762468f85d
It's useful to allow authd to run in parallel with ssl negotiation, but if the ssld connection has plaintext data ready for reading there's a race condition between authd calling read_packet() and ssl_process_certfp() storing the certificate fingerprint. This scenario would be bad for a server connecting because fingerprint verification will fail. Allow either operation to complete first, but wait until ssl_process_open_fd() calls the ssl open callback before calling read_packet().
95 lines
2.8 KiB
C
95 lines
2.8 KiB
C
/*
|
|
* charybdis
|
|
* authproc.h: A header with the authd functions.
|
|
*
|
|
* Copyright (C) 1990 Jarkko Oikarinen and University of Oulu, Co Center
|
|
* Copyright (C) 1996-2002 Hybrid Development Team
|
|
* Copyright (C) 2002-2012 ircd-ratbox development team
|
|
* Copyright (C) 2016 William Pitcock <nenolod@dereferenced.org>
|
|
*
|
|
* This program is free software; you can redistribute it and/or modify
|
|
* it under the terms of the GNU General Public License as published by
|
|
* the Free Software Foundation; either version 2 of the License, or
|
|
* (at your option) any later version.
|
|
*
|
|
* This program is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with this program; if not, write to the Free Software
|
|
* Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301
|
|
* USA
|
|
*/
|
|
|
|
#ifndef CHARYBDIS_AUTHD_H
|
|
#define CHARYBDIS_AUTHD_H
|
|
|
|
#include "stdinc.h"
|
|
#include "rb_dictionary.h"
|
|
#include "client.h"
|
|
|
|
struct BlacklistStats
|
|
{
|
|
char *host;
|
|
uint8_t iptype;
|
|
unsigned int hits;
|
|
};
|
|
|
|
struct OPMScanner
|
|
{
|
|
char type[16]; /* Type of proxy */
|
|
uint16_t port; /* Port */
|
|
|
|
rb_dlink_node node;
|
|
};
|
|
|
|
struct OPMListener
|
|
{
|
|
char ipaddr[HOSTIPLEN]; /* Listener address */
|
|
uint16_t port; /* Listener port */
|
|
};
|
|
|
|
enum
|
|
{
|
|
LISTEN_IPV4,
|
|
LISTEN_IPV6,
|
|
LISTEN_LAST,
|
|
};
|
|
|
|
extern rb_helper *authd_helper;
|
|
|
|
extern rb_dictionary *bl_stats;
|
|
extern rb_dlink_list opm_list;
|
|
extern struct OPMListener opm_listeners[LISTEN_LAST];
|
|
|
|
void init_authd(void);
|
|
void configure_authd(void);
|
|
void restart_authd(void);
|
|
void rehash_authd(void);
|
|
void check_authd(void);
|
|
|
|
void authd_initiate_client(struct Client *, bool defer);
|
|
void authd_deferred_client(struct Client *);
|
|
void authd_accept_client(struct Client *client_p, const char *ident, const char *host);
|
|
void authd_reject_client(struct Client *client_p, const char *ident, const char *host, char cause, const char *data, const char *reason);
|
|
void authd_abort_client(struct Client *);
|
|
|
|
void add_blacklist(const char *host, const char *reason, uint8_t iptype, rb_dlink_list *filters);
|
|
void del_blacklist(const char *host);
|
|
void del_blacklist_all(void);
|
|
|
|
bool set_authd_timeout(const char *key, int timeout);
|
|
void ident_check_enable(bool enabled);
|
|
|
|
void conf_create_opm_listener(const char *ip, uint16_t port);
|
|
void create_opm_listener(const char *ip, uint16_t port);
|
|
void conf_create_opm_proxy_scanner(const char *type, uint16_t port);
|
|
void create_opm_proxy_scanner(const char *type, uint16_t port);
|
|
void delete_opm_proxy_scanner(const char *type, uint16_t port);
|
|
void delete_opm_proxy_scanner_all(void);
|
|
void delete_opm_listener_all(void);
|
|
void opm_check_enable(bool enabled);
|
|
|
|
#endif
|