router) {
2630 /* Announce all of our stuff that was created about 5 minutes ago.
2631 The backup router knows all the other stuff already. */
2632 if (server->server_type == SILC_ROUTER)
2633 silc_server_announce_servers(server, FALSE, time(0) - 300,
2634 backup_router->connection);
2636 /* Announce our clients and channels to the router */
2637 silc_server_announce_clients(server, time(0) - 300,
2638 backup_router->connection);
2639 silc_server_announce_channels(server, time(0) - 300,
2640 backup_router->connection);
2646 SilcUnknownEntry user_data = (SilcUnknownEntry)sock->user_data;
2648 silc_idlist_del_data(user_data);
2649 silc_free(user_data);
2654 /* If any protocol is active cancel its execution */
2655 if (sock->protocol) {
2656 silc_protocol_cancel(sock->protocol, server->schedule);
2657 sock->protocol->state = SILC_PROTOCOL_STATE_ERROR;
2658 silc_protocol_execute_final(sock->protocol, server->schedule);
2659 sock->protocol = NULL;
2662 sock->user_data = NULL;
2665 /* Removes client from all channels it has joined. This is used when client
2666 connection is disconnected. If the client on a channel is last, the
2667 channel is removed as well. This sends the SIGNOFF notify types. */
2669 void silc_server_remove_from_channels(SilcServer server,
2670 SilcSocketConnection sock,
2671 SilcClientEntry client,
2673 char *signoff_message,
2676 SilcChannelEntry channel;
2677 SilcChannelClientEntry chl;
2678 SilcHashTableList htl;
2681 SILC_LOG_DEBUG(("Start"));
2683 if (!client || !client->id)
2686 clidp = silc_id_payload_encode(client->id, SILC_ID_CLIENT);
2688 /* Remove the client from all channels. The client is removed from
2689 the channels' user list. */
2690 silc_hash_table_list(client->channels, &htl);
2691 while (silc_hash_table_get(&htl, NULL, (void *)&chl)) {
2692 channel = chl->channel;
2694 /* Remove channel from client's channel list */
2695 silc_hash_table_del(client->channels, channel);
2697 /* Remove channel if there is no users anymore */
2698 if (server->server_type == SILC_ROUTER &&
2699 silc_hash_table_count(channel->user_list) < 2) {
2701 silc_schedule_task_del_by_context(server->schedule, channel->rekey);
2702 if (silc_idlist_del_channel(server->local_list, channel))
2703 server->stat.my_channels--;
2705 silc_idlist_del_channel(server->global_list, channel);
2709 /* Remove client from channel's client list */
2710 silc_hash_table_del(channel->user_list, chl->client);
2711 channel->user_count--;
2713 /* If there is no global users on the channel anymore mark the channel
2714 as local channel. Do not check if the removed client is local client. */
2715 if (server->server_type != SILC_ROUTER && channel->global_users &&
2716 chl->client->router && !silc_server_channel_has_global(channel))
2717 channel->global_users = FALSE;
2720 server->stat.my_chanclients--;
2722 /* If there is not at least one local user on the channel then we don't
2723 need the channel entry anymore, we can remove it safely. */
2724 if (server->server_type != SILC_ROUTER &&
2725 !silc_server_channel_has_local(channel)) {
2726 /* Notify about leaving client if this channel has global users. */
2727 if (notify && channel->global_users)
2728 silc_server_send_notify_to_channel(server, NULL, channel, FALSE,
2729 SILC_NOTIFY_TYPE_SIGNOFF,
2730 signoff_message ? 2 : 1,
2731 clidp->data, clidp->len,
2732 signoff_message, signoff_message ?
2733 strlen(signoff_message) : 0);
2736 silc_schedule_task_del_by_context(server->schedule, channel->rekey);
2738 if (channel->founder_key) {
2739 /* The founder auth data exists, do not remove the channel entry */
2740 SilcChannelClientEntry chl2;
2741 SilcHashTableList htl2;
2743 channel->disabled = TRUE;
2745 silc_hash_table_list(channel->user_list, &htl2);
2746 while (silc_hash_table_get(&htl2, NULL, (void *)&chl2)) {
2747 silc_hash_table_del(chl2->client->channels, channel);
2748 silc_hash_table_del(channel->user_list, chl2->client);
2749 channel->user_count--;
2752 silc_hash_table_list_reset(&htl2);
2756 /* Remove the channel entry */
2757 if (silc_idlist_del_channel(server->local_list, channel))
2758 server->stat.my_channels--;
2760 silc_idlist_del_channel(server->global_list, channel);
2764 /* Send notify to channel about client leaving SILC and thus
2765 the entire channel. */
2767 silc_server_send_notify_to_channel(server, NULL, channel, FALSE,
2768 SILC_NOTIFY_TYPE_SIGNOFF,
2769 signoff_message ? 2 : 1,
2770 clidp->data, clidp->len,
2771 signoff_message, signoff_message ?
2772 strlen(signoff_message) : 0);
2774 if (keygen && !(channel->mode & SILC_CHANNEL_MODE_PRIVKEY)) {
2775 /* Re-generate channel key */
2776 if (!silc_server_create_channel_key(server, channel, 0))
2779 /* Send the channel key to the channel. The key of course is not sent
2780 to the client who was removed from the channel. */
2781 silc_server_send_channel_key(server, client->connection, channel,
2782 server->server_type == SILC_ROUTER ?
2783 FALSE : !server->standalone);
2788 silc_hash_table_list_reset(&htl);
2789 silc_buffer_free(clidp);
2792 /* Removes client from one channel. This is used for example when client
2793 calls LEAVE command to remove itself from the channel. Returns TRUE
2794 if channel still exists and FALSE if the channel is removed when
2795 last client leaves the channel. If `notify' is FALSE notify messages
2798 int silc_server_remove_from_one_channel(SilcServer server,
2799 SilcSocketConnection sock,
2800 SilcChannelEntry channel,
2801 SilcClientEntry client,
2804 SilcChannelClientEntry chl;
2807 SILC_LOG_DEBUG(("Start"));
2809 /* Get the entry to the channel, if this client is not on the channel
2811 if (!silc_hash_table_find(client->channels, channel, NULL, (void *)&chl))
2814 /* Remove the client from the channel. The client is removed from
2815 the channel's user list. */
2817 clidp = silc_id_payload_encode(client->id, SILC_ID_CLIENT);
2819 /* Remove channel from client's channel list */
2820 silc_hash_table_del(client->channels, chl->channel);
2822 /* Remove channel if there is no users anymore */
2823 if (server->server_type == SILC_ROUTER &&
2824 silc_hash_table_count(channel->user_list) < 2) {
2826 silc_schedule_task_del_by_context(server->schedule, channel->rekey);
2827 if (silc_idlist_del_channel(server->local_list, channel))
2828 server->stat.my_channels--;
2830 silc_idlist_del_channel(server->global_list, channel);
2831 silc_buffer_free(clidp);
2835 /* Remove client from channel's client list */
2836 silc_hash_table_del(channel->user_list, chl->client);
2837 channel->user_count--;
2839 /* If there is no global users on the channel anymore mark the channel
2840 as local channel. Do not check if the client is local client. */
2841 if (server->server_type != SILC_ROUTER && channel->global_users &&
2842 chl->client->router && !silc_server_channel_has_global(channel))
2843 channel->global_users = FALSE;
2846 server->stat.my_chanclients--;
2848 /* If there is not at least one local user on the channel then we don't
2849 need the channel entry anymore, we can remove it safely. */
2850 if (server->server_type != SILC_ROUTER &&
2851 !silc_server_channel_has_local(channel)) {
2852 /* Notify about leaving client if this channel has global users. */
2853 if (notify && channel->global_users)
2854 silc_server_send_notify_to_channel(server, NULL, channel, FALSE,
2855 SILC_NOTIFY_TYPE_LEAVE, 1,
2856 clidp->data, clidp->len);
2858 silc_buffer_free(clidp);
2861 silc_schedule_task_del_by_context(server->schedule, channel->rekey);
2863 if (channel->founder_key) {
2864 /* The founder auth data exists, do not remove the channel entry */
2865 SilcChannelClientEntry chl2;
2866 SilcHashTableList htl2;
2868 channel->disabled = TRUE;
2870 silc_hash_table_list(channel->user_list, &htl2);
2871 while (silc_hash_table_get(&htl2, NULL, (void *)&chl2)) {
2872 silc_hash_table_del(chl2->client->channels, channel);
2873 silc_hash_table_del(channel->user_list, chl2->client);
2874 channel->user_count--;
2877 silc_hash_table_list_reset(&htl2);
2881 /* Remove the channel entry */
2882 if (silc_idlist_del_channel(server->local_list, channel))
2883 server->stat.my_channels--;
2885 silc_idlist_del_channel(server->global_list, channel);
2889 /* Send notify to channel about client leaving the channel */
2891 silc_server_send_notify_to_channel(server, NULL, channel, FALSE,
2892 SILC_NOTIFY_TYPE_LEAVE, 1,
2893 clidp->data, clidp->len);
2895 silc_buffer_free(clidp);
2899 /* Timeout callback. This is called if connection is idle or for some
2900 other reason is not responding within some period of time. This
2901 disconnects the remote end. */
2903 SILC_TASK_CALLBACK(silc_server_timeout_remote)
2905 SilcServer server = (SilcServer)context;
2906 SilcSocketConnection sock = server->sockets[fd];
2908 SILC_LOG_DEBUG(("Start"));
2913 SILC_LOG_ERROR(("No response from %s (%s), Connection timeout",
2914 sock->hostname, sock->ip));
2916 /* If we have protocol active we must assure that we call the protocol's
2917 final callback so that all the memory is freed. */
2918 if (sock->protocol) {
2919 silc_protocol_cancel(sock->protocol, server->schedule);
2920 sock->protocol->state = SILC_PROTOCOL_STATE_ERROR;
2921 silc_protocol_execute_final(sock->protocol, server->schedule);
2922 sock->protocol = NULL;
2926 if (sock->user_data)
2927 silc_server_free_sock_user_data(server, sock, NULL);
2929 silc_server_disconnect_remote(server, sock, "Server closed connection: "
2930 "Connection timeout");
2933 /* Creates new channel. Sends NEW_CHANNEL packet to primary route. This
2934 function may be used only by router. In real SILC network all channels
2935 are created by routers thus this function is never used by normal
2938 SilcChannelEntry silc_server_create_new_channel(SilcServer server,
2939 SilcServerID *router_id,
2945 SilcChannelID *channel_id;
2946 SilcChannelEntry entry;
2950 SILC_LOG_DEBUG(("Creating new channel"));
2953 cipher = SILC_DEFAULT_CIPHER;
2955 hmac = SILC_DEFAULT_HMAC;
2957 /* Allocate cipher */
2958 if (!silc_cipher_alloc(cipher, &key))
2962 if (!silc_hmac_alloc(hmac, NULL, &newhmac)) {
2963 silc_cipher_free(key);
2967 channel_name = strdup(channel_name);
2969 /* Create the channel ID */
2970 if (!silc_id_create_channel_id(server, router_id, server->rng,
2972 silc_free(channel_name);
2973 silc_cipher_free(key);
2974 silc_hmac_free(newhmac);
2978 /* Create the channel */
2979 entry = silc_idlist_add_channel(server->local_list, channel_name,
2980 SILC_CHANNEL_MODE_NONE, channel_id,
2981 NULL, key, newhmac, 0);
2983 silc_free(channel_name);
2984 silc_cipher_free(key);
2985 silc_hmac_free(newhmac);
2986 silc_free(channel_id);
2990 entry->cipher = strdup(cipher);
2991 entry->hmac_name = strdup(hmac);
2993 /* Now create the actual key material */
2994 if (!silc_server_create_channel_key(server, entry,
2995 silc_cipher_get_key_len(key) / 8)) {
2996 silc_idlist_del_channel(server->local_list, entry);
3000 /* Notify other routers about the new channel. We send the packet
3001 to our primary route. */
3002 if (broadcast && server->standalone == FALSE)
3003 silc_server_send_new_channel(server, server->router->connection, TRUE,
3004 channel_name, entry->id,
3005 silc_id_get_len(entry->id, SILC_ID_CHANNEL),
3008 server->stat.my_channels++;
3013 /* Same as above but creates the channel with Channel ID `channel_id. */
3016 silc_server_create_new_channel_with_id(SilcServer server,
3020 SilcChannelID *channel_id,
3023 SilcChannelEntry entry;
3027 SILC_LOG_DEBUG(("Creating new channel"));
3030 cipher = SILC_DEFAULT_CIPHER;
3032 hmac = SILC_DEFAULT_HMAC;
3034 /* Allocate cipher */
3035 if (!silc_cipher_alloc(cipher, &key))
3039 if (!silc_hmac_alloc(hmac, NULL, &newhmac)) {
3040 silc_cipher_free(key);
3044 channel_name = strdup(channel_name);
3046 /* Create the channel */
3047 entry = silc_idlist_add_channel(server->local_list, channel_name,
3048 SILC_CHANNEL_MODE_NONE, channel_id,
3049 NULL, key, newhmac, 0);
3051 silc_cipher_free(key);
3052 silc_hmac_free(newhmac);
3053 silc_free(channel_name);
3057 /* Now create the actual key material */
3058 if (!silc_server_create_channel_key(server, entry,
3059 silc_cipher_get_key_len(key) / 8)) {
3060 silc_idlist_del_channel(server->local_list, entry);
3064 /* Notify other routers about the new channel. We send the packet
3065 to our primary route. */
3066 if (broadcast && server->standalone == FALSE)
3067 silc_server_send_new_channel(server, server->router->connection, TRUE,
3068 channel_name, entry->id,
3069 silc_id_get_len(entry->id, SILC_ID_CHANNEL),
3072 server->stat.my_channels++;
3077 /* Channel's key re-key timeout callback. */
3079 SILC_TASK_CALLBACK(silc_server_channel_key_rekey)
3081 SilcServerChannelRekey rekey = (SilcServerChannelRekey)context;
3082 SilcServer server = (SilcServer)rekey->context;
3086 if (!silc_server_create_channel_key(server, rekey->channel, rekey->key_len))
3089 silc_server_send_channel_key(server, NULL, rekey->channel, FALSE);
3092 /* Generates new channel key. This is used to create the initial channel key
3093 but also to re-generate new key for channel. If `key_len' is provided
3094 it is the bytes of the key length. */
3096 bool silc_server_create_channel_key(SilcServer server,
3097 SilcChannelEntry channel,
3101 unsigned char channel_key[32], hash[32];
3104 SILC_LOG_DEBUG(("Generating channel key"));
3106 if (channel->mode & SILC_CHANNEL_MODE_PRIVKEY) {
3107 SILC_LOG_DEBUG(("Channel has private keys, will not generate new key"));
3111 if (!channel->channel_key)
3112 if (!silc_cipher_alloc(SILC_DEFAULT_CIPHER, &channel->channel_key)) {
3113 channel->channel_key = NULL;
3119 else if (channel->key_len)
3120 len = channel->key_len / 8;
3122 len = silc_cipher_get_key_len(channel->channel_key) / 8;
3124 /* Create channel key */
3125 for (i = 0; i < len; i++) channel_key[i] = silc_rng_get_byte(server->rng);
3128 silc_cipher_set_key(channel->channel_key, channel_key, len * 8);
3130 /* Remove old key if exists */
3132 memset(channel->key, 0, channel->key_len / 8);
3133 silc_free(channel->key);
3137 channel->key_len = len * 8;
3138 channel->key = silc_memdup(channel_key, len);
3139 memset(channel_key, 0, sizeof(channel_key));
3141 /* Generate HMAC key from the channel key data and set it */
3143 silc_hmac_alloc(SILC_DEFAULT_HMAC, NULL, &channel->hmac);
3144 silc_hash_make(silc_hmac_get_hash(channel->hmac), channel->key, len, hash);
3145 silc_hmac_set_key(channel->hmac, hash,
3146 silc_hash_len(silc_hmac_get_hash(channel->hmac)));
3147 memset(hash, 0, sizeof(hash));
3149 if (server->server_type == SILC_ROUTER) {
3150 if (!channel->rekey)
3151 channel->rekey = silc_calloc(1, sizeof(*channel->rekey));
3152 channel->rekey->context = (void *)server;
3153 channel->rekey->channel = channel;
3154 channel->rekey->key_len = key_len;
3155 if (channel->rekey->task)
3156 silc_schedule_task_del(server->schedule, channel->rekey->task);
3158 channel->rekey->task =
3159 silc_schedule_task_add(server->schedule, 0,
3160 silc_server_channel_key_rekey,
3161 (void *)channel->rekey,
3162 server->config->channel_rekey_secs, 0,
3164 SILC_TASK_PRI_NORMAL);
3170 /* Saves the channel key found in the encoded `key_payload' buffer. This
3171 function is used when we receive Channel Key Payload and also when we're
3172 processing JOIN command reply. Returns entry to the channel. */
3174 SilcChannelEntry silc_server_save_channel_key(SilcServer server,
3175 SilcBuffer key_payload,
3176 SilcChannelEntry channel)
3178 SilcChannelKeyPayload payload = NULL;
3179 SilcChannelID *id = NULL;
3180 unsigned char *tmp, hash[32];
3184 SILC_LOG_DEBUG(("Start"));
3186 /* Decode channel key payload */
3187 payload = silc_channel_key_payload_parse(key_payload->data,
3190 SILC_LOG_ERROR(("Bad channel key payload received, dropped"));
3195 /* Get the channel entry */
3198 /* Get channel ID */
3199 tmp = silc_channel_key_get_id(payload, &tmp_len);
3200 id = silc_id_str2id(tmp, tmp_len, SILC_ID_CHANNEL);
3206 channel = silc_idlist_find_channel_by_id(server->local_list, id, NULL);
3208 channel = silc_idlist_find_channel_by_id(server->global_list, id, NULL);
3210 SILC_LOG_ERROR(("Received key for non-existent channel %s",
3211 silc_id_render(id, SILC_ID_CHANNEL)));
3217 tmp = silc_channel_key_get_key(payload, &tmp_len);
3223 cipher = silc_channel_key_get_cipher(payload, NULL);
3229 /* Remove old key if exists */
3231 memset(channel->key, 0, channel->key_len / 8);
3232 silc_free(channel->key);
3233 silc_cipher_free(channel->channel_key);
3236 /* Create new cipher */
3237 if (!silc_cipher_alloc(cipher, &channel->channel_key)) {
3238 channel->channel_key = NULL;
3243 if (channel->cipher)
3244 silc_free(channel->cipher);
3245 channel->cipher = strdup(cipher);
3248 channel->key_len = tmp_len * 8;
3249 channel->key = silc_memdup(tmp, tmp_len);
3250 silc_cipher_set_key(channel->channel_key, tmp, channel->key_len);
3252 /* Generate HMAC key from the channel key data and set it */
3254 silc_hmac_alloc(SILC_DEFAULT_HMAC, NULL, &channel->hmac);
3255 silc_hash_make(silc_hmac_get_hash(channel->hmac), tmp, tmp_len, hash);
3256 silc_hmac_set_key(channel->hmac, hash,
3257 silc_hash_len(silc_hmac_get_hash(channel->hmac)));
3259 memset(hash, 0, sizeof(hash));
3260 memset(tmp, 0, tmp_len);
3262 if (server->server_type == SILC_ROUTER) {
3263 if (!channel->rekey)
3264 channel->rekey = silc_calloc(1, sizeof(*channel->rekey));
3265 channel->rekey->context = (void *)server;
3266 channel->rekey->channel = channel;
3267 if (channel->rekey->task)
3268 silc_schedule_task_del(server->schedule, channel->rekey->task);
3270 channel->rekey->task =
3271 silc_schedule_task_add(server->schedule, 0,
3272 silc_server_channel_key_rekey,
3273 (void *)channel->rekey,
3274 server->config->channel_rekey_secs, 0,
3276 SILC_TASK_PRI_NORMAL);
3282 silc_channel_key_payload_free(payload);
3287 /* Heartbeat callback. This function is set as argument for the
3288 silc_socket_set_heartbeat function. The library will call this function
3289 at the set time interval. */
3291 void silc_server_perform_heartbeat(SilcSocketConnection sock,
3294 SilcServerHBContext hb = (SilcServerHBContext)hb_context;
3296 SILC_LOG_DEBUG(("Sending heartbeat to %s (%s)", sock->hostname, sock->ip));
3298 /* Send the heartbeat */
3299 silc_server_send_heartbeat(hb->server, sock);
3302 /* Returns assembled of all servers in the given ID list. The packet's
3303 form is dictated by the New ID payload. */
3305 static void silc_server_announce_get_servers(SilcServer server,
3306 SilcServerEntry remote,
3308 SilcBuffer *servers,
3309 unsigned long creation_time)
3311 SilcIDCacheList list;
3312 SilcIDCacheEntry id_cache;
3313 SilcServerEntry entry;
3316 /* Go through all clients in the list */
3317 if (silc_idcache_get_all(id_list->servers, &list)) {
3318 if (silc_idcache_list_first(list, &id_cache)) {
3320 entry = (SilcServerEntry)id_cache->context;
3322 /* Do not announce the one we've sending our announcements and
3323 do not announce ourself. Also check the creation time if it's
3325 if ((entry == remote) || (entry == server->id_entry) ||
3326 (creation_time && entry->data.created < creation_time)) {
3327 if (!silc_idcache_list_next(list, &id_cache))
3332 idp = silc_id_payload_encode(entry->id, SILC_ID_SERVER);
3334 *servers = silc_buffer_realloc(*servers,
3336 (*servers)->truelen + idp->len :
3338 silc_buffer_pull_tail(*servers, ((*servers)->end - (*servers)->data));
3339 silc_buffer_put(*servers, idp->data, idp->len);
3340 silc_buffer_pull(*servers, idp->len);
3341 silc_buffer_free(idp);
3343 if (!silc_idcache_list_next(list, &id_cache))
3348 silc_idcache_list_free(list);
3353 silc_server_announce_encode_notify(SilcNotifyType notify, SilcUInt32 argc, ...)
3359 p = silc_notify_payload_encode(notify, argc, ap);
3365 /* This function is used by router to announce existing servers to our
3366 primary router when we've connected to it. If `creation_time' is non-zero
3367 then only the servers that has been created after the `creation_time'
3368 will be announced. */
3370 void silc_server_announce_servers(SilcServer server, bool global,
3371 unsigned long creation_time,
3372 SilcSocketConnection remote)
3374 SilcBuffer servers = NULL;
3376 SILC_LOG_DEBUG(("Announcing servers"));
3378 /* Get servers in local list */
3379 silc_server_announce_get_servers(server, remote->user_data,
3380 server->local_list, &servers,
3384 /* Get servers in global list */
3385 silc_server_announce_get_servers(server, remote->user_data,
3386 server->global_list, &servers,
3390 silc_buffer_push(servers, servers->data - servers->head);
3391 SILC_LOG_HEXDUMP(("servers"), servers->data, servers->len);
3393 /* Send the packet */
3394 silc_server_packet_send(server, remote,
3395 SILC_PACKET_NEW_ID, SILC_PACKET_FLAG_LIST,
3396 servers->data, servers->len, TRUE);
3398 silc_buffer_free(servers);
3402 /* Returns assembled packet of all clients in the given ID list. The
3403 packet's form is dictated by the New ID Payload. */
3405 static void silc_server_announce_get_clients(SilcServer server,
3407 SilcBuffer *clients,
3409 unsigned long creation_time)
3411 SilcIDCacheList list;
3412 SilcIDCacheEntry id_cache;
3413 SilcClientEntry client;
3416 unsigned char mode[4];
3418 /* Go through all clients in the list */
3419 if (silc_idcache_get_all(id_list->clients, &list)) {
3420 if (silc_idcache_list_first(list, &id_cache)) {
3422 client = (SilcClientEntry)id_cache->context;
3424 if (creation_time && client->data.created < creation_time) {
3425 if (!silc_idcache_list_next(list, &id_cache))
3430 idp = silc_id_payload_encode(client->id, SILC_ID_CLIENT);
3432 *clients = silc_buffer_realloc(*clients,
3434 (*clients)->truelen + idp->len :
3436 silc_buffer_pull_tail(*clients, ((*clients)->end - (*clients)->data));
3437 silc_buffer_put(*clients, idp->data, idp->len);
3438 silc_buffer_pull(*clients, idp->len);
3440 SILC_PUT32_MSB(client->mode, mode);
3441 tmp = silc_server_announce_encode_notify(SILC_NOTIFY_TYPE_UMODE_CHANGE,
3442 2, idp->data, idp->len,
3444 *umodes = silc_buffer_realloc(*umodes,
3446 (*umodes)->truelen + tmp->len :
3448 silc_buffer_pull_tail(*umodes, ((*umodes)->end - (*umodes)->data));
3449 silc_buffer_put(*umodes, tmp->data, tmp->len);
3450 silc_buffer_pull(*umodes, tmp->len);
3451 silc_buffer_free(tmp);
3453 silc_buffer_free(idp);
3455 if (!silc_idcache_list_next(list, &id_cache))
3460 silc_idcache_list_free(list);
3464 /* This function is used to announce our existing clients to our router
3465 when we've connected to it. If `creation_time' is non-zero then only
3466 the clients that has been created after the `creation_time' will be
3469 void silc_server_announce_clients(SilcServer server,
3470 unsigned long creation_time,
3471 SilcSocketConnection remote)
3473 SilcBuffer clients = NULL;
3474 SilcBuffer umodes = NULL;
3476 SILC_LOG_DEBUG(("Announcing clients"));
3478 /* Get clients in local list */
3479 silc_server_announce_get_clients(server, server->local_list,
3480 &clients, &umodes, creation_time);
3482 /* As router we announce our global list as well */
3483 if (server->server_type == SILC_ROUTER)
3484 silc_server_announce_get_clients(server, server->global_list,
3485 &clients, &umodes, creation_time);
3488 silc_buffer_push(clients, clients->data - clients->head);
3489 SILC_LOG_HEXDUMP(("clients"), clients->data, clients->len);
3491 /* Send the packet */
3492 silc_server_packet_send(server, remote,
3493 SILC_PACKET_NEW_ID, SILC_PACKET_FLAG_LIST,
3494 clients->data, clients->len, TRUE);
3496 silc_buffer_free(clients);
3500 silc_buffer_push(umodes, umodes->data - umodes->head);
3501 SILC_LOG_HEXDUMP(("umodes"), umodes->data, umodes->len);
3503 /* Send the packet */
3504 silc_server_packet_send(server, remote,
3505 SILC_PACKET_NOTIFY, SILC_PACKET_FLAG_LIST,
3506 umodes->data, umodes->len, TRUE);
3508 silc_buffer_free(umodes);
3512 /* Returns channel's topic for announcing it */
3514 void silc_server_announce_get_channel_topic(SilcServer server,
3515 SilcChannelEntry channel,
3520 if (channel->topic) {
3521 chidp = silc_id_payload_encode(channel->id, SILC_ID_CHANNEL);
3522 *topic = silc_server_announce_encode_notify(SILC_NOTIFY_TYPE_TOPIC_SET, 2,
3523 chidp->data, chidp->len,
3525 strlen(channel->topic));
3526 silc_buffer_free(chidp);
3530 /* Returns assembled packets for channel users of the `channel'. */
3532 void silc_server_announce_get_channel_users(SilcServer server,
3533 SilcChannelEntry channel,
3534 SilcBuffer *channel_users,
3535 SilcBuffer *channel_users_modes)
3537 SilcChannelClientEntry chl;
3538 SilcHashTableList htl;
3539 SilcBuffer chidp, clidp;
3542 unsigned char mode[4];
3544 SILC_LOG_DEBUG(("Start"));
3546 /* Now find all users on the channel */
3547 chidp = silc_id_payload_encode(channel->id, SILC_ID_CHANNEL);
3548 silc_hash_table_list(channel->user_list, &htl);
3549 while (silc_hash_table_get(&htl, NULL, (void *)&chl)) {
3550 clidp = silc_id_payload_encode(chl->client->id, SILC_ID_CLIENT);
3553 tmp = silc_server_announce_encode_notify(SILC_NOTIFY_TYPE_JOIN, 2,
3554 clidp->data, clidp->len,
3555 chidp->data, chidp->len);
3558 silc_buffer_realloc(*channel_users,
3560 (*channel_users)->truelen + len : len));
3561 silc_buffer_pull_tail(*channel_users,
3562 ((*channel_users)->end -
3563 (*channel_users)->data));
3565 silc_buffer_put(*channel_users, tmp->data, tmp->len);
3566 silc_buffer_pull(*channel_users, len);
3567 silc_buffer_free(tmp);
3569 /* CUMODE notify for mode change on the channel */
3570 SILC_PUT32_MSB(chl->mode, mode);
3571 tmp = silc_server_announce_encode_notify(SILC_NOTIFY_TYPE_CUMODE_CHANGE,
3572 3, clidp->data, clidp->len,
3574 clidp->data, clidp->len);
3576 *channel_users_modes =
3577 silc_buffer_realloc(*channel_users_modes,
3578 (*channel_users_modes ?
3579 (*channel_users_modes)->truelen + len : len));
3580 silc_buffer_pull_tail(*channel_users_modes,
3581 ((*channel_users_modes)->end -
3582 (*channel_users_modes)->data));
3584 silc_buffer_put(*channel_users_modes, tmp->data, tmp->len);
3585 silc_buffer_pull(*channel_users_modes, len);
3586 silc_buffer_free(tmp);
3588 silc_buffer_free(clidp);
3590 silc_hash_table_list_reset(&htl);
3591 silc_buffer_free(chidp);
3594 /* Returns assembled packets for all channels and users on those channels
3595 from the given ID List. The packets are in the form dictated by the
3596 New Channel and New Channel User payloads. */
3598 void silc_server_announce_get_channels(SilcServer server,
3600 SilcBuffer *channels,
3601 SilcBuffer *channel_users,
3602 SilcBuffer **channel_users_modes,
3603 SilcUInt32 *channel_users_modes_c,
3604 SilcBuffer **channel_topics,
3605 SilcChannelID ***channel_ids,
3606 unsigned long creation_time)
3608 SilcIDCacheList list;
3609 SilcIDCacheEntry id_cache;
3610 SilcChannelEntry channel;
3613 SilcUInt16 name_len;
3615 int i = *channel_users_modes_c;
3618 SILC_LOG_DEBUG(("Start"));
3620 /* Go through all channels in the list */
3621 if (silc_idcache_get_all(id_list->channels, &list)) {
3622 if (silc_idcache_list_first(list, &id_cache)) {
3624 channel = (SilcChannelEntry)id_cache->context;
3626 if (creation_time && channel->created < creation_time)
3631 cid = silc_id_id2str(channel->id, SILC_ID_CHANNEL);
3632 id_len = silc_id_get_len(channel->id, SILC_ID_CHANNEL);
3633 name_len = strlen(channel->channel_name);
3636 len = 4 + name_len + id_len + 4;
3638 silc_buffer_realloc(*channels,
3639 (*channels ? (*channels)->truelen +
3641 silc_buffer_pull_tail(*channels,
3642 ((*channels)->end - (*channels)->data));
3643 silc_buffer_format(*channels,
3644 SILC_STR_UI_SHORT(name_len),
3645 SILC_STR_UI_XNSTRING(channel->channel_name,
3647 SILC_STR_UI_SHORT(id_len),
3648 SILC_STR_UI_XNSTRING(cid, id_len),
3649 SILC_STR_UI_INT(channel->mode),
3651 silc_buffer_pull(*channels, len);
3654 /* Channel user modes */
3655 *channel_users_modes = silc_realloc(*channel_users_modes,
3656 sizeof(**channel_users_modes) *
3658 (*channel_users_modes)[i] = NULL;
3659 *channel_ids = silc_realloc(*channel_ids,
3660 sizeof(**channel_ids) * (i + 1));
3661 (*channel_ids)[i] = NULL;
3662 silc_server_announce_get_channel_users(server, channel,
3664 &(*channel_users_modes)[i]);
3665 (*channel_ids)[i] = channel->id;
3667 /* Channel's topic */
3668 *channel_topics = silc_realloc(*channel_topics,
3669 sizeof(**channel_topics) * (i + 1));
3670 (*channel_topics)[i] = NULL;
3671 silc_server_announce_get_channel_topic(server, channel,
3672 &(*channel_topics)[i]);
3675 if (!silc_idcache_list_next(list, &id_cache))
3679 *channel_users_modes_c += i;
3682 silc_idcache_list_free(list);
3686 /* This function is used to announce our existing channels to our router
3687 when we've connected to it. This also announces the users on the
3688 channels to the router. If the `creation_time' is non-zero only the
3689 channels that was created after the `creation_time' are announced.
3690 Note that the channel users are still announced even if the `creation_time'
3693 void silc_server_announce_channels(SilcServer server,
3694 unsigned long creation_time,
3695 SilcSocketConnection remote)
3697 SilcBuffer channels = NULL, channel_users = NULL;
3698 SilcBuffer *channel_users_modes = NULL;
3699 SilcBuffer *channel_topics = NULL;
3700 SilcUInt32 channel_users_modes_c = 0;
3701 SilcChannelID **channel_ids = NULL;
3703 SILC_LOG_DEBUG(("Announcing channels and channel users"));
3705 /* Get channels and channel users in local list */
3706 silc_server_announce_get_channels(server, server->local_list,
3707 &channels, &channel_users,
3708 &channel_users_modes,
3709 &channel_users_modes_c,
3711 &channel_ids, creation_time);
3713 /* Get channels and channel users in global list */
3714 if (server->server_type != SILC_SERVER)
3715 silc_server_announce_get_channels(server, server->global_list,
3716 &channels, &channel_users,
3717 &channel_users_modes,
3718 &channel_users_modes_c,
3720 &channel_ids, creation_time);
3723 silc_buffer_push(channels, channels->data - channels->head);
3724 SILC_LOG_HEXDUMP(("channels"), channels->data, channels->len);
3726 /* Send the packet */
3727 silc_server_packet_send(server, remote,
3728 SILC_PACKET_NEW_CHANNEL, SILC_PACKET_FLAG_LIST,
3729 channels->data, channels->len,
3732 silc_buffer_free(channels);
3735 if (channel_users) {
3736 silc_buffer_push(channel_users, channel_users->data - channel_users->head);
3737 SILC_LOG_HEXDUMP(("channel users"), channel_users->data,
3738 channel_users->len);
3740 /* Send the packet */
3741 silc_server_packet_send(server, remote,
3742 SILC_PACKET_NOTIFY, SILC_PACKET_FLAG_LIST,
3743 channel_users->data, channel_users->len,
3746 silc_buffer_free(channel_users);
3749 if (channel_users_modes) {
3752 for (i = 0; i < channel_users_modes_c; i++) {
3753 if (!channel_users_modes[i])
3755 silc_buffer_push(channel_users_modes[i],
3756 channel_users_modes[i]->data -
3757 channel_users_modes[i]->head);
3758 SILC_LOG_HEXDUMP(("channel users modes"), channel_users_modes[i]->data,
3759 channel_users_modes[i]->len);
3760 silc_server_packet_send_dest(server, remote,
3761 SILC_PACKET_NOTIFY, SILC_PACKET_FLAG_LIST,
3762 channel_ids[i], SILC_ID_CHANNEL,
3763 channel_users_modes[i]->data,
3764 channel_users_modes[i]->len,
3766 silc_buffer_free(channel_users_modes[i]);
3768 silc_free(channel_users_modes);
3771 if (channel_topics) {
3774 for (i = 0; i < channel_users_modes_c; i++) {
3775 if (!channel_topics[i])
3778 silc_buffer_push(channel_topics[i],
3779 channel_topics[i]->data -
3780 channel_topics[i]->head);
3781 SILC_LOG_HEXDUMP(("channel topic"), channel_topics[i]->data,
3782 channel_topics[i]->len);
3783 silc_server_packet_send_dest(server, remote,
3784 SILC_PACKET_NOTIFY, SILC_PACKET_FLAG_LIST,
3785 channel_ids[i], SILC_ID_CHANNEL,
3786 channel_topics[i]->data,
3787 channel_topics[i]->len,
3789 silc_buffer_free(channel_topics[i]);
3791 silc_free(channel_topics);
3794 silc_free(channel_ids);
3797 /* Failure timeout callback. If this is called then we will immediately
3798 process the received failure. We always process the failure with timeout
3799 since we do not want to blindly trust to received failure packets.
3800 This won't be called (the timeout is cancelled) if the failure was
3801 bogus (it is bogus if remote does not close the connection after sending
3804 SILC_TASK_CALLBACK(silc_server_failure_callback)
3806 SilcServerFailureContext f = (SilcServerFailureContext)context;
3808 if (f->sock->protocol) {
3809 f->sock->protocol->state = SILC_PROTOCOL_STATE_FAILURE;
3810 silc_protocol_execute(f->sock->protocol, f->server->schedule, 0, 0);
3816 /* Assembles user list and users mode list from the `channel'. */
3818 void silc_server_get_users_on_channel(SilcServer server,
3819 SilcChannelEntry channel,
3820 SilcBuffer *user_list,
3821 SilcBuffer *mode_list,
3822 SilcUInt32 *user_count)
3824 SilcChannelClientEntry chl;
3825 SilcHashTableList htl;
3826 SilcBuffer client_id_list;
3827 SilcBuffer client_mode_list;
3829 SilcUInt32 list_count = 0, len = 0;
3831 silc_hash_table_list(channel->user_list, &htl);
3832 while (silc_hash_table_get(&htl, NULL, (void *)&chl))
3833 len += (silc_id_get_len(chl->client->id, SILC_ID_CLIENT) + 4);
3834 silc_hash_table_list_reset(&htl);
3836 client_id_list = silc_buffer_alloc(len);
3838 silc_buffer_alloc(4 * silc_hash_table_count(channel->user_list));
3839 silc_buffer_pull_tail(client_id_list, SILC_BUFFER_END(client_id_list));
3840 silc_buffer_pull_tail(client_mode_list, SILC_BUFFER_END(client_mode_list));
3842 silc_hash_table_list(channel->user_list, &htl);
3843 while (silc_hash_table_get(&htl, NULL, (void *)&chl)) {
3845 idp = silc_id_payload_encode(chl->client->id, SILC_ID_CLIENT);
3846 silc_buffer_put(client_id_list, idp->data, idp->len);
3847 silc_buffer_pull(client_id_list, idp->len);
3848 silc_buffer_free(idp);
3850 /* Client's mode on channel */
3851 SILC_PUT32_MSB(chl->mode, client_mode_list->data);
3852 silc_buffer_pull(client_mode_list, 4);
3856 silc_hash_table_list_reset(&htl);
3857 silc_buffer_push(client_id_list,
3858 client_id_list->data - client_id_list->head);
3859 silc_buffer_push(client_mode_list,
3860 client_mode_list->data - client_mode_list->head);
3862 *user_list = client_id_list;
3863 *mode_list = client_mode_list;
3864 *user_count = list_count;
3867 /* Saves users and their modes to the `channel'. */
3869 void silc_server_save_users_on_channel(SilcServer server,
3870 SilcSocketConnection sock,
3871 SilcChannelEntry channel,
3872 SilcClientID *noadd,
3873 SilcBuffer user_list,
3874 SilcBuffer mode_list,
3875 SilcUInt32 user_count)
3880 SilcClientID *client_id;
3881 SilcClientEntry client;
3882 SilcIDCacheEntry cache;
3885 SILC_LOG_DEBUG(("Start"));
3887 for (i = 0; i < user_count; i++) {
3889 SILC_GET16_MSB(idp_len, user_list->data + 2);
3891 client_id = silc_id_payload_parse_id(user_list->data, idp_len, NULL);
3892 silc_buffer_pull(user_list, idp_len);
3897 SILC_GET32_MSB(mode, mode_list->data);
3898 silc_buffer_pull(mode_list, 4);
3900 if (noadd && SILC_ID_CLIENT_COMPARE(client_id, noadd)) {
3901 silc_free(client_id);
3907 /* Check if we have this client cached already. */
3908 client = silc_idlist_find_client_by_id(server->local_list, client_id,
3909 server->server_type, &cache);
3911 client = silc_idlist_find_client_by_id(server->global_list,
3912 client_id, server->server_type,
3917 /* If router did not find such Client ID in its lists then this must
3918 be bogus client or some router in the net is buggy. */
3919 if (server->server_type == SILC_ROUTER) {
3920 silc_free(client_id);
3924 /* We don't have that client anywhere, add it. The client is added
3925 to global list since server didn't have it in the lists so it must be
3927 client = silc_idlist_add_client(server->global_list, NULL, NULL, NULL,
3928 silc_id_dup(client_id, SILC_ID_CLIENT),
3929 sock->user_data, NULL, 0);
3931 SILC_LOG_ERROR(("Could not add new client to the ID Cache"));
3932 silc_free(client_id);
3936 client->data.status |= SILC_IDLIST_STATUS_REGISTERED;
3938 /* Found, if it is from global list we'll assure that we won't
3939 expire it now that the entry is on channel. */
3944 silc_free(client_id);
3946 if (!silc_server_client_on_channel(client, channel, NULL)) {
3947 /* Client was not on the channel, add it. */
3948 SilcChannelClientEntry chl = silc_calloc(1, sizeof(*chl));
3949 chl->client = client;
3951 chl->channel = channel;
3952 silc_hash_table_add(channel->user_list, chl->client, chl);
3953 silc_hash_table_add(client->channels, chl->channel, chl);
3954 channel->user_count++;
3959 /* Lookups route to the client indicated by the `id_data'. The connection
3960 object and internal data object is returned. Returns NULL if route
3961 could not be found to the client. If the `client_id' is specified then
3962 it is used and the `id_data' is ignored. */
3964 SilcSocketConnection silc_server_get_client_route(SilcServer server,
3965 unsigned char *id_data,
3967 SilcClientID *client_id,
3968 SilcIDListData *idata)
3971 SilcClientEntry client;
3973 SILC_LOG_DEBUG(("Start"));
3975 /* Decode destination Client ID */
3977 id = silc_id_str2id(id_data, id_len, SILC_ID_CLIENT);
3979 SILC_LOG_ERROR(("Could not decode destination Client ID, dropped"));
3983 id = silc_id_dup(client_id, SILC_ID_CLIENT);
3986 /* If the destination belongs to our server we don't have to route
3987 the packet anywhere but to send it to the local destination. */
3988 client = silc_idlist_find_client_by_id(server->local_list, id, TRUE, NULL);
3992 /* If we are router and the client has router then the client is in
3993 our cell but not directly connected to us. */
3994 if (server->server_type == SILC_ROUTER && client->router) {
3995 /* We are of course in this case the client's router thus the route
3996 to the client is the server who owns the client. So, we will send
3997 the packet to that server. */
3999 *idata = (SilcIDListData)client->router;
4000 return client->router->connection;
4003 /* Seems that client really is directly connected to us */
4005 *idata = (SilcIDListData)client;
4006 return client->connection;
4009 /* Destination belongs to someone not in this server. If we are normal
4010 server our action is to send the packet to our router. */
4011 if (server->server_type != SILC_ROUTER && !server->standalone) {
4014 *idata = (SilcIDListData)server->router;
4015 return server->router->connection;
4018 /* We are router and we will perform route lookup for the destination
4019 and send the packet to fastest route. */
4020 if (server->server_type == SILC_ROUTER && !server->standalone) {
4021 /* Check first that the ID is valid */
4022 client = silc_idlist_find_client_by_id(server->global_list, id,
4025 SilcSocketConnection dst_sock;
4027 dst_sock = silc_server_route_get(server, id, SILC_ID_CLIENT);
4031 *idata = (SilcIDListData)dst_sock->user_data;
4040 /* Encodes and returns channel list of channels the `client' has joined.
4041 Secret channels are not put to the list. */
4043 SilcBuffer silc_server_get_client_channel_list(SilcServer server,
4044 SilcClientEntry client)
4046 SilcBuffer buffer = NULL;
4047 SilcChannelEntry channel;
4048 SilcChannelClientEntry chl;
4049 SilcHashTableList htl;
4052 SilcUInt16 name_len;
4055 silc_hash_table_list(client->channels, &htl);
4056 while (silc_hash_table_get(&htl, NULL, (void *)&chl)) {
4057 channel = chl->channel;
4059 if (channel->mode & SILC_CHANNEL_MODE_SECRET ||
4060 channel->mode & SILC_CHANNEL_MODE_PRIVATE)
4063 cid = silc_id_id2str(channel->id, SILC_ID_CHANNEL);
4064 id_len = silc_id_get_len(channel->id, SILC_ID_CHANNEL);
4065 name_len = strlen(channel->channel_name);
4067 len = 4 + name_len + id_len + 4;
4068 buffer = silc_buffer_realloc(buffer,
4069 (buffer ? (buffer)->truelen + len : len));
4070 silc_buffer_pull_tail(buffer, ((buffer)->end - (buffer)->data));
4071 silc_buffer_format(buffer,
4072 SILC_STR_UI_SHORT(name_len),
4073 SILC_STR_UI_XNSTRING(channel->channel_name,
4075 SILC_STR_UI_SHORT(id_len),
4076 SILC_STR_UI_XNSTRING(cid, id_len),
4077 SILC_STR_UI_INT(chl->mode), /* Client's mode */
4079 silc_buffer_pull(buffer, len);
4082 silc_hash_table_list_reset(&htl);
4085 silc_buffer_push(buffer, buffer->data - buffer->head);
4090 /* Finds client entry by Client ID and if it is not found then resolves
4091 it using WHOIS command. */
4093 SilcClientEntry silc_server_get_client_resolve(SilcServer server,
4094 SilcClientID *client_id,
4097 SilcClientEntry client;
4102 client = silc_idlist_find_client_by_id(server->local_list, client_id,
4105 client = silc_idlist_find_client_by_id(server->global_list,
4106 client_id, TRUE, NULL);
4107 if (!client && server->server_type == SILC_ROUTER)
4111 if (!client && server->standalone)
4114 if (!client || !client->nickname || !client->username) {
4115 SilcBuffer buffer, idp;
4117 client->data.status |= SILC_IDLIST_STATUS_RESOLVING;
4118 client->data.status &= ~SILC_IDLIST_STATUS_RESOLVED;
4119 client->resolve_cmd_ident = ++server->cmd_ident;
4121 idp = silc_id_payload_encode(client_id, SILC_ID_CLIENT);
4122 buffer = silc_command_payload_encode_va(SILC_COMMAND_WHOIS,
4123 server->cmd_ident, 1,
4124 3, idp->data, idp->len);
4125 silc_server_packet_send(server, client ? client->router->connection :
4126 server->router->connection,
4127 SILC_PACKET_COMMAND, 0,
4128 buffer->data, buffer->len, FALSE);
4129 silc_buffer_free(idp);
4130 silc_buffer_free(buffer);
4141 /* A timeout callback for the re-key. We will be the initiator of the
4144 SILC_TASK_CALLBACK(silc_server_rekey_callback)
4146 SilcSocketConnection sock = (SilcSocketConnection)context;
4147 SilcIDListData idata = (SilcIDListData)sock->user_data;
4148 SilcServer server = (SilcServer)idata->rekey->context;
4149 SilcProtocol protocol;
4150 SilcServerRekeyInternalContext *proto_ctx;
4152 SILC_LOG_DEBUG(("Start"));
4154 /* Allocate internal protocol context. This is sent as context
4156 proto_ctx = silc_calloc(1, sizeof(*proto_ctx));
4157 proto_ctx->server = (void *)server;
4158 proto_ctx->sock = sock;
4159 proto_ctx->responder = FALSE;
4160 proto_ctx->pfs = idata->rekey->pfs;
4162 /* Perform rekey protocol. Will call the final callback after the
4163 protocol is over. */
4164 silc_protocol_alloc(SILC_PROTOCOL_SERVER_REKEY,
4165 &protocol, proto_ctx, silc_server_rekey_final);
4166 sock->protocol = protocol;
4168 /* Run the protocol */
4169 silc_protocol_execute(protocol, server->schedule, 0, 0);
4171 /* Re-register re-key timeout */
4172 silc_schedule_task_add(server->schedule, sock->sock,
4173 silc_server_rekey_callback,
4174 context, idata->rekey->timeout, 0,
4175 SILC_TASK_TIMEOUT, SILC_TASK_PRI_NORMAL);
4178 /* The final callback for the REKEY protocol. This will actually take the
4179 new key material into use. */
4181 SILC_TASK_CALLBACK_GLOBAL(silc_server_rekey_final)
4183 SilcProtocol protocol = (SilcProtocol)context;
4184 SilcServerRekeyInternalContext *ctx =
4185 (SilcServerRekeyInternalContext *)protocol->context;
4186 SilcServer server = (SilcServer)ctx->server;
4187 SilcSocketConnection sock = ctx->sock;
4189 SILC_LOG_DEBUG(("Start"));
4191 if (protocol->state == SILC_PROTOCOL_STATE_ERROR ||
4192 protocol->state == SILC_PROTOCOL_STATE_FAILURE) {
4193 /* Error occured during protocol */
4194 SILC_LOG_ERROR(("Error occurred during rekey protocol"));
4195 silc_protocol_cancel(protocol, server->schedule);
4196 silc_protocol_free(protocol);
4197 sock->protocol = NULL;
4199 silc_packet_context_free(ctx->packet);
4201 silc_ske_free(ctx->ske);
4206 /* Purge the outgoing data queue to assure that all rekey packets really
4207 go to the network before we quit the protocol. */
4208 silc_server_packet_queue_purge(server, sock);
4211 silc_protocol_free(protocol);
4212 sock->protocol = NULL;
4214 silc_packet_context_free(ctx->packet);
4216 silc_ske_free(ctx->ske);
4220 /* Task callback used to retrieve network statistical information from
4221 router server once in a while. */
4223 SILC_TASK_CALLBACK(silc_server_get_stats)
4225 SilcServer server = (SilcServer)context;
4226 SilcBuffer idp, packet;
4228 SILC_LOG_DEBUG(("Retrieving stats from router"));
4230 if (!server->standalone) {
4231 idp = silc_id_payload_encode(server->router->id, SILC_ID_SERVER);
4232 packet = silc_command_payload_encode_va(SILC_COMMAND_STATS,
4233 ++server->cmd_ident, 1,
4234 1, idp->data, idp->len);
4235 silc_server_packet_send(server, server->router->connection,
4236 SILC_PACKET_COMMAND, 0, packet->data,
4237 packet->len, FALSE);
4238 silc_buffer_free(packet);
4239 silc_buffer_free(idp);
4242 silc_schedule_task_add(server->schedule, 0, silc_server_get_stats,
4243 server, 120, 0, SILC_TASK_TIMEOUT,