Add support for arc4random
[ngircd-alex.git] / src / ngircd / conf.c
1 /*
2  * ngIRCd -- The Next Generation IRC Daemon
3  * Copyright (c)2001-2013 Alexander Barton (alex@barton.de) and Contributors.
4  *
5  * This program is free software; you can redistribute it and/or modify
6  * it under the terms of the GNU General Public License as published by
7  * the Free Software Foundation; either version 2 of the License, or
8  * (at your option) any later version.
9  * Please read the file COPYING, README and AUTHORS for more information.
10  */
11
12 #include "portab.h"
13
14 /**
15  * @file
16  * Configuration management (reading, parsing & validation)
17  */
18
19 #include "imp.h"
20 #include <assert.h>
21 #include <ctype.h>
22 #include <errno.h>
23 #ifdef PROTOTYPES
24 #       include <stdarg.h>
25 #else
26 #       include <varargs.h>
27 #endif
28 #include <stdio.h>
29 #include <stdlib.h>
30 #include <string.h>
31 #include <strings.h>
32 #include <unistd.h>
33 #include <pwd.h>
34 #include <grp.h>
35 #include <sys/types.h>
36 #include <unistd.h>
37 #include <dirent.h>
38
39 #include "array.h"
40 #include "ngircd.h"
41 #include "conn.h"
42 #include "channel.h"
43 #include "defines.h"
44 #include "log.h"
45 #include "match.h"
46 #include "tool.h"
47
48 #include "exp.h"
49 #include "conf.h"
50
51
52 static bool Use_Log = true, Using_MotdFile = true;
53 static CONF_SERVER New_Server;
54 static int New_Server_Idx;
55
56 static char Conf_MotdFile[FNAME_LEN];
57 static char Conf_HelpFile[FNAME_LEN];
58 static char Conf_IncludeDir[FNAME_LEN];
59
60 static void Set_Defaults PARAMS(( bool InitServers ));
61 static bool Read_Config PARAMS(( bool TestOnly, bool IsStarting ));
62 static void Read_Config_File PARAMS(( const char *File, FILE *fd ));
63 static bool Validate_Config PARAMS(( bool TestOnly, bool Rehash ));
64
65 static void Handle_GLOBAL PARAMS((const char *File, int Line,
66                                   char *Var, char *Arg ));
67 static void Handle_LIMITS PARAMS((const char *File, int Line,
68                                   char *Var, char *Arg ));
69 static void Handle_OPTIONS PARAMS((const char *File, int Line,
70                                    char *Var, char *Arg ));
71 static void Handle_OPERATOR PARAMS((const char *File, int Line,
72                                     char *Var, char *Arg ));
73 static void Handle_SERVER PARAMS((const char *File, int Line,
74                                   char *Var, char *Arg ));
75 static void Handle_CHANNEL PARAMS((const char *File, int Line,
76                                    char *Var, char *Arg ));
77
78 static void Config_Error PARAMS((const int Level, const char *Format, ...));
79
80 static void Config_Error_NaN PARAMS((const char *File, const int LINE,
81                                      const char *Value));
82 static void Config_Error_Section PARAMS((const char *File, const int Line,
83                                          const char *Item, const char *Section));
84 static void Config_Error_TooLong PARAMS((const char *File, const int LINE,
85                                          const char *Value));
86
87 static void Init_Server_Struct PARAMS(( CONF_SERVER *Server ));
88
89
90 #ifdef WANT_IPV6
91 #define DEFAULT_LISTEN_ADDRSTR "::,0.0.0.0"
92 #else
93 #define DEFAULT_LISTEN_ADDRSTR "0.0.0.0"
94 #endif
95
96 #ifdef HAVE_LIBSSL
97 #define DEFAULT_CIPHERS         "HIGH:!aNULL:@STRENGTH"
98 #endif
99 #ifdef HAVE_LIBGNUTLS
100 #define DEFAULT_CIPHERS         "SECURE128"
101 #endif
102
103 #ifdef SSL_SUPPORT
104
105 static void Handle_SSL PARAMS((const char *File, int Line, char *Var, char *Ark));
106
107 struct SSLOptions Conf_SSLOptions;
108
109 /**
110  * Initialize SSL configuration.
111  */
112 static void
113 ConfSSL_Init(void)
114 {
115         free(Conf_SSLOptions.KeyFile);
116         Conf_SSLOptions.KeyFile = NULL;
117
118         free(Conf_SSLOptions.CertFile);
119         Conf_SSLOptions.CertFile = NULL;
120
121         free(Conf_SSLOptions.DHFile);
122         Conf_SSLOptions.DHFile = NULL;
123         array_free_wipe(&Conf_SSLOptions.KeyFilePassword);
124
125         array_free(&Conf_SSLOptions.ListenPorts);
126
127         free(Conf_SSLOptions.CipherList);
128         Conf_SSLOptions.CipherList = NULL;
129 }
130
131 /**
132  * Check if the current configuration uses/requires SSL.
133  *
134  * @returns true if SSL is used and should be initialized.
135  */
136 GLOBAL bool
137 Conf_SSLInUse(void)
138 {
139         int i;
140
141         /* SSL listen ports configured? */
142         if (array_bytes(&Conf_SSLOptions.ListenPorts))
143                 return true;
144
145         for (i = 0; i < MAX_SERVERS; i++) {
146                 if (Conf_Server[i].port > 0
147                     && Conf_Server[i].SSLConnect)
148                         return true;
149         }
150         return false;
151 }
152
153 /**
154  * Make sure that a configured file is readable.
155  *
156  * Currently, this function is only used for SSL-related options ...
157  *
158  * @param Var Configuration variable
159  * @param Filename Configured filename
160  */
161 static void
162 CheckFileReadable(const char *Var, const char *Filename)
163 {
164         FILE *fp;
165
166         if (!Filename)
167                 return;
168
169         fp = fopen(Filename, "r");
170         if (fp)
171                 fclose(fp);
172         else
173                 Config_Error(LOG_ERR, "Can't read \"%s\" (\"%s\"): %s",
174                              Filename, Var, strerror(errno));
175 }
176
177 #endif
178
179
180 /**
181  * Duplicate string and warn on errors.
182  *
183  * @returns Pointer to string on success, NULL otherwise.
184  */
185 static char *
186 strdup_warn(const char *str)
187 {
188         char *ptr = strdup(str);
189         if (!ptr)
190                 Config_Error(LOG_ERR,
191                              "Could not allocate memory for string: %s", str);
192         return ptr;
193 }
194
195 /**
196  * Output a comma separated list of ports (integer values).
197  */
198 static void
199 ports_puts(array *a)
200 {
201         size_t len;
202         UINT16 *ports;
203         len = array_length(a, sizeof(UINT16));
204         if (len--) {
205                 ports = (UINT16*) array_start(a);
206                 printf("%u", (unsigned int) *ports);
207                 while (len--) {
208                         ports++;
209                         printf(", %u", (unsigned int) *ports);
210                 }
211         }
212         putc('\n', stdout);
213 }
214
215 /**
216  * Parse a comma separated string into an array of port numbers (integers).
217  */
218 static void
219 ports_parse(array *a, int Line, char *Arg)
220 {
221         char *ptr;
222         int port;
223         UINT16 port16;
224
225         array_trunc(a);
226
227         ptr = strtok( Arg, "," );
228         while (ptr) {
229                 ngt_TrimStr(ptr);
230                 port = atoi(ptr);
231                 if (port > 0 && port < 0xFFFF) {
232                         port16 = (UINT16) port;
233                         if (!array_catb(a, (char*)&port16, sizeof port16))
234                                 Config_Error(LOG_ERR, "%s, line %d Could not add port number %ld: %s",
235                                                         NGIRCd_ConfFile, Line, port, strerror(errno));
236                 } else {
237                         Config_Error( LOG_ERR, "%s, line %d (section \"Global\"): Illegal port number %ld!",
238                                                                         NGIRCd_ConfFile, Line, port );
239                 }
240
241                 ptr = strtok( NULL, "," );
242         }
243 }
244
245 /**
246  * Initialize configuration module.
247  */
248 GLOBAL void
249 Conf_Init( void )
250 {
251         Read_Config(false, true);
252         Validate_Config(false, false);
253 }
254
255 /**
256  * "Rehash" (reload) server configuration.
257  *
258  * @returns true if configuration has been re-read, false on errors.
259  */
260 GLOBAL bool
261 Conf_Rehash( void )
262 {
263         if (!Read_Config(false, false))
264                 return false;
265         Validate_Config(false, true);
266
267         /* Update CLIENT structure of local server */
268         Client_SetInfo(Client_ThisServer(), Conf_ServerInfo);
269         return true;
270 }
271
272 /**
273  * Output a boolean value as "yes/no" string.
274  */
275 static const char*
276 yesno_to_str(int boolean_value)
277 {
278         if (boolean_value)
279                 return "yes";
280         return "no";
281 }
282
283 /**
284  * Free all IRC operator configuration structures.
285  */
286 static void
287 opers_free(void)
288 {
289         struct Conf_Oper *op;
290         size_t len;
291
292         len = array_length(&Conf_Opers, sizeof(*op));
293         op = array_start(&Conf_Opers);
294         while (len--) {
295                 free(op->mask);
296                 op++;
297         }
298         array_free(&Conf_Opers);
299 }
300
301 /**
302  * Output all IRC operator configuration structures.
303  */
304 static void
305 opers_puts(void)
306 {
307         struct Conf_Oper *op;
308         size_t count, i;
309
310         count = array_length(&Conf_Opers, sizeof(*op));
311         op = array_start(&Conf_Opers);
312         for (i = 0; i < count; i++, op++) {
313                 if (!op->name[0])
314                         continue;
315
316                 puts("[OPERATOR]");
317                 printf("  Name = %s\n", op->name);
318                 printf("  Password = %s\n", op->pwd);
319                 printf("  Mask = %s\n\n", op->mask ? op->mask : "");
320         }
321 }
322
323 /**
324  * Read configuration, validate and output it.
325  *
326  * This function waits for a keypress of the user when stdin/stdout are valid
327  * tty's ("you can read our nice message and we can read in your keypress").
328  *
329  * @return      0 on success, 1 on failure(s); therefore the result code can
330  *              directly be used by exit() when running "ngircd --configtest".
331  */
332 GLOBAL int
333 Conf_Test( void )
334 {
335         struct passwd *pwd;
336         struct group *grp;
337         unsigned int i;
338         bool config_valid;
339         size_t predef_channel_count;
340         struct Conf_Channel *predef_chan;
341
342         Use_Log = false;
343
344         if (!Read_Config(true, true))
345                 return 1;
346
347         config_valid = Validate_Config(true, false);
348
349         /* Valid tty? */
350         if(isatty(fileno(stdin)) && isatty(fileno(stdout))) {
351                 puts("OK, press enter to see a dump of your server configuration ...");
352                 getchar();
353         } else
354                 puts("Ok, dump of your server configuration follows:\n");
355
356         puts("[GLOBAL]");
357         printf("  Name = %s\n", Conf_ServerName);
358         printf("  AdminInfo1 = %s\n", Conf_ServerAdmin1);
359         printf("  AdminInfo2 = %s\n", Conf_ServerAdmin2);
360         printf("  AdminEMail = %s\n", Conf_ServerAdminMail);
361         printf("  HelpFile = %s\n", Conf_HelpFile);
362         printf("  Info = %s\n", Conf_ServerInfo);
363         printf("  Listen = %s\n", Conf_ListenAddress);
364         if (Using_MotdFile) {
365                 printf("  MotdFile = %s\n", Conf_MotdFile);
366                 printf("  MotdPhrase =\n");
367         } else {
368                 printf("  MotdFile = \n");
369                 printf("  MotdPhrase = %s\n", array_bytes(&Conf_Motd)
370                        ? (const char*) array_start(&Conf_Motd) : "");
371         }
372 #ifndef PAM
373         printf("  Password = %s\n", Conf_ServerPwd);
374 #endif
375         printf("  PidFile = %s\n", Conf_PidFile);
376         printf("  Ports = ");
377         ports_puts(&Conf_ListenPorts);
378         grp = getgrgid(Conf_GID);
379         if (grp)
380                 printf("  ServerGID = %s\n", grp->gr_name);
381         else
382                 printf("  ServerGID = %ld\n", (long)Conf_GID);
383         pwd = getpwuid(Conf_UID);
384         if (pwd)
385                 printf("  ServerUID = %s\n", pwd->pw_name);
386         else
387                 printf("  ServerUID = %ld\n", (long)Conf_UID);
388         puts("");
389
390         puts("[LIMITS]");
391         printf("  ConnectRetry = %d\n", Conf_ConnectRetry);
392         printf("  IdleTimeout = %d\n", Conf_IdleTimeout);
393         printf("  MaxConnections = %d\n", Conf_MaxConnections);
394         printf("  MaxConnectionsIP = %d\n", Conf_MaxConnectionsIP);
395         printf("  MaxJoins = %d\n", Conf_MaxJoins > 0 ? Conf_MaxJoins : -1);
396         printf("  MaxNickLength = %u\n", Conf_MaxNickLength - 1);
397         printf("  MaxListSize = %d\n", Conf_MaxListSize);
398         printf("  PingTimeout = %d\n", Conf_PingTimeout);
399         printf("  PongTimeout = %d\n", Conf_PongTimeout);
400         puts("");
401
402         puts("[OPTIONS]");
403         printf("  AllowedChannelTypes = %s\n", Conf_AllowedChannelTypes);
404         printf("  AllowRemoteOper = %s\n", yesno_to_str(Conf_AllowRemoteOper));
405         printf("  ChrootDir = %s\n", Conf_Chroot);
406         printf("  CloakHost = %s\n", Conf_CloakHost);
407         printf("  CloakHostModeX = %s\n", Conf_CloakHostModeX);
408         printf("  CloakHostSalt = %s\n", Conf_CloakHostSalt);
409         printf("  CloakUserToNick = %s\n", yesno_to_str(Conf_CloakUserToNick));
410 #ifdef WANT_IPV6
411         printf("  ConnectIPv4 = %s\n", yesno_to_str(Conf_ConnectIPv6));
412         printf("  ConnectIPv6 = %s\n", yesno_to_str(Conf_ConnectIPv4));
413 #endif
414         printf("  DefaultUserModes = %s\n", Conf_DefaultUserModes);
415         printf("  DNS = %s\n", yesno_to_str(Conf_DNS));
416 #ifdef IDENT
417         printf("  Ident = %s\n", yesno_to_str(Conf_Ident));
418 #endif
419         printf("  IncludeDir = %s\n", Conf_IncludeDir);
420         printf("  MorePrivacy = %s\n", yesno_to_str(Conf_MorePrivacy));
421         printf("  NoticeAuth = %s\n", yesno_to_str(Conf_NoticeAuth));
422         printf("  OperCanUseMode = %s\n", yesno_to_str(Conf_OperCanMode));
423         printf("  OperChanPAutoOp = %s\n", yesno_to_str(Conf_OperChanPAutoOp));
424         printf("  OperServerMode = %s\n", yesno_to_str(Conf_OperServerMode));
425 #ifdef PAM
426         printf("  PAM = %s\n", yesno_to_str(Conf_PAM));
427         printf("  PAMIsOptional = %s\n", yesno_to_str(Conf_PAMIsOptional));
428 #endif
429 #ifndef STRICT_RFC
430         printf("  RequireAuthPing = %s\n", yesno_to_str(Conf_AuthPing));
431 #endif
432         printf("  ScrubCTCP = %s\n", yesno_to_str(Conf_ScrubCTCP));
433 #ifdef SYSLOG
434         printf("  SyslogFacility = %s\n",
435                ngt_SyslogFacilityName(Conf_SyslogFacility));
436 #endif
437         printf("  WebircPassword = %s\n", Conf_WebircPwd);
438         puts("");
439
440 #ifdef SSL_SUPPORT
441         puts("[SSL]");
442         printf("  CertFile = %s\n", Conf_SSLOptions.CertFile
443                                         ? Conf_SSLOptions.CertFile : "");
444         printf("  CipherList = %s\n", Conf_SSLOptions.CipherList ?
445                Conf_SSLOptions.CipherList : DEFAULT_CIPHERS);
446         printf("  DHFile = %s\n", Conf_SSLOptions.DHFile
447                                         ? Conf_SSLOptions.DHFile : "");
448         printf("  KeyFile = %s\n", Conf_SSLOptions.KeyFile
449                                         ? Conf_SSLOptions.KeyFile : "");
450         if (array_bytes(&Conf_SSLOptions.KeyFilePassword))
451                 puts("  KeyFilePassword = <secret>");
452         else
453                 puts("  KeyFilePassword = ");
454         array_free_wipe(&Conf_SSLOptions.KeyFilePassword);
455         printf("  Ports = ");
456         ports_puts(&Conf_SSLOptions.ListenPorts);
457         puts("");
458 #endif
459
460         opers_puts();
461
462         for( i = 0; i < MAX_SERVERS; i++ ) {
463                 if( ! Conf_Server[i].name[0] ) continue;
464
465                 /* Valid "Server" section */
466                 puts( "[SERVER]" );
467                 printf( "  Name = %s\n", Conf_Server[i].name );
468                 printf( "  Host = %s\n", Conf_Server[i].host );
469                 printf( "  Port = %u\n", (unsigned int)Conf_Server[i].port );
470 #ifdef SSL_SUPPORT
471                 printf( "  SSLConnect = %s\n", Conf_Server[i].SSLConnect?"yes":"no");
472 #endif
473                 printf( "  MyPassword = %s\n", Conf_Server[i].pwd_in );
474                 printf( "  PeerPassword = %s\n", Conf_Server[i].pwd_out );
475                 printf( "  ServiceMask = %s\n", Conf_Server[i].svs_mask);
476                 printf( "  Group = %d\n", Conf_Server[i].group );
477                 printf( "  Passive = %s\n\n", Conf_Server[i].flags & CONF_SFLAG_DISABLED ? "yes" : "no");
478         }
479
480         predef_channel_count = array_length(&Conf_Channels, sizeof(*predef_chan));
481         predef_chan = array_start(&Conf_Channels);
482
483         for (i = 0; i < predef_channel_count; i++, predef_chan++) {
484                 if (!predef_chan->name[0])
485                         continue;
486
487                 /* Valid "Channel" section */
488                 puts( "[CHANNEL]" );
489                 printf("  Name = %s\n", predef_chan->name);
490                 printf("  Modes = %s\n", predef_chan->modes);
491                 printf("  Key = %s\n", predef_chan->key);
492                 printf("  MaxUsers = %lu\n", predef_chan->maxusers);
493                 printf("  Topic = %s\n", predef_chan->topic);
494                 printf("  KeyFile = %s\n\n", predef_chan->keyfile);
495         }
496
497         return (config_valid ? 0 : 1);
498 }
499
500 /**
501  * Remove connection information from configured server.
502  *
503  * If the server is set as "once", delete it from our configuration;
504  * otherwise set the time for the next connection attempt.
505  *
506  * Non-server connections will be silently ignored.
507  */
508 GLOBAL void
509 Conf_UnsetServer( CONN_ID Idx )
510 {
511         int i;
512         time_t t;
513
514         /* Check all our configured servers */
515         for( i = 0; i < MAX_SERVERS; i++ ) {
516                 if( Conf_Server[i].conn_id != Idx ) continue;
517
518                 /* Gotcha! Mark server configuration as "unused": */
519                 Conf_Server[i].conn_id = NONE;
520
521                 if( Conf_Server[i].flags & CONF_SFLAG_ONCE ) {
522                         /* Delete configuration here */
523                         Init_Server_Struct( &Conf_Server[i] );
524                 } else {
525                         /* Set time for next connect attempt */
526                         t = time(NULL);
527                         if (Conf_Server[i].lasttry < t - Conf_ConnectRetry) {
528                                 /* The connection has been "long", so we don't
529                                  * require the next attempt to be delayed. */
530                                 Conf_Server[i].lasttry =
531                                         t - Conf_ConnectRetry + RECONNECT_DELAY;
532                         } else {
533                                 /* "Short" connection, enforce "ConnectRetry"
534                                  * but randomize it a little bit: 15 seconds. */
535                                 Conf_Server[i].lasttry =
536 #ifdef HAVE_ARC4RANDOM
537                                         t + (arc4random() % 15);
538 #else
539                                         t + rand() / (RAND_MAX / 15);
540 #endif
541                         }
542                 }
543         }
544 }
545
546 /**
547  * Set connection information for specified configured server.
548  */
549 GLOBAL bool
550 Conf_SetServer( int ConfServer, CONN_ID Idx )
551 {
552         assert( ConfServer > NONE );
553         assert( Idx > NONE );
554
555         if (Conf_Server[ConfServer].conn_id > NONE &&
556             Conf_Server[ConfServer].conn_id != Idx) {
557                 Log(LOG_ERR,
558                     "Connection %d: Server configuration of \"%s\" already in use by connection %d!",
559                     Idx, Conf_Server[ConfServer].name,
560                     Conf_Server[ConfServer].conn_id);
561                 Conn_Close(Idx, NULL, "Server configuration already in use", true);
562                 return false;
563         }
564         Conf_Server[ConfServer].conn_id = Idx;
565         return true;
566 }
567
568 /**
569  * Get index of server in configuration structure.
570  */
571 GLOBAL int
572 Conf_GetServer( CONN_ID Idx )
573 {
574         int i = 0;
575
576         assert( Idx > NONE );
577
578         for( i = 0; i < MAX_SERVERS; i++ ) {
579                 if( Conf_Server[i].conn_id == Idx ) return i;
580         }
581         return NONE;
582 }
583
584 /**
585  * Enable a server by name and adjust its port number.
586  *
587  * @returns     true if a server has been enabled and now has a valid port
588  *              number and host name for outgoing connections.
589  */
590 GLOBAL bool
591 Conf_EnableServer( const char *Name, UINT16 Port )
592 {
593         int i;
594
595         assert( Name != NULL );
596         for( i = 0; i < MAX_SERVERS; i++ ) {
597                 if( strcasecmp( Conf_Server[i].name, Name ) == 0 ) {
598                         /* Gotcha! Set port and enable server: */
599                         Conf_Server[i].port = Port;
600                         Conf_Server[i].flags &= ~CONF_SFLAG_DISABLED;
601                         return (Conf_Server[i].port && Conf_Server[i].host[0]);
602                 }
603         }
604         return false;
605 }
606
607 /**
608  * Enable a server by name.
609  *
610  * The server is only usable as outgoing server, if it has set a valid port
611  * number for outgoing connections!
612  * If not, you have to use Conf_EnableServer() function to make it available.
613  *
614  * @returns     true if a server has been enabled; false otherwise.
615  */
616 GLOBAL bool
617 Conf_EnablePassiveServer(const char *Name)
618 {
619         int i;
620
621         assert( Name != NULL );
622         for (i = 0; i < MAX_SERVERS; i++) {
623                 if ((strcasecmp( Conf_Server[i].name, Name ) == 0)
624                     && (Conf_Server[i].port > 0)) {
625                         /* BINGO! Enable server */
626                         Conf_Server[i].flags &= ~CONF_SFLAG_DISABLED;
627                         return true;
628                 }
629         }
630         return false;
631 }
632
633 /**
634  * Disable a server by name.
635  * An already established connection will be disconnected.
636  *
637  * @returns     true if a server was found and has been disabled.
638  */
639 GLOBAL bool
640 Conf_DisableServer( const char *Name )
641 {
642         int i;
643
644         assert( Name != NULL );
645         for( i = 0; i < MAX_SERVERS; i++ ) {
646                 if( strcasecmp( Conf_Server[i].name, Name ) == 0 ) {
647                         /* Gotcha! Disable and disconnect server: */
648                         Conf_Server[i].flags |= CONF_SFLAG_DISABLED;
649                         if( Conf_Server[i].conn_id > NONE )
650                                 Conn_Close(Conf_Server[i].conn_id, NULL,
651                                            "Server link terminated on operator request",
652                                            true);
653                         return true;
654                 }
655         }
656         return false;
657 }
658
659 /**
660  * Add a new remote server to our configuration.
661  *
662  * @param Name          Name of the new server.
663  * @param Port          Port number to connect to or 0 for incoming connections.
664  * @param Host          Host name to connect to.
665  * @param MyPwd         Password that will be sent to the peer.
666  * @param PeerPwd       Password that must be received from the peer.
667  * @returns             true if the new server has been added; false otherwise.
668  */
669 GLOBAL bool
670 Conf_AddServer(const char *Name, UINT16 Port, const char *Host,
671                const char *MyPwd, const char *PeerPwd)
672 {
673         int i;
674
675         assert( Name != NULL );
676         assert( Host != NULL );
677         assert( MyPwd != NULL );
678         assert( PeerPwd != NULL );
679
680         /* Search unused item in server configuration structure */
681         for( i = 0; i < MAX_SERVERS; i++ ) {
682                 /* Is this item used? */
683                 if( ! Conf_Server[i].name[0] ) break;
684         }
685         if( i >= MAX_SERVERS ) return false;
686
687         Init_Server_Struct( &Conf_Server[i] );
688         strlcpy( Conf_Server[i].name, Name, sizeof( Conf_Server[i].name ));
689         strlcpy( Conf_Server[i].host, Host, sizeof( Conf_Server[i].host ));
690         strlcpy( Conf_Server[i].pwd_out, MyPwd, sizeof( Conf_Server[i].pwd_out ));
691         strlcpy( Conf_Server[i].pwd_in, PeerPwd, sizeof( Conf_Server[i].pwd_in ));
692         Conf_Server[i].port = Port;
693         Conf_Server[i].flags = CONF_SFLAG_ONCE;
694
695         return true;
696 }
697
698 /**
699  * Check if the given nickname is reserved for services on a particular server.
700  *
701  * @param ConfServer The server index to check.
702  * @param Nick The nickname to check.
703  * @returns true if the given nickname belongs to an "IRC service".
704  */
705 GLOBAL bool
706 Conf_NickIsService(int ConfServer, const char *Nick)
707 {
708         assert (ConfServer >= 0);
709         assert (ConfServer < MAX_SERVERS);
710
711         return MatchCaseInsensitiveList(Conf_Server[ConfServer].svs_mask,
712                                         Nick, ",");
713 }
714
715 /**
716  * Check if the given nickname is blocked for "normal client" use.
717  *
718  * @param ConfServer The server index or NONE to check all configured servers.
719  * @param Nick The nickname to check.
720  * @returns true if the given nickname belongs to an "IRC service".
721  */
722 GLOBAL bool
723 Conf_NickIsBlocked(const char *Nick)
724 {
725         int i;
726
727         for(i = 0; i < MAX_SERVERS; i++) {
728                 if (!Conf_Server[i].name[0])
729                         continue;
730                 if (Conf_NickIsService(i, Nick))
731                         return true;
732         }
733         return false;
734 }
735
736 /**
737  * Initialize configuration settings with their default values.
738  */
739 static void
740 Set_Defaults(bool InitServers)
741 {
742         int i;
743         char random[RANDOM_SALT_LEN + 1];
744
745         /* Global */
746         strcpy(Conf_ServerName, "");
747         strcpy(Conf_ServerAdmin1, "");
748         strcpy(Conf_ServerAdmin2, "");
749         strcpy(Conf_ServerAdminMail, "");
750         snprintf(Conf_ServerInfo, sizeof Conf_ServerInfo, "%s %s",
751                  PACKAGE_NAME, PACKAGE_VERSION);
752         free(Conf_ListenAddress);
753         Conf_ListenAddress = NULL;
754         array_free(&Conf_ListenPorts);
755         array_free(&Conf_Motd);
756         array_free(&Conf_Helptext);
757         strlcpy(Conf_MotdFile, SYSCONFDIR, sizeof(Conf_MotdFile));
758         strlcat(Conf_MotdFile, MOTD_FILE, sizeof(Conf_MotdFile));
759         strlcpy(Conf_HelpFile, DOCDIR, sizeof(Conf_HelpFile));
760         strlcat(Conf_HelpFile, HELP_FILE, sizeof(Conf_HelpFile));
761         strcpy(Conf_ServerPwd, "");
762         strlcpy(Conf_PidFile, PID_FILE, sizeof(Conf_PidFile));
763         Conf_UID = Conf_GID = 0;
764
765         /* Limits */
766         Conf_ConnectRetry = 60;
767         Conf_IdleTimeout = 0;
768         Conf_MaxConnections = 0;
769         Conf_MaxConnectionsIP = 5;
770         Conf_MaxJoins = 10;
771         Conf_MaxNickLength = CLIENT_NICK_LEN_DEFAULT;
772         Conf_MaxListSize = 100;
773         Conf_PingTimeout = 120;
774         Conf_PongTimeout = 20;
775
776         /* Options */
777         strlcpy(Conf_AllowedChannelTypes, CHANTYPES,
778                 sizeof(Conf_AllowedChannelTypes));
779         Conf_AllowRemoteOper = false;
780 #ifndef STRICT_RFC
781         Conf_AuthPing = false;
782 #endif
783         strlcpy(Conf_Chroot, CHROOT_DIR, sizeof(Conf_Chroot));
784         strcpy(Conf_CloakHost, "");
785         strcpy(Conf_CloakHostModeX, "");
786         strlcpy(Conf_CloakHostSalt, ngt_RandomStr(random, RANDOM_SALT_LEN),
787                 sizeof(Conf_CloakHostSalt));
788         Conf_CloakUserToNick = false;
789         Conf_ConnectIPv4 = true;
790 #ifdef WANT_IPV6
791         Conf_ConnectIPv6 = true;
792 #else
793         Conf_ConnectIPv6 = false;
794 #endif
795         strcpy(Conf_DefaultUserModes, "");
796         Conf_DNS = true;
797 #ifdef IDENTAUTH
798         Conf_Ident = true;
799 #else
800         Conf_Ident = false;
801 #endif
802         strcpy(Conf_IncludeDir, "");
803         Conf_MorePrivacy = false;
804         Conf_NoticeAuth = false;
805         Conf_OperCanMode = false;
806         Conf_OperChanPAutoOp = true;
807         Conf_OperServerMode = false;
808 #ifdef PAM
809         Conf_PAM = true;
810 #else
811         Conf_PAM = false;
812 #endif
813         Conf_PAMIsOptional = false;
814 #ifdef SYSLOG
815         Conf_ScrubCTCP = false;
816 #ifdef LOG_LOCAL5
817         Conf_SyslogFacility = LOG_LOCAL5;
818 #else
819         Conf_SyslogFacility = 0;
820 #endif
821 #endif
822
823         /* Initialize server configuration structures */
824         if (InitServers) {
825                 for (i = 0; i < MAX_SERVERS;
826                      Init_Server_Struct(&Conf_Server[i++]));
827         }
828 }
829
830 /**
831  * Get number of configured listening ports.
832  *
833  * @returns The number of ports (IPv4+IPv6) on which the server should listen.
834  */
835 static bool
836 no_listenports(void)
837 {
838         size_t cnt = array_bytes(&Conf_ListenPorts);
839 #ifdef SSL_SUPPORT
840         cnt += array_bytes(&Conf_SSLOptions.ListenPorts);
841 #endif
842         return cnt == 0;
843 }
844
845 /**
846  * Read contents of a text file into an array.
847  *
848  * This function is used to read the MOTD and help text file, for example.
849  *
850  * @param filename      Name of the file to read.
851  * @return              true, when the file has been read in.
852  */
853 static bool
854 Read_TextFile(const char *Filename, const char *Name, array *Destination)
855 {
856         char line[127];
857         FILE *fp;
858         int line_no = 1;
859
860         if (*Filename == '\0')
861                 return false;
862
863         fp = fopen(Filename, "r");
864         if (!fp) {
865                 Config_Error(LOG_ERR, "Can't read %s file \"%s\": %s",
866                              Name, Filename, strerror(errno));
867                 return false;
868         }
869
870         array_free(Destination);
871         while (fgets(line, (int)sizeof line, fp)) {
872                 ngt_TrimLastChr(line, '\n');
873
874                 /* add text including \0 */
875                 if (!array_catb(Destination, line, strlen(line) + 1)) {
876                         Log(LOG_ERR, "Cannot read/add \"%s\", line %d: %s",
877                             Filename, line_no, strerror(errno));
878                         break;
879                 }
880                 line_no++;
881         }
882         fclose(fp);
883         return true;
884 }
885
886 /**
887  * Read ngIRCd configuration file.
888  *
889  * Please note that this function uses exit(1) on fatal errors and therefore
890  * can result in ngIRCd terminating!
891  *
892  * @param ngircd_starting       Flag indicating if ngIRCd is starting or not.
893  * @returns                     true when the configuration file has been read
894  *                              successfully; false otherwise.
895  */
896 static bool
897 Read_Config(bool TestOnly, bool IsStarting)
898 {
899         const UINT16 defaultport = 6667;
900         char *ptr, file[FNAME_LEN];
901         struct dirent *entry;
902         int i, n;
903         FILE *fd;
904         DIR *dh;
905
906         /* Open configuration file */
907         fd = fopen( NGIRCd_ConfFile, "r" );
908         if( ! fd ) {
909                 /* No configuration file found! */
910                 Config_Error( LOG_ALERT, "Can't read configuration \"%s\": %s",
911                                         NGIRCd_ConfFile, strerror( errno ));
912                 if (!IsStarting)
913                         return false;
914                 Config_Error( LOG_ALERT, "%s exiting due to fatal errors!", PACKAGE_NAME );
915                 exit( 1 );
916         }
917
918         opers_free();
919         Set_Defaults(IsStarting);
920
921         if (TestOnly)
922                 Config_Error(LOG_INFO,
923                              "Reading configuration from \"%s\" ...",
924                              NGIRCd_ConfFile );
925
926         /* Clean up server configuration structure: mark all already
927          * configured servers as "once" so that they are deleted
928          * after the next disconnect and delete all unused servers.
929          * And delete all servers which are "duplicates" of servers
930          * that are already marked as "once" (such servers have been
931          * created by the last rehash but are now useless). */
932         for( i = 0; i < MAX_SERVERS; i++ ) {
933                 if( Conf_Server[i].conn_id == NONE ) Init_Server_Struct( &Conf_Server[i] );
934                 else {
935                         /* This structure is in use ... */
936                         if( Conf_Server[i].flags & CONF_SFLAG_ONCE ) {
937                                 /* Check for duplicates */
938                                 for( n = 0; n < MAX_SERVERS; n++ ) {
939                                         if( n == i ) continue;
940
941                                         if( Conf_Server[i].conn_id == Conf_Server[n].conn_id ) {
942                                                 Init_Server_Struct( &Conf_Server[n] );
943 #ifdef DEBUG
944                                                 Log(LOG_DEBUG,"Deleted unused duplicate server %d (kept %d).",
945                                                                                                 n, i );
946 #endif
947                                         }
948                                 }
949                         } else {
950                                 /* Mark server as "once" */
951                                 Conf_Server[i].flags |= CONF_SFLAG_ONCE;
952                                 Log( LOG_DEBUG, "Marked server %d as \"once\"", i );
953                         }
954                 }
955         }
956
957         /* Initialize variables */
958         Init_Server_Struct( &New_Server );
959         New_Server_Idx = NONE;
960 #ifdef SSL_SUPPORT
961         ConfSSL_Init();
962 #endif
963
964         Read_Config_File(NGIRCd_ConfFile, fd);
965         fclose(fd);
966
967         if (Conf_IncludeDir[0]) {
968                 dh = opendir(Conf_IncludeDir);
969                 if (!dh)
970                         Config_Error(LOG_ALERT,
971                                      "Can't open include directory \"%s\": %s",
972                                      Conf_IncludeDir, strerror(errno));
973         } else {
974                 strlcpy(Conf_IncludeDir, SYSCONFDIR, sizeof(Conf_IncludeDir));
975                 strlcat(Conf_IncludeDir, CONFIG_DIR, sizeof(Conf_IncludeDir));
976                 dh = opendir(Conf_IncludeDir);
977         }
978
979         /* Include further configuration files, if IncludeDir is available */
980         if (dh) {
981                 while ((entry = readdir(dh)) != NULL) {
982                         ptr = strrchr(entry->d_name, '.');
983                         if (!ptr || strcasecmp(ptr, ".conf") != 0)
984                                 continue;
985                         snprintf(file, sizeof(file), "%s/%s",
986                                  Conf_IncludeDir, entry->d_name);
987                         if (TestOnly)
988                                 Config_Error(LOG_INFO,
989                                              "Reading configuration from \"%s\" ...",
990                                              file);
991                         fd = fopen(file, "r");
992                         if (fd) {
993                                 Read_Config_File(file, fd);
994                                 fclose(fd);
995                         } else
996                                 Config_Error(LOG_ALERT,
997                                              "Can't read configuration \"%s\": %s",
998                                              file, strerror(errno));
999                 }
1000                 closedir(dh);
1001         }
1002
1003         /* Check if there is still a server to add */
1004         if( New_Server.name[0] ) {
1005                 /* Copy data to "real" server structure */
1006                 assert( New_Server_Idx > NONE );
1007                 Conf_Server[New_Server_Idx] = New_Server;
1008         }
1009
1010         /* not a single listening port? Add default. */
1011         if (no_listenports() &&
1012                 !array_copyb(&Conf_ListenPorts, (char*) &defaultport, sizeof defaultport))
1013         {
1014                 Config_Error(LOG_ALERT, "Could not add default listening Port %u: %s",
1015                                         (unsigned int) defaultport, strerror(errno));
1016
1017                 exit(1);
1018         }
1019
1020         if (!Conf_ListenAddress)
1021                 Conf_ListenAddress = strdup_warn(DEFAULT_LISTEN_ADDRSTR);
1022
1023         if (!Conf_ListenAddress) {
1024                 Config_Error(LOG_ALERT, "%s exiting due to fatal errors!", PACKAGE_NAME);
1025                 exit(1);
1026         }
1027
1028         /* No MOTD phrase configured? (re)try motd file. */
1029         if (array_bytes(&Conf_Motd) == 0) {
1030                 if (Read_TextFile(Conf_MotdFile, "MOTD", &Conf_Motd))
1031                         Using_MotdFile = true;
1032         }
1033
1034         /* Try to read ngIRCd help text file. */
1035         (void)Read_TextFile(Conf_HelpFile, "help text", &Conf_Helptext);
1036         if (!array_bytes(&Conf_Helptext))
1037                 Config_Error(LOG_WARNING,
1038                     "No help text available, HELP command will be of limited use.");
1039
1040 #ifdef SSL_SUPPORT
1041         /* Make sure that all SSL-related files are readable */
1042         CheckFileReadable("CertFile", Conf_SSLOptions.CertFile);
1043         CheckFileReadable("DHFile", Conf_SSLOptions.DHFile);
1044         CheckFileReadable("KeyFile", Conf_SSLOptions.KeyFile);
1045
1046         /* Set the default ciphers if none were configured */
1047         if (!Conf_SSLOptions.CipherList)
1048                 Conf_SSLOptions.CipherList = strdup_warn(DEFAULT_CIPHERS);
1049 #endif
1050
1051         return true;
1052 }
1053
1054 /**
1055  * ...
1056  */
1057 static void Read_Config_File(const char *File, FILE *fd)
1058 {
1059         char section[LINE_LEN], str[LINE_LEN], *var, *arg, *ptr;
1060         int i, line = 0;
1061         size_t count;
1062
1063         /* Read configuration file */
1064         section[0] = '\0';
1065         while (true) {
1066                 if (!fgets(str, LINE_LEN, fd))
1067                         break;
1068                 ngt_TrimStr(str);
1069                 line++;
1070
1071                 /* Skip comments and empty lines */
1072                 if (str[0] == ';' || str[0] == '#' || str[0] == '\0')
1073                         continue;
1074
1075                 /* Is this the beginning of a new section? */
1076                 if ((str[0] == '[') && (str[strlen(str) - 1] == ']')) {
1077                         strlcpy(section, str, sizeof(section));
1078                         if (strcasecmp(section, "[GLOBAL]") == 0
1079                             || strcasecmp(section, "[LIMITS]") == 0
1080                             || strcasecmp(section, "[OPTIONS]") == 0
1081 #ifdef SSL_SUPPORT
1082                             || strcasecmp(section, "[SSL]") == 0
1083 #endif
1084                             )
1085                                 continue;
1086
1087                         if (strcasecmp(section, "[SERVER]") == 0) {
1088                                 /* Check if there is already a server to add */
1089                                 if (New_Server.name[0]) {
1090                                         /* Copy data to "real" server structure */
1091                                         assert(New_Server_Idx > NONE);
1092                                         Conf_Server[New_Server_Idx] =
1093                                         New_Server;
1094                                 }
1095
1096                                 /* Re-init structure for new server */
1097                                 Init_Server_Struct(&New_Server);
1098
1099                                 /* Search unused item in server configuration structure */
1100                                 for (i = 0; i < MAX_SERVERS; i++) {
1101                                         /* Is this item used? */
1102                                         if (!Conf_Server[i].name[0])
1103                                                 break;
1104                                 }
1105                                 if (i >= MAX_SERVERS) {
1106                                         /* Oops, no free item found! */
1107                                         Config_Error(LOG_ERR,
1108                                                      "Too many servers configured.");
1109                                         New_Server_Idx = NONE;
1110                                 } else
1111                                         New_Server_Idx = i;
1112                                 continue;
1113                         }
1114
1115                         if (strcasecmp(section, "[CHANNEL]") == 0) {
1116                                 count = array_length(&Conf_Channels,
1117                                                      sizeof(struct
1118                                                             Conf_Channel));
1119                                 if (!array_alloc
1120                                     (&Conf_Channels,
1121                                      sizeof(struct Conf_Channel), count)) {
1122                                             Config_Error(LOG_ERR,
1123                                                          "Could not allocate memory for new operator (line %d)",
1124                                                          line);
1125                                     }
1126                                 continue;
1127                         }
1128
1129                         if (strcasecmp(section, "[OPERATOR]") == 0) {
1130                                 count = array_length(&Conf_Opers,
1131                                                      sizeof(struct Conf_Oper));
1132                                 if (!array_alloc(&Conf_Opers,
1133                                                  sizeof(struct Conf_Oper),
1134                                                  count)) {
1135                                         Config_Error(LOG_ERR,
1136                                                      "Could not allocate memory for new channel (line &d)",
1137                                                      line);
1138                                 }
1139                                 continue;
1140                         }
1141
1142                         Config_Error(LOG_ERR,
1143                                      "%s, line %d: Unknown section \"%s\"!",
1144                                      NGIRCd_ConfFile, line, section);
1145                         section[0] = 0x1;
1146                 }
1147                 if (section[0] == 0x1)
1148                         continue;
1149
1150                 /* Split line into variable name and parameters */
1151                 ptr = strchr(str, '=');
1152                 if (!ptr) {
1153                         Config_Error(LOG_ERR, "%s, line %d: Syntax error!",
1154                                      NGIRCd_ConfFile, line);
1155                         continue;
1156                 }
1157                 *ptr = '\0';
1158                 var = str;
1159                 ngt_TrimStr(var);
1160                 arg = ptr + 1;
1161                 ngt_TrimStr(arg);
1162
1163                 if (strcasecmp(section, "[GLOBAL]") == 0)
1164                         Handle_GLOBAL(File, line, var, arg);
1165                 else if (strcasecmp(section, "[LIMITS]") == 0)
1166                         Handle_LIMITS(File, line, var, arg);
1167                 else if (strcasecmp(section, "[OPTIONS]") == 0)
1168                         Handle_OPTIONS(File, line, var, arg);
1169 #ifdef SSL_SUPPORT
1170                 else if (strcasecmp(section, "[SSL]") == 0)
1171                         Handle_SSL(File, line, var, arg);
1172 #endif
1173                 else if (strcasecmp(section, "[OPERATOR]") == 0)
1174                         Handle_OPERATOR(File, line, var, arg);
1175                 else if (strcasecmp(section, "[SERVER]") == 0)
1176                         Handle_SERVER(File, line, var, arg);
1177                 else if (strcasecmp(section, "[CHANNEL]") == 0)
1178                         Handle_CHANNEL(File, line, var, arg);
1179                 else
1180                         Config_Error(LOG_ERR,
1181                                      "%s, line %d: Variable \"%s\" outside section!",
1182                                      NGIRCd_ConfFile, line, var);
1183         }
1184 }
1185
1186 /**
1187  * Check whether a string argument is "true" or "false".
1188  *
1189  * @param Arg   Input string.
1190  * @returns     true if the input string has been parsed as "yes", "true"
1191  *              (case insensitive) or a non-zero integer value.
1192  */
1193 static bool
1194 Check_ArgIsTrue(const char *Arg)
1195 {
1196         if (strcasecmp(Arg, "yes") == 0)
1197                 return true;
1198         if (strcasecmp(Arg, "true") == 0)
1199                 return true;
1200         if (atoi(Arg) != 0)
1201                 return true;
1202
1203         return false;
1204 }
1205
1206 /**
1207  * Handle setting of "MaxNickLength".
1208  *
1209  * @param Line  Line number in configuration file.
1210  * @raram Arg   Input string.
1211  * @returns     New configured maximum nickname length.
1212  */
1213 static unsigned int
1214 Handle_MaxNickLength(int Line, const char *Arg)
1215 {
1216         unsigned new;
1217
1218         new = (unsigned) atoi(Arg) + 1;
1219         if (new > CLIENT_NICK_LEN) {
1220                 Config_Error(LOG_WARNING,
1221                              "%s, line %d: Value of \"MaxNickLength\" exceeds %u!",
1222                              NGIRCd_ConfFile, Line, CLIENT_NICK_LEN - 1);
1223                 return CLIENT_NICK_LEN;
1224         }
1225         if (new < 2) {
1226                 Config_Error(LOG_WARNING,
1227                              "%s, line %d: Value of \"MaxNickLength\" must be at least 1!",
1228                              NGIRCd_ConfFile, Line);
1229                 return 2;
1230         }
1231         return new;
1232 }
1233
1234 /**
1235  * Output a warning messages if IDENT is configured but not compiled in.
1236  */
1237 static void
1238 WarnIdent(int UNUSED Line)
1239 {
1240 #ifndef IDENTAUTH
1241         if (Conf_Ident) {
1242                 /* user has enabled ident lookups explicitly, but ... */
1243                 Config_Error(LOG_WARNING,
1244                         "%s: line %d: \"Ident = yes\", but ngircd was built without IDENT support!",
1245                         NGIRCd_ConfFile, Line);
1246         }
1247 #endif
1248 }
1249
1250 /**
1251  * Output a warning messages if IPv6 is configured but not compiled in.
1252  */
1253 static void
1254 WarnIPv6(int UNUSED Line)
1255 {
1256 #ifndef WANT_IPV6
1257         if (Conf_ConnectIPv6) {
1258                 /* user has enabled IPv6 explicitly, but ... */
1259                 Config_Error(LOG_WARNING,
1260                         "%s: line %d: \"ConnectIPv6 = yes\", but ngircd was built without IPv6 support!",
1261                         NGIRCd_ConfFile, Line);
1262         }
1263 #endif
1264 }
1265
1266 /**
1267  * Output a warning messages if PAM is configured but not compiled in.
1268  */
1269 static void
1270 WarnPAM(int UNUSED Line)
1271 {
1272 #ifndef PAM
1273         if (Conf_PAM) {
1274                 Config_Error(LOG_WARNING,
1275                         "%s: line %d: \"PAM = yes\", but ngircd was built without PAM support!",
1276                         NGIRCd_ConfFile, Line);
1277         }
1278 #endif
1279 }
1280
1281 /**
1282  * Handle legacy "NoXXX" options in [GLOBAL] section.
1283  *
1284  * TODO: This function and support for "NoXXX" could be removed starting
1285  * with ngIRCd release 19 (one release after marking it "deprecated").
1286  *
1287  * @param Var   Variable name.
1288  * @param Arg   Argument string.
1289  * @returns     true if a NoXXX option has been processed; false otherwise.
1290  */
1291 static bool
1292 CheckLegacyNoOption(const char *Var, const char *Arg)
1293 {
1294         if(strcasecmp(Var, "NoDNS") == 0) {
1295                 Conf_DNS = !Check_ArgIsTrue( Arg );
1296                 return true;
1297         }
1298         if (strcasecmp(Var, "NoIdent") == 0) {
1299                 Conf_Ident = !Check_ArgIsTrue(Arg);
1300                 return true;
1301         }
1302         if(strcasecmp(Var, "NoPAM") == 0) {
1303                 Conf_PAM = !Check_ArgIsTrue(Arg);
1304                 return true;
1305         }
1306         return false;
1307 }
1308
1309 /**
1310  * Handle deprecated legacy options in [GLOBAL] section.
1311  *
1312  * TODO: This function and support for these options in the [Global] section
1313  * could be removed starting with ngIRCd release 19 (one release after
1314  * marking it "deprecated").
1315  *
1316  * @param Var   Variable name.
1317  * @param Arg   Argument string.
1318  * @returns     true if a legacy option has been processed; false otherwise.
1319  */
1320 static const char*
1321 CheckLegacyGlobalOption(const char *File, int Line, char *Var, char *Arg)
1322 {
1323         if (strcasecmp(Var, "AllowRemoteOper") == 0
1324             || strcasecmp(Var, "ChrootDir") == 0
1325             || strcasecmp(Var, "ConnectIPv4") == 0
1326             || strcasecmp(Var, "ConnectIPv6") == 0
1327             || strcasecmp(Var, "OperCanUseMode") == 0
1328             || strcasecmp(Var, "OperChanPAutoOp") == 0
1329             || strcasecmp(Var, "OperServerMode") == 0
1330             || strcasecmp(Var, "PredefChannelsOnly") == 0
1331             || strcasecmp(Var, "SyslogFacility") == 0
1332             || strcasecmp(Var, "WebircPassword") == 0) {
1333                 Handle_OPTIONS(File, Line, Var, Arg);
1334                 return "[Options]";
1335         }
1336         if (strcasecmp(Var, "ConnectRetry") == 0
1337             || strcasecmp(Var, "IdleTimeout") == 0
1338             || strcasecmp(Var, "MaxConnections") == 0
1339             || strcasecmp(Var, "MaxConnectionsIP") == 0
1340             || strcasecmp(Var, "MaxJoins") == 0
1341             || strcasecmp(Var, "MaxNickLength") == 0
1342             || strcasecmp(Var, "PingTimeout") == 0
1343             || strcasecmp(Var, "PongTimeout") == 0) {
1344                 Handle_LIMITS(File, Line, Var, Arg);
1345                 return "[Limits]";
1346         }
1347 #ifdef SSL_SUPPORT
1348         if (strcasecmp(Var, "SSLCertFile") == 0
1349             || strcasecmp(Var, "SSLDHFile") == 0
1350             || strcasecmp(Var, "SSLKeyFile") == 0
1351             || strcasecmp(Var, "SSLKeyFilePassword") == 0
1352             || strcasecmp(Var, "SSLPorts") == 0) {
1353                 Handle_SSL(File, Line, Var + 3, Arg);
1354                 return "[SSL]";
1355         }
1356 #endif
1357
1358         return NULL;
1359 }
1360
1361 /**
1362  * Strip "no" prefix of a string.
1363  *
1364  * TODO: This function and support for "NoXXX" should be removed starting
1365  * with ngIRCd release 19! (One release after marking it "deprecated").
1366  *
1367  * @param str   Pointer to input string starting with "no".
1368  * @returns     New pointer to string without "no" prefix.
1369  */
1370 static const char *
1371 NoNo(const char *str)
1372 {
1373         assert(strncasecmp("no", str, 2) == 0 && str[2]);
1374         return str + 2;
1375 }
1376
1377 /**
1378  * Invert "boolean" string.
1379  *
1380  * TODO: This function and support for "NoXXX" should be removed starting
1381  * with ngIRCd release 19! (One release after marking it "deprecated").
1382  *
1383  * @param arg   "Boolean" input string.
1384  * @returns     Pointer to inverted "boolean string".
1385  */
1386 static const char *
1387 InvertArg(const char *arg)
1388 {
1389         return yesno_to_str(!Check_ArgIsTrue(arg));
1390 }
1391
1392 /**
1393  * Handle variable in [Global] configuration section.
1394  *
1395  * @param Line  Line numer in configuration file.
1396  * @param Var   Variable name.
1397  * @param Arg   Variable argument.
1398  */
1399 static void
1400 Handle_GLOBAL(const char *File, int Line, char *Var, char *Arg )
1401 {
1402         struct passwd *pwd;
1403         struct group *grp;
1404         size_t len;
1405         const char *section;
1406
1407         assert(File != NULL);
1408         assert(Line > 0);
1409         assert(Var != NULL);
1410         assert(Arg != NULL);
1411
1412         if (strcasecmp(Var, "Name") == 0) {
1413                 len = strlcpy(Conf_ServerName, Arg, sizeof(Conf_ServerName));
1414                 if (len >= sizeof(Conf_ServerName))
1415                         Config_Error_TooLong(File, Line, Var);
1416                 return;
1417         }
1418         if (strcasecmp(Var, "AdminInfo1") == 0) {
1419                 len = strlcpy(Conf_ServerAdmin1, Arg, sizeof(Conf_ServerAdmin1));
1420                 if (len >= sizeof(Conf_ServerAdmin1))
1421                         Config_Error_TooLong(File, Line, Var);
1422                 return;
1423         }
1424         if (strcasecmp(Var, "AdminInfo2") == 0) {
1425                 len = strlcpy(Conf_ServerAdmin2, Arg, sizeof(Conf_ServerAdmin2));
1426                 if (len >= sizeof(Conf_ServerAdmin2))
1427                         Config_Error_TooLong(File, Line, Var);
1428                 return;
1429         }
1430         if (strcasecmp(Var, "AdminEMail") == 0) {
1431                 len = strlcpy(Conf_ServerAdminMail, Arg,
1432                         sizeof(Conf_ServerAdminMail));
1433                 if (len >= sizeof(Conf_ServerAdminMail))
1434                         Config_Error_TooLong(File, Line, Var);
1435                 return;
1436         }
1437         if (strcasecmp(Var, "Info") == 0) {
1438                 len = strlcpy(Conf_ServerInfo, Arg, sizeof(Conf_ServerInfo));
1439                 if (len >= sizeof(Conf_ServerInfo))
1440                         Config_Error_TooLong(File, Line, Var);
1441                 return;
1442         }
1443         if (strcasecmp(Var, "HelpFile") == 0) {
1444                 len = strlcpy(Conf_HelpFile, Arg, sizeof(Conf_HelpFile));
1445                 if (len >= sizeof(Conf_HelpFile))
1446                         Config_Error_TooLong(File, Line, Var);
1447                 return;
1448         }
1449         if (strcasecmp(Var, "Listen") == 0) {
1450                 if (Conf_ListenAddress) {
1451                         Config_Error(LOG_ERR,
1452                                      "Multiple Listen= options, ignoring: %s",
1453                                      Arg);
1454                         return;
1455                 }
1456                 Conf_ListenAddress = strdup_warn(Arg);
1457                 /* If allocation fails, we're in trouble: we cannot ignore the
1458                  * error -- otherwise ngircd would listen on all interfaces. */
1459                 if (!Conf_ListenAddress) {
1460                         Config_Error(LOG_ALERT,
1461                                      "%s exiting due to fatal errors!",
1462                                      PACKAGE_NAME);
1463                         exit(1);
1464                 }
1465                 return;
1466         }
1467         if (strcasecmp(Var, "MotdFile") == 0) {
1468                 len = strlcpy(Conf_MotdFile, Arg, sizeof(Conf_MotdFile));
1469                 if (len >= sizeof(Conf_MotdFile))
1470                         Config_Error_TooLong(File, Line, Var);
1471                 return;
1472         }
1473         if (strcasecmp(Var, "MotdPhrase") == 0) {
1474                 len = strlen(Arg);
1475                 if (len == 0)
1476                         return;
1477                 if (len >= LINE_LEN) {
1478                         Config_Error_TooLong(File, Line, Var);
1479                         return;
1480                 }
1481                 if (!array_copyb(&Conf_Motd, Arg, len + 1))
1482                         Config_Error(LOG_WARNING,
1483                                      "%s, line %d: Could not append MotdPhrase: %s",
1484                                      NGIRCd_ConfFile, Line, strerror(errno));
1485                 Using_MotdFile = false;
1486                 return;
1487         }
1488         if(strcasecmp(Var, "Password") == 0) {
1489                 len = strlcpy(Conf_ServerPwd, Arg, sizeof(Conf_ServerPwd));
1490                 if (len >= sizeof(Conf_ServerPwd))
1491                         Config_Error_TooLong(File, Line, Var);
1492                 return;
1493         }
1494         if (strcasecmp(Var, "PidFile") == 0) {
1495                 len = strlcpy(Conf_PidFile, Arg, sizeof(Conf_PidFile));
1496                 if (len >= sizeof(Conf_PidFile))
1497                         Config_Error_TooLong(File, Line, Var);
1498                 return;
1499         }
1500         if (strcasecmp(Var, "Ports") == 0) {
1501                 ports_parse(&Conf_ListenPorts, Line, Arg);
1502                 return;
1503         }
1504         if (strcasecmp(Var, "ServerGID") == 0) {
1505                 grp = getgrnam(Arg);
1506                 if (grp)
1507                         Conf_GID = grp->gr_gid;
1508                 else {
1509                         Conf_GID = (unsigned int)atoi(Arg);
1510                         if (!Conf_GID && strcmp(Arg, "0"))
1511                                 Config_Error(LOG_WARNING,
1512                                              "%s, line %d: Value of \"%s\" is not a valid group name or ID!",
1513                                              NGIRCd_ConfFile, Line, Var);
1514                 }
1515                 return;
1516         }
1517         if (strcasecmp(Var, "ServerUID") == 0) {
1518                 pwd = getpwnam(Arg);
1519                 if (pwd)
1520                         Conf_UID = pwd->pw_uid;
1521                 else {
1522                         Conf_UID = (unsigned int)atoi(Arg);
1523                         if (!Conf_UID && strcmp(Arg, "0"))
1524                                 Config_Error(LOG_WARNING,
1525                                              "%s, line %d: Value of \"%s\" is not a valid user name or ID!",
1526                                              NGIRCd_ConfFile, Line, Var);
1527                 }
1528                 return;
1529         }
1530
1531         if (CheckLegacyNoOption(Var, Arg)) {
1532                 /* TODO: This function and support for "NoXXX" could be
1533                  * be removed starting with ngIRCd release 19 (one release
1534                  * after marking it "deprecated"). */
1535                 Config_Error(LOG_WARNING,
1536                              "%s, line %d (section \"Global\"): \"No\"-Prefix is deprecated, use \"%s = %s\" in [Options] section!",
1537                              NGIRCd_ConfFile, Line, NoNo(Var), InvertArg(Arg));
1538                 if (strcasecmp(Var, "NoIdent") == 0)
1539                         WarnIdent(Line);
1540                 else if (strcasecmp(Var, "NoPam") == 0)
1541                         WarnPAM(Line);
1542                 return;
1543         }
1544         if ((section = CheckLegacyGlobalOption(File, Line, Var, Arg))) {
1545                 /** TODO: This function and support for these options in the
1546                  * [Global] section could be removed starting with ngIRCd
1547                  * release 19 (one release after marking it "deprecated"). */
1548                 if (strncasecmp(Var, "SSL", 3) == 0) {
1549                         Config_Error(LOG_WARNING,
1550                                      "%s, line %d (section \"Global\"): \"%s\" is deprecated here, move it to %s and rename to \"%s\"!",
1551                                      NGIRCd_ConfFile, Line, Var, section,
1552                                      Var + 3);
1553                 } else {
1554                         Config_Error(LOG_WARNING,
1555                                      "%s, line %d (section \"Global\"): \"%s\" is deprecated here, move it to %s!",
1556                                      NGIRCd_ConfFile, Line, Var, section);
1557                 }
1558                 return;
1559         }
1560
1561         Config_Error_Section(File, Line, Var, "Global");
1562 }
1563
1564 /**
1565  * Handle variable in [Limits] configuration section.
1566  *
1567  * @param Line  Line numer in configuration file.
1568  * @param Var   Variable name.
1569  * @param Arg   Variable argument.
1570  */
1571 static void
1572 Handle_LIMITS(const char *File, int Line, char *Var, char *Arg)
1573 {
1574         assert(File != NULL);
1575         assert(Line > 0);
1576         assert(Var != NULL);
1577         assert(Arg != NULL);
1578
1579         if (strcasecmp(Var, "ConnectRetry") == 0) {
1580                 Conf_ConnectRetry = atoi(Arg);
1581                 if (Conf_ConnectRetry < 5) {
1582                         Config_Error(LOG_WARNING,
1583                                      "%s, line %d: Value of \"ConnectRetry\" too low!",
1584                                      NGIRCd_ConfFile, Line);
1585                         Conf_ConnectRetry = 5;
1586                 }
1587                 return;
1588         }
1589         if (strcasecmp(Var, "IdleTimeout") == 0) {
1590                 Conf_IdleTimeout = atoi(Arg);
1591                 if (!Conf_IdleTimeout && strcmp(Arg, "0"))
1592                         Config_Error_NaN(File, Line, Var);
1593                 return;
1594         }
1595         if (strcasecmp(Var, "MaxConnections") == 0) {
1596                 Conf_MaxConnections = atoi(Arg);
1597                 if (!Conf_MaxConnections && strcmp(Arg, "0"))
1598                         Config_Error_NaN(File, Line, Var);
1599                 return;
1600         }
1601         if (strcasecmp(Var, "MaxConnectionsIP") == 0) {
1602                 Conf_MaxConnectionsIP = atoi(Arg);
1603                 if (!Conf_MaxConnectionsIP && strcmp(Arg, "0"))
1604                         Config_Error_NaN(File, Line, Var);
1605                 return;
1606         }
1607         if (strcasecmp(Var, "MaxJoins") == 0) {
1608                 Conf_MaxJoins = atoi(Arg);
1609                 if (!Conf_MaxJoins && strcmp(Arg, "0"))
1610                         Config_Error_NaN(File, Line, Var);
1611                 return;
1612         }
1613         if (strcasecmp(Var, "MaxNickLength") == 0) {
1614                 Conf_MaxNickLength = Handle_MaxNickLength(Line, Arg);
1615                 return;
1616         }
1617         if (strcasecmp(Var, "MaxListSize") == 0) {
1618                 Conf_MaxListSize = atoi(Arg);
1619                 if (!Conf_MaxListSize && strcmp(Arg, "0"))
1620                         Config_Error_NaN(File, Line, Var);
1621                 return;
1622         }
1623         if (strcasecmp(Var, "PingTimeout") == 0) {
1624                 Conf_PingTimeout = atoi(Arg);
1625                 if (Conf_PingTimeout < 5) {
1626                         Config_Error(LOG_WARNING,
1627                                      "%s, line %d: Value of \"PingTimeout\" too low!",
1628                                      NGIRCd_ConfFile, Line);
1629                         Conf_PingTimeout = 5;
1630                 }
1631                 return;
1632         }
1633         if (strcasecmp(Var, "PongTimeout") == 0) {
1634                 Conf_PongTimeout = atoi(Arg);
1635                 if (Conf_PongTimeout < 5) {
1636                         Config_Error(LOG_WARNING,
1637                                      "%s, line %d: Value of \"PongTimeout\" too low!",
1638                                      NGIRCd_ConfFile, Line);
1639                         Conf_PongTimeout = 5;
1640                 }
1641                 return;
1642         }
1643
1644         Config_Error_Section(File, Line, Var, "Limits");
1645 }
1646
1647 /**
1648  * Handle variable in [Options] configuration section.
1649  *
1650  * @param Line  Line numer in configuration file.
1651  * @param Var   Variable name.
1652  * @param Arg   Variable argument.
1653  */
1654 static void
1655 Handle_OPTIONS(const char *File, int Line, char *Var, char *Arg)
1656 {
1657         size_t len;
1658         char *p;
1659
1660         assert(File != NULL);
1661         assert(Line > 0);
1662         assert(Var != NULL);
1663         assert(Arg != NULL);
1664
1665         if (strcasecmp(Var, "AllowedChannelTypes") == 0) {
1666                 p = Arg;
1667                 Conf_AllowedChannelTypes[0] = '\0';
1668                 while (*p) {
1669                         if (strchr(Conf_AllowedChannelTypes, *p)) {
1670                                 /* Prefix is already included; ignore it */
1671                                 p++;
1672                                 continue;
1673                         }
1674
1675                         if (strchr(CHANTYPES, *p)) {
1676                                 len = strlen(Conf_AllowedChannelTypes) + 1;
1677                                 assert(len < sizeof(Conf_AllowedChannelTypes));
1678                                 Conf_AllowedChannelTypes[len - 1] = *p;
1679                                 Conf_AllowedChannelTypes[len] = '\0';
1680                         } else {
1681                                 Config_Error(LOG_WARNING,
1682                                              "%s, line %d: Unknown channel prefix \"%c\" in \"AllowedChannelTypes\"!",
1683                                              File, Line, *p);
1684                         }
1685                         p++;
1686                 }
1687                 return;
1688         }
1689         if (strcasecmp(Var, "AllowRemoteOper") == 0) {
1690                 Conf_AllowRemoteOper = Check_ArgIsTrue(Arg);
1691                 return;
1692         }
1693         if (strcasecmp(Var, "ChrootDir") == 0) {
1694                 len = strlcpy(Conf_Chroot, Arg, sizeof(Conf_Chroot));
1695                 if (len >= sizeof(Conf_Chroot))
1696                         Config_Error_TooLong(File, Line, Var);
1697                 return;
1698         }
1699         if (strcasecmp(Var, "CloakHost") == 0) {
1700                 len = strlcpy(Conf_CloakHost, Arg, sizeof(Conf_CloakHost));
1701                 if (len >= sizeof(Conf_CloakHost))
1702                         Config_Error_TooLong(File, Line, Var);
1703                 return;
1704         }
1705         if (strcasecmp(Var, "CloakHostModeX") == 0) {
1706                 len = strlcpy(Conf_CloakHostModeX, Arg, sizeof(Conf_CloakHostModeX));
1707                 if (len >= sizeof(Conf_CloakHostModeX))
1708                         Config_Error_TooLong(File, Line, Var);
1709                 return;
1710         }
1711         if (strcasecmp(Var, "CloakHostSalt") == 0) {
1712                 len = strlcpy(Conf_CloakHostSalt, Arg, sizeof(Conf_CloakHostSalt));
1713                 if (len >= sizeof(Conf_CloakHostSalt))
1714                         Config_Error_TooLong(File, Line, Var);
1715                 return;
1716         }
1717         if (strcasecmp(Var, "CloakUserToNick") == 0) {
1718                 Conf_CloakUserToNick = Check_ArgIsTrue(Arg);
1719                 return;
1720         }
1721         if (strcasecmp(Var, "ConnectIPv6") == 0) {
1722                 Conf_ConnectIPv6 = Check_ArgIsTrue(Arg);
1723                 WarnIPv6(Line);
1724                 return;
1725         }
1726         if (strcasecmp(Var, "ConnectIPv4") == 0) {
1727                 Conf_ConnectIPv4 = Check_ArgIsTrue(Arg);
1728                 return;
1729         }
1730         if (strcasecmp(Var, "DefaultUserModes") == 0) {
1731                 p = Arg;
1732                 Conf_DefaultUserModes[0] = '\0';
1733                 while (*p) {
1734                         if (strchr(Conf_DefaultUserModes, *p)) {
1735                                 /* Mode is already included; ignore it */
1736                                 p++;
1737                                 continue;
1738                         }
1739
1740                         if (strchr(USERMODES, *p)) {
1741                                 len = strlen(Conf_DefaultUserModes) + 1;
1742                                 assert(len < sizeof(Conf_DefaultUserModes));
1743                                 Conf_DefaultUserModes[len - 1] = *p;
1744                                 Conf_DefaultUserModes[len] = '\0';
1745                         } else {
1746                                 Config_Error(LOG_WARNING,
1747                                              "%s, line %d: Unknown user mode \"%c\" in \"DefaultUserModes\"!",
1748                                              File, Line, *p);
1749                         }
1750                         p++;
1751                 }
1752                 return;
1753         }
1754         if (strcasecmp(Var, "DNS") == 0) {
1755                 Conf_DNS = Check_ArgIsTrue(Arg);
1756                 return;
1757         }
1758         if (strcasecmp(Var, "Ident") == 0) {
1759                 Conf_Ident = Check_ArgIsTrue(Arg);
1760                 WarnIdent(Line);
1761                 return;
1762         }
1763         if (strcasecmp(Var, "IncludeDir") == 0) {
1764                 if (Conf_IncludeDir[0]) {
1765                         Config_Error(LOG_ERR,
1766                                      "%s, line %d: Can't overwrite value of \"IncludeDir\" variable!",
1767                                      File, Line);
1768                         return;
1769                 }
1770                 len = strlcpy(Conf_IncludeDir, Arg, sizeof(Conf_IncludeDir));
1771                 if (len >= sizeof(Conf_IncludeDir))
1772                         Config_Error_TooLong(File, Line, Var);
1773                 return;
1774         }
1775         if (strcasecmp(Var, "MorePrivacy") == 0) {
1776                 Conf_MorePrivacy = Check_ArgIsTrue(Arg);
1777                 return;
1778         }
1779         if (strcasecmp(Var, "NoticeAuth") == 0) {
1780                 Conf_NoticeAuth = Check_ArgIsTrue(Arg);
1781                 return;
1782         }
1783         if (strcasecmp(Var, "OperCanUseMode") == 0) {
1784                 Conf_OperCanMode = Check_ArgIsTrue(Arg);
1785                 return;
1786         }
1787         if (strcasecmp(Var, "OperChanPAutoOp") == 0) {
1788                 Conf_OperChanPAutoOp = Check_ArgIsTrue(Arg);
1789                 return;
1790         }
1791         if (strcasecmp(Var, "OperServerMode") == 0) {
1792                 Conf_OperServerMode = Check_ArgIsTrue(Arg);
1793                 return;
1794         }
1795         if (strcasecmp(Var, "PAM") == 0) {
1796                 Conf_PAM = Check_ArgIsTrue(Arg);
1797                 WarnPAM(Line);
1798                 return;
1799         }
1800         if (strcasecmp(Var, "PAMIsOptional") == 0 ) {
1801                 Conf_PAMIsOptional = Check_ArgIsTrue(Arg);
1802                 return;
1803         }
1804         if (strcasecmp(Var, "PredefChannelsOnly") == 0) {
1805                 /*
1806                  * TODO: This section and support for "PredefChannelsOnly"
1807                  * could be removed starting with ngIRCd release 22 (one
1808                  * release after marking it "deprecated") ...
1809                  */
1810                 Config_Error(LOG_WARNING,
1811                              "%s, line %d (section \"Options\"): \"%s\" is deprecated, please use \"AllowedChannelTypes\"!",
1812                              File, Line, Var);
1813                 if (Check_ArgIsTrue(Arg))
1814                         Conf_AllowedChannelTypes[0] = '\0';
1815                 else
1816                         strlcpy(Conf_AllowedChannelTypes, CHANTYPES,
1817                                 sizeof(Conf_AllowedChannelTypes));
1818                 return;
1819         }
1820 #ifndef STRICT_RFC
1821         if (strcasecmp(Var, "RequireAuthPing") == 0) {
1822                 Conf_AuthPing = Check_ArgIsTrue(Arg);
1823                 return;
1824         }
1825 #endif
1826         if (strcasecmp(Var, "ScrubCTCP") == 0) {
1827                 Conf_ScrubCTCP = Check_ArgIsTrue(Arg);
1828                 return;
1829         }
1830 #ifdef SYSLOG
1831         if (strcasecmp(Var, "SyslogFacility") == 0) {
1832                 Conf_SyslogFacility = ngt_SyslogFacilityID(Arg,
1833                                                            Conf_SyslogFacility);
1834                 return;
1835         }
1836 #endif
1837         if (strcasecmp(Var, "WebircPassword") == 0) {
1838                 len = strlcpy(Conf_WebircPwd, Arg, sizeof(Conf_WebircPwd));
1839                 if (len >= sizeof(Conf_WebircPwd))
1840                         Config_Error_TooLong(File, Line, Var);
1841                 return;
1842         }
1843
1844         Config_Error_Section(File, Line, Var, "Options");
1845 }
1846
1847 #ifdef SSL_SUPPORT
1848
1849 /**
1850  * Handle variable in [SSL] configuration section.
1851  *
1852  * @param Line  Line numer in configuration file.
1853  * @param Var   Variable name.
1854  * @param Arg   Variable argument.
1855  */
1856 static void
1857 Handle_SSL(const char *File, int Line, char *Var, char *Arg)
1858 {
1859         assert(File != NULL);
1860         assert(Line > 0);
1861         assert(Var != NULL);
1862         assert(Arg != NULL);
1863
1864         if (strcasecmp(Var, "CertFile") == 0) {
1865                 assert(Conf_SSLOptions.CertFile == NULL);
1866                 Conf_SSLOptions.CertFile = strdup_warn(Arg);
1867                 return;
1868         }
1869         if (strcasecmp(Var, "DHFile") == 0) {
1870                 assert(Conf_SSLOptions.DHFile == NULL);
1871                 Conf_SSLOptions.DHFile = strdup_warn(Arg);
1872                 return;
1873         }
1874         if (strcasecmp(Var, "KeyFile") == 0) {
1875                 assert(Conf_SSLOptions.KeyFile == NULL);
1876                 Conf_SSLOptions.KeyFile = strdup_warn(Arg);
1877                 return;
1878         }
1879         if (strcasecmp(Var, "KeyFilePassword") == 0) {
1880                 assert(array_bytes(&Conf_SSLOptions.KeyFilePassword) == 0);
1881                 if (!array_copys(&Conf_SSLOptions.KeyFilePassword, Arg))
1882                         Config_Error(LOG_ERR,
1883                                      "%s, line %d (section \"SSL\"): Could not copy %s: %s!",
1884                                      File, Line, Var, strerror(errno));
1885                 return;
1886         }
1887         if (strcasecmp(Var, "Ports") == 0) {
1888                 ports_parse(&Conf_SSLOptions.ListenPorts, Line, Arg);
1889                 return;
1890         }
1891         if (strcasecmp(Var, "CipherList") == 0) {
1892                 assert(Conf_SSLOptions.CipherList == NULL);
1893                 Conf_SSLOptions.CipherList = strdup_warn(Arg);
1894                 return;
1895         }
1896
1897         Config_Error_Section(File, Line, Var, "SSL");
1898 }
1899
1900 #endif
1901
1902 /**
1903  * Handle variable in [Operator] configuration section.
1904  *
1905  * @param Line  Line numer in configuration file.
1906  * @param Var   Variable name.
1907  * @param Arg   Variable argument.
1908  */
1909 static void
1910 Handle_OPERATOR(const char *File, int Line, char *Var, char *Arg )
1911 {
1912         size_t len;
1913         struct Conf_Oper *op;
1914
1915         assert( File != NULL );
1916         assert( Line > 0 );
1917         assert( Var != NULL );
1918         assert( Arg != NULL );
1919
1920         op = array_get(&Conf_Opers, sizeof(*op),
1921                          array_length(&Conf_Opers, sizeof(*op)) - 1);
1922         if (!op)
1923                 return;
1924
1925         if (strcasecmp(Var, "Name") == 0) {
1926                 /* Name of IRC operator */
1927                 len = strlcpy(op->name, Arg, sizeof(op->name));
1928                 if (len >= sizeof(op->name))
1929                                 Config_Error_TooLong(File, Line, Var);
1930                 return;
1931         }
1932         if (strcasecmp(Var, "Password") == 0) {
1933                 /* Password of IRC operator */
1934                 len = strlcpy(op->pwd, Arg, sizeof(op->pwd));
1935                 if (len >= sizeof(op->pwd))
1936                                 Config_Error_TooLong(File, Line, Var);
1937                 return;
1938         }
1939         if (strcasecmp(Var, "Mask") == 0) {
1940                 if (op->mask)
1941                         return; /* Hostname already configured */
1942                 op->mask = strdup_warn( Arg );
1943                 return;
1944         }
1945
1946         Config_Error_Section(File, Line, Var, "Operator");
1947 }
1948
1949 /**
1950  * Handle variable in [Server] configuration section.
1951  *
1952  * @param Line  Line numer in configuration file.
1953  * @param Var   Variable name.
1954  * @param Arg   Variable argument.
1955  */
1956 static void
1957 Handle_SERVER(const char *File, int Line, char *Var, char *Arg )
1958 {
1959         long port;
1960         size_t len;
1961
1962         assert( File != NULL );
1963         assert( Line > 0 );
1964         assert( Var != NULL );
1965         assert( Arg != NULL );
1966
1967         /* Ignore server block if no space is left in server configuration structure */
1968         if( New_Server_Idx <= NONE ) return;
1969
1970         if( strcasecmp( Var, "Host" ) == 0 ) {
1971                 /* Hostname of the server */
1972                 len = strlcpy( New_Server.host, Arg, sizeof( New_Server.host ));
1973                 if (len >= sizeof( New_Server.host ))
1974                         Config_Error_TooLong(File, Line, Var);
1975                 return;
1976         }
1977         if( strcasecmp( Var, "Name" ) == 0 ) {
1978                 /* Name of the server ("Nick"/"ID") */
1979                 len = strlcpy( New_Server.name, Arg, sizeof( New_Server.name ));
1980                 if (len >= sizeof( New_Server.name ))
1981                         Config_Error_TooLong(File, Line, Var);
1982                 return;
1983         }
1984         if (strcasecmp(Var, "Bind") == 0) {
1985                 if (ng_ipaddr_init(&New_Server.bind_addr, Arg, 0))
1986                         return;
1987
1988                 Config_Error(LOG_ERR, "%s, line %d (section \"Server\"): Can't parse IP address \"%s\"",
1989                                 NGIRCd_ConfFile, Line, Arg);
1990                 return;
1991         }
1992         if( strcasecmp( Var, "MyPassword" ) == 0 ) {
1993                 /* Password of this server which is sent to the peer */
1994                 if (*Arg == ':') {
1995                         Config_Error(LOG_ERR,
1996                                 "%s, line %d (section \"Server\"): MyPassword must not start with ':'!",
1997                                                                                 NGIRCd_ConfFile, Line);
1998                 }
1999                 len = strlcpy( New_Server.pwd_in, Arg, sizeof( New_Server.pwd_in ));
2000                 if (len >= sizeof( New_Server.pwd_in ))
2001                         Config_Error_TooLong(File, Line, Var);
2002                 return;
2003         }
2004         if( strcasecmp( Var, "PeerPassword" ) == 0 ) {
2005                 /* Passwort of the peer which must be received */
2006                 len = strlcpy( New_Server.pwd_out, Arg, sizeof( New_Server.pwd_out ));
2007                 if (len >= sizeof( New_Server.pwd_out ))
2008                         Config_Error_TooLong(File, Line, Var);
2009                 return;
2010         }
2011         if( strcasecmp( Var, "Port" ) == 0 ) {
2012                 /* Port to which this server should connect */
2013                 port = atol( Arg );
2014                 if (port >= 0 && port < 0xFFFF)
2015                         New_Server.port = (UINT16)port;
2016                 else
2017                         Config_Error(LOG_ERR,
2018                                 "%s, line %d (section \"Server\"): Illegal port number %ld!",
2019                                 NGIRCd_ConfFile, Line, port );
2020                 return;
2021         }
2022 #ifdef SSL_SUPPORT
2023         if( strcasecmp( Var, "SSLConnect" ) == 0 ) {
2024                 New_Server.SSLConnect = Check_ArgIsTrue(Arg);
2025                 return;
2026         }
2027 #endif
2028         if( strcasecmp( Var, "Group" ) == 0 ) {
2029                 /* Server group */
2030                 New_Server.group = atoi( Arg );
2031                 if (!New_Server.group && strcmp(Arg, "0"))
2032                         Config_Error_NaN(File, Line, Var);
2033                 return;
2034         }
2035         if( strcasecmp( Var, "Passive" ) == 0 ) {
2036                 if (Check_ArgIsTrue(Arg))
2037                         New_Server.flags |= CONF_SFLAG_DISABLED;
2038                 return;
2039         }
2040         if (strcasecmp(Var, "ServiceMask") == 0) {
2041                 len = strlcpy(New_Server.svs_mask, ngt_LowerStr(Arg),
2042                               sizeof(New_Server.svs_mask));
2043                 if (len >= sizeof(New_Server.svs_mask))
2044                         Config_Error_TooLong(File, Line, Var);
2045                 return;
2046         }
2047
2048         Config_Error_Section(File, Line, Var, "Server");
2049 }
2050
2051 /**
2052  * Copy channel name into channel structure.
2053  *
2054  * If the channel name is not valid because of a missing prefix ('#', '&'),
2055  * a default prefix of '#' will be added.
2056  *
2057  * @param new_chan      New already allocated channel structure.
2058  * @param name          Name of the new channel.
2059  * @returns             true on success, false otherwise.
2060  */
2061 static bool
2062 Handle_Channelname(struct Conf_Channel *new_chan, const char *name)
2063 {
2064         size_t size = sizeof(new_chan->name);
2065         char *dest = new_chan->name;
2066
2067         if (!Channel_IsValidName(name)) {
2068                 /*
2069                  * maybe user forgot to add a '#'.
2070                  * This is only here for user convenience.
2071                  */
2072                 *dest = '#';
2073                 --size;
2074                 ++dest;
2075         }
2076         return size > strlcpy(dest, name, size);
2077 }
2078
2079 /**
2080  * Handle variable in [Channel] configuration section.
2081  *
2082  * @param Line  Line numer in configuration file.
2083  * @param Var   Variable name.
2084  * @param Arg   Variable argument.
2085  */
2086 static void
2087 Handle_CHANNEL(const char *File, int Line, char *Var, char *Arg)
2088 {
2089         size_t len;
2090         struct Conf_Channel *chan;
2091
2092         assert( File != NULL );
2093         assert( Line > 0 );
2094         assert( Var != NULL );
2095         assert( Arg != NULL );
2096
2097         chan = array_get(&Conf_Channels, sizeof(*chan),
2098                          array_length(&Conf_Channels, sizeof(*chan)) - 1);
2099         if (!chan)
2100                 return;
2101
2102         if (strcasecmp(Var, "Name") == 0) {
2103                 if (!Handle_Channelname(chan, Arg))
2104                         Config_Error_TooLong(File, Line, Var);
2105                 return;
2106         }
2107         if (strcasecmp(Var, "Modes") == 0) {
2108                 /* Initial modes */
2109                 len = strlcpy(chan->modes, Arg, sizeof(chan->modes));
2110                 if (len >= sizeof(chan->modes))
2111                         Config_Error_TooLong(File, Line, Var);
2112                 return;
2113         }
2114         if( strcasecmp( Var, "Topic" ) == 0 ) {
2115                 /* Initial topic */
2116                 len = strlcpy(chan->topic, Arg, sizeof(chan->topic));
2117                 if (len >= sizeof(chan->topic))
2118                         Config_Error_TooLong(File, Line, Var);
2119                 return;
2120         }
2121         if( strcasecmp( Var, "Key" ) == 0 ) {
2122                 /* Initial Channel Key (mode k) */
2123                 len = strlcpy(chan->key, Arg, sizeof(chan->key));
2124                 if (len >= sizeof(chan->key))
2125                         Config_Error_TooLong(File, Line, Var);
2126                 return;
2127         }
2128         if( strcasecmp( Var, "MaxUsers" ) == 0 ) {
2129                 /* maximum user limit, mode l */
2130                 chan->maxusers = (unsigned long) atol(Arg);
2131                 if (!chan->maxusers && strcmp(Arg, "0"))
2132                         Config_Error_NaN(File, Line, Var);
2133                 return;
2134         }
2135         if (strcasecmp(Var, "KeyFile") == 0) {
2136                 /* channel keys */
2137                 len = strlcpy(chan->keyfile, Arg, sizeof(chan->keyfile));
2138                 if (len >= sizeof(chan->keyfile))
2139                         Config_Error_TooLong(File, Line, Var);
2140                 return;
2141         }
2142
2143         Config_Error_Section(File, Line, Var, "Channel");
2144 }
2145
2146 /**
2147  * Validate server configuration.
2148  *
2149  * Please note that this function uses exit(1) on fatal errors and therefore
2150  * can result in ngIRCd terminating!
2151  *
2152  * @param Configtest    true if the daemon has been called with "--configtest".
2153  * @param Rehash        true if re-reading configuration on runtime.
2154  * @returns             true if configuration is valid.
2155  */
2156 static bool
2157 Validate_Config(bool Configtest, bool Rehash)
2158 {
2159         /* Validate configuration settings. */
2160
2161 #ifdef DEBUG
2162         int i, servers, servers_once;
2163 #endif
2164         bool config_valid = true;
2165         char *ptr;
2166
2167         /* Emit a warning when the config file is not a full path name */
2168         if (NGIRCd_ConfFile[0] && NGIRCd_ConfFile[0] != '/') {
2169                 Config_Error(LOG_WARNING,
2170                         "Not specifying a full path name to \"%s\" can cause problems when rehashing the server!",
2171                         NGIRCd_ConfFile);
2172         }
2173
2174         /* Validate configured server name, see RFC 2812 section 2.3.1 */
2175         ptr = Conf_ServerName;
2176         do {
2177                 if (*ptr >= 'a' && *ptr <= 'z') continue;
2178                 if (*ptr >= 'A' && *ptr <= 'Z') continue;
2179                 if (*ptr >= '0' && *ptr <= '9') continue;
2180                 if (ptr > Conf_ServerName) {
2181                         if (*ptr == '.' || *ptr == '-')
2182                                 continue;
2183                 }
2184                 Conf_ServerName[0] = '\0';
2185                 break;
2186         } while (*(++ptr));
2187
2188         if (!Conf_ServerName[0]) {
2189                 /* No server name configured! */
2190                 config_valid = false;
2191                 Config_Error(LOG_ALERT,
2192                              "No (valid) server name configured in \"%s\" (section 'Global': 'Name')!",
2193                              NGIRCd_ConfFile);
2194                 if (!Configtest && !Rehash) {
2195                         Config_Error(LOG_ALERT,
2196                                      "%s exiting due to fatal errors!",
2197                                      PACKAGE_NAME);
2198                         exit(1);
2199                 }
2200         }
2201
2202         if (Conf_ServerName[0] && !strchr(Conf_ServerName, '.')) {
2203                 /* No dot in server name! */
2204                 config_valid = false;
2205                 Config_Error(LOG_ALERT,
2206                              "Invalid server name configured in \"%s\" (section 'Global': 'Name'): Dot missing!",
2207                              NGIRCd_ConfFile);
2208                 if (!Configtest) {
2209                         Config_Error(LOG_ALERT,
2210                                      "%s exiting due to fatal errors!",
2211                                      PACKAGE_NAME);
2212                         exit(1);
2213                 }
2214         }
2215
2216 #ifdef STRICT_RFC
2217         if (!Conf_ServerAdminMail[0]) {
2218                 /* No administrative contact configured! */
2219                 config_valid = false;
2220                 Config_Error(LOG_ALERT,
2221                              "No administrator email address configured in \"%s\" ('AdminEMail')!",
2222                              NGIRCd_ConfFile);
2223                 if (!Configtest) {
2224                         Config_Error(LOG_ALERT,
2225                                      "%s exiting due to fatal errors!",
2226                                      PACKAGE_NAME);
2227                         exit(1);
2228                 }
2229         }
2230 #endif
2231
2232         if (!Conf_ServerAdmin1[0] && !Conf_ServerAdmin2[0]
2233             && !Conf_ServerAdminMail[0]) {
2234                 /* No administrative information configured! */
2235                 Config_Error(LOG_WARNING,
2236                              "No administrative information configured but required by RFC!");
2237         }
2238
2239 #ifdef PAM
2240         if (Conf_ServerPwd[0])
2241                 Config_Error(LOG_ERR,
2242                              "This server uses PAM, \"Password\" in [Global] section will be ignored!");
2243 #endif
2244
2245 #ifdef DEBUG
2246         servers = servers_once = 0;
2247         for (i = 0; i < MAX_SERVERS; i++) {
2248                 if (Conf_Server[i].name[0]) {
2249                         servers++;
2250                         if (Conf_Server[i].flags & CONF_SFLAG_ONCE)
2251                                 servers_once++;
2252                 }
2253         }
2254         Log(LOG_DEBUG,
2255             "Configuration: Operators=%ld, Servers=%d[%d], Channels=%ld",
2256             array_length(&Conf_Opers, sizeof(struct Conf_Oper)),
2257             servers, servers_once,
2258             array_length(&Conf_Channels, sizeof(struct Conf_Channel)));
2259 #endif
2260
2261         return config_valid;
2262 }
2263
2264 /**
2265  * Output "line too long" warning.
2266  *
2267  * @param Line  Line number in configuration file.
2268  * @param Item  Affected variable name.
2269  */
2270 static void
2271 Config_Error_TooLong(const char *File, const int Line, const char *Item)
2272 {
2273         Config_Error(LOG_WARNING, "%s, line %d: Value of \"%s\" too long!",
2274                      File, Line, Item );
2275 }
2276
2277 /**
2278  * Output "unknown variable" warning.
2279  *
2280  * @param Line          Line number in configuration file.
2281  * @param Item          Affected variable name.
2282  * @param Section       Section name.
2283  */
2284 static void
2285 Config_Error_Section(const char *File, const int Line, const char *Item,
2286                      const char *Section)
2287 {
2288         Config_Error(LOG_ERR, "%s, line %d (section \"%s\"): Unknown variable \"%s\"!",
2289                      File, Line, Section, Item);
2290 }
2291
2292 /**
2293  * Output "not a number" warning.
2294  *
2295  * @param Line  Line number in configuration file.
2296  * @param Item  Affected variable name.
2297  */
2298 static void
2299 Config_Error_NaN(const char *File, const int Line, const char *Item )
2300 {
2301         Config_Error(LOG_WARNING, "%s, line %d: Value of \"%s\" is not a number!",
2302                      File, Line, Item );
2303 }
2304
2305 /**
2306  * Output configuration error to console and/or logfile.
2307  *
2308  * On runtime, the normal log functions of the daemon are used. But when
2309  * testing the configuration ("--configtest"), all messages go directly
2310  * to the console.
2311  *
2312  * @param Level         Severity level of the message.
2313  * @param Format        Format string; see printf() function.
2314  */
2315 #ifdef PROTOTYPES
2316 static void Config_Error( const int Level, const char *Format, ... )
2317 #else
2318 static void Config_Error( Level, Format, va_alist )
2319 const int Level;
2320 const char *Format;
2321 va_dcl
2322 #endif
2323 {
2324         char msg[MAX_LOG_MSG_LEN];
2325         va_list ap;
2326
2327         assert( Format != NULL );
2328
2329 #ifdef PROTOTYPES
2330         va_start( ap, Format );
2331 #else
2332         va_start( ap );
2333 #endif
2334         vsnprintf( msg, MAX_LOG_MSG_LEN, Format, ap );
2335         va_end( ap );
2336
2337         if (!Use_Log) {
2338                 if (Level <= LOG_WARNING)
2339                         printf(" - %s\n", msg);
2340                 else
2341                         puts(msg);
2342         } else
2343                 Log(Level, "%s", msg);
2344 }
2345
2346 #ifdef DEBUG
2347
2348 /**
2349  * Dump internal state of the "configuration module".
2350  */
2351 GLOBAL void
2352 Conf_DebugDump(void)
2353 {
2354         int i;
2355
2356         Log(LOG_DEBUG, "Configured servers:");
2357         for (i = 0; i < MAX_SERVERS; i++) {
2358                 if (! Conf_Server[i].name[0])
2359                         continue;
2360                 Log(LOG_DEBUG,
2361                     " - %s: %s:%d, last=%ld, group=%d, flags=%d, conn=%d",
2362                     Conf_Server[i].name, Conf_Server[i].host,
2363                     Conf_Server[i].port, Conf_Server[i].lasttry,
2364                     Conf_Server[i].group, Conf_Server[i].flags,
2365                     Conf_Server[i].conn_id);
2366         }
2367 }
2368
2369 #endif
2370
2371 /**
2372  * Initialize server configuration structure to default values.
2373  *
2374  * @param Server        Pointer to server structure to initialize.
2375  */
2376 static void
2377 Init_Server_Struct( CONF_SERVER *Server )
2378 {
2379         assert( Server != NULL );
2380
2381         memset( Server, 0, sizeof (CONF_SERVER) );
2382
2383         Server->group = NONE;
2384         Server->lasttry = time( NULL ) - Conf_ConnectRetry + STARTUP_DELAY;
2385
2386         if( NGIRCd_Passive ) Server->flags = CONF_SFLAG_DISABLED;
2387
2388         Proc_InitStruct(&Server->res_stat);
2389         Server->conn_id = NONE;
2390         memset(&Server->bind_addr, 0, sizeof(Server->bind_addr));
2391 }
2392
2393 /* -eof- */