123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308 |
- // Copyright (c) 2012-2014 Jeremy Latt
- // Copyright (c) 2014-2015 Edmund Huber
- // Copyright (c) 2016- Daniel Oaks <daniel@danieloaks.net>
- // released under the MIT license
-
- package irc
-
- import (
- "crypto/tls"
- "errors"
- "fmt"
- "io/ioutil"
- "log"
- "strings"
-
- "gopkg.in/yaml.v2"
- )
-
- type PassConfig struct {
- Password string
- }
-
- // TLSListenConfig defines configuration options for listening on TLS
- type TLSListenConfig struct {
- Cert string
- Key string
- }
-
- // Certificate returns the TLS certificate assicated with this TLSListenConfig
- func (conf *TLSListenConfig) Config() (*tls.Config, error) {
- cert, err := tls.LoadX509KeyPair(conf.Cert, conf.Key)
- if err != nil {
- return nil, errors.New("tls cert+key: invalid pair")
- }
-
- return &tls.Config{
- Certificates: []tls.Certificate{cert},
- }, err
- }
-
- func (conf *PassConfig) PasswordBytes() []byte {
- bytes, err := DecodePasswordHash(conf.Password)
- if err != nil {
- log.Fatal("decode password error: ", err)
- }
- return bytes
- }
-
- type AccountRegistrationConfig struct {
- Enabled bool
- EnabledCallbacks []string `yaml:"enabled-callbacks"`
- Callbacks struct {
- Mailto struct {
- Server string
- Port int
- TLS struct {
- Enabled bool
- InsecureSkipVerify bool `yaml:"insecure_skip_verify"`
- ServerName string `yaml:"servername"`
- }
- Username string
- Password string
- Sender string
- VerifyMessageSubject string `yaml:"verify-message-subject"`
- VerifyMessage string `yaml:"verify-message"`
- }
- }
- }
-
- type OperClassConfig struct {
- Title string
- WhoisLine string
- Extends string
- Capabilities []string
- }
-
- type OperConfig struct {
- Class string
- Vhost string
- WhoisLine string `yaml:"whois-line"`
- Password string
- }
-
- func (conf *OperConfig) PasswordBytes() []byte {
- bytes, err := DecodePasswordHash(conf.Password)
- if err != nil {
- log.Fatal("decode password error: ", err)
- }
- return bytes
- }
-
- type ConnectionLimitsConfig struct {
- CidrLenIPv4 int `yaml:"cidr-len-ipv4"`
- CidrLenIPv6 int `yaml:"cidr-len-ipv6"`
- IPsPerCidr int `yaml:"ips-per-subnet"`
- Exempted []string
- }
-
- type Config struct {
- Network struct {
- Name string
- }
-
- Server struct {
- PassConfig
- Password string
- Name string
- Listen []string
- Wslisten string `yaml:"ws-listen"`
- TLSListeners map[string]*TLSListenConfig `yaml:"tls-listeners"`
- CheckIdent bool `yaml:"check-ident"`
- Log string
- MOTD string
- ConnectionLimits ConnectionLimitsConfig `yaml:"connection-limits"`
- }
-
- Datastore struct {
- Path string
- }
-
- AuthenticationEnabled bool `yaml:"authentication-enabled"`
-
- Registration struct {
- Accounts AccountRegistrationConfig
- }
-
- OperClasses map[string]*OperClassConfig `yaml:"oper-classes"`
-
- Opers map[string]*OperConfig
-
- Limits struct {
- NickLen uint `yaml:"nicklen"`
- ChannelLen uint `yaml:"channellen"`
- AwayLen uint `yaml:"awaylen"`
- KickLen uint `yaml:"kicklen"`
- TopicLen uint `yaml:"topiclen"`
- WhowasEntries uint `yaml:"whowas-entries"`
- MonitorEntries uint `yaml:"monitor-entries"`
- ChanListModes uint `yaml:"chan-list-modes"`
- }
- }
-
- type OperClass struct {
- Title string
- WhoisLine string `yaml:"whois-line"`
- Capabilities map[string]bool // map to make lookups much easier
- }
-
- func (conf *Config) OperatorClasses() (*map[string]OperClass, error) {
- ocs := make(map[string]OperClass)
-
- // loop from no extends to most extended, breaking if we can't add any more
- lenOfLastOcs := -1
- for {
- if lenOfLastOcs == len(ocs) {
- return nil, errors.New("OperClasses contains a looping dependency, or a class extends from a class that doesn't exist")
- }
- lenOfLastOcs = len(ocs)
-
- var anyMissing bool
- for name, info := range conf.OperClasses {
- _, exists := ocs[name]
- _, extendsExists := ocs[info.Extends]
- if exists {
- // class already exists
- continue
- } else if len(info.Extends) > 0 && !extendsExists {
- // class we extend on doesn't exist
- _, exists := conf.OperClasses[info.Extends]
- if !exists {
- return nil, fmt.Errorf("Operclass [%s] extends [%s], which doesn't exist", name, info.Extends)
- }
- anyMissing = true
- continue
- }
-
- // create new operclass
- var oc OperClass
- oc.Capabilities = make(map[string]bool)
-
- // get inhereted info from other operclasses
- if len(info.Extends) > 0 {
- einfo, _ := ocs[info.Extends]
-
- for capab := range einfo.Capabilities {
- oc.Capabilities[capab] = true
- }
- }
-
- // add our own info
- oc.Title = info.Title
- for _, capab := range info.Capabilities {
- oc.Capabilities[capab] = true
- }
- if len(info.WhoisLine) > 0 {
- oc.WhoisLine = info.WhoisLine
- } else {
- oc.WhoisLine = "is a"
- if strings.Contains(strings.ToLower(string(oc.Title[0])), "aeiou") {
- oc.WhoisLine += "n"
- }
- oc.WhoisLine += " "
- oc.WhoisLine += oc.Title
- }
-
- ocs[name] = oc
- }
-
- if !anyMissing {
- // we've got every operclass!
- break
- }
- }
-
- return &ocs, nil
- }
-
- type Oper struct {
- Class *OperClass
- WhoisLine string
- Vhost string
- Pass []byte
- }
-
- func (conf *Config) Operators(oc *map[string]OperClass) (map[string]Oper, error) {
- operators := make(map[string]Oper)
- for name, opConf := range conf.Opers {
- var oper Oper
-
- // oper name
- name, err := CasefoldName(name)
- if err != nil {
- return nil, fmt.Errorf("Could not casefold oper name: %s", err.Error())
- }
-
- oper.Pass = opConf.PasswordBytes()
- oper.Vhost = opConf.Vhost
- class, exists := (*oc)[opConf.Class]
- if !exists {
- return nil, fmt.Errorf("Could not load operator [%s] - they use operclass [%s] which does not exist", name, opConf.Class)
- }
- oper.Class = &class
- if len(opConf.WhoisLine) > 0 {
- oper.WhoisLine = opConf.WhoisLine
- } else {
- oper.WhoisLine = class.WhoisLine
- }
-
- // successful, attach to list of opers
- operators[name] = oper
- }
- return operators, nil
- }
-
- func (conf *Config) TLSListeners() map[string]*tls.Config {
- tlsListeners := make(map[string]*tls.Config)
- for s, tlsListenersConf := range conf.Server.TLSListeners {
- config, err := tlsListenersConf.Config()
- if err != nil {
- log.Fatal(err)
- }
- name, err := CasefoldName(s)
- if err == nil {
- tlsListeners[name] = config
- } else {
- log.Println("Could not casefold TLS listener:", err.Error())
- }
- }
- return tlsListeners
- }
-
- func LoadConfig(filename string) (config *Config, err error) {
- data, err := ioutil.ReadFile(filename)
- if err != nil {
- return nil, err
- }
-
- err = yaml.Unmarshal(data, &config)
- if err != nil {
- return nil, err
- }
-
- // we need this so PasswordBytes returns the correct info
- if config.Server.Password != "" {
- config.Server.PassConfig.Password = config.Server.Password
- }
-
- if config.Network.Name == "" {
- return nil, errors.New("Network name missing")
- }
- if config.Server.Name == "" {
- return nil, errors.New("Server name missing")
- }
- if !IsHostname(config.Server.Name) {
- return nil, errors.New("Server name must match the format of a hostname")
- }
- if config.Datastore.Path == "" {
- return nil, errors.New("Datastore path missing")
- }
- if len(config.Server.Listen) == 0 {
- return nil, errors.New("Server listening addresses missing")
- }
- if config.Limits.NickLen < 1 || config.Limits.ChannelLen < 2 || config.Limits.AwayLen < 1 || config.Limits.KickLen < 1 || config.Limits.TopicLen < 1 {
- return nil, errors.New("Limits aren't setup properly, check them and make them sane")
- }
-
- return config, nil
- }
|