1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
|
#!/bin/bash
# -*- coding: utf-8 -*-
###########################################################################
# #
# envbot - an IRC bot in bash #
# Copyright (C) 2007-2008 Arvid Norlander #
# #
# This program is free software: you can redistribute it and/or modify #
# it under the terms of the GNU General Public License as published by #
# the Free Software Foundation, either version 3 of the License, or #
# (at your option) any later version. #
# #
# This program is distributed in the hope that it will be useful, #
# but WITHOUT ANY WARRANTY; without even the implied warranty of #
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the #
# GNU General Public License for more details. #
# #
# You should have received a copy of the GNU General Public License #
# along with this program. If not, see <http://www.gnu.org/licenses/>. #
# #
###########################################################################
#---------------------------------------------------------------------
## A transport module using openssl s_client
#---------------------------------------------------------------------
# A list of features supported
# These are used: ipv4, ipv6, ssl, nossl, bind
transport_supports="ipv4 ipv6 ssl"
# Check if all the stuff needed to use this transport is available
# Return status
# 0 yes
# 1 no
transport_check_support() {
hash openssl >/dev/null 2>&1 || {
log_fatal "Can't find openssl (needed for this transport)"
return 1
}
hash mkfifo >/dev/null 2>&1 || {
log_fatal "Can't find mkfifo (needed for this transport)"
return 1
}
return 0
}
# Try to connect
# Parameters
# $1 hostname/IP
# $2 port
# $3 If 1 use SSL. If the module does not support it, just ignore it.
# $4 IP to bind to if any and if supported
# If the module does not support it, just ignore it.
# Return status
# 0 if Ok
# 1 if connection failed
transport_connect() {
transport_tmp_dir_file="$(mktemp -dt envbot.openssl.XXXXXXXXXX)" || return 1
# To keep this simple, from client perspective.
# We WRITE to out and READ from in
mkfifo "${transport_tmp_dir_file}/in"
mkfifo "${transport_tmp_dir_file}/out"
exec 3<&-
exec 4<&-
local myargs
if [[ $config_server_ssl_accept_invalid -eq 1 ]]; then
myargs="-verify 0"
else
myargs="-verify 10"
fi
[[ $config_server_ssl_verbose -ne 1 ]] && myargs+=" -quiet"
openssl s_client -connect "$1:$2" $myargs < "${transport_tmp_dir_file}/out" > "${transport_tmp_dir_file}/in" &
transport_pid="$!"
echo "$transport_pid" >> "${transport_tmp_dir_file}/pid"
exec 3>"${transport_tmp_dir_file}/out"
exec 4<"${transport_tmp_dir_file}/in"
# To be able to wait for error.
sleep 2
kill -0 "$transport_pid" >/dev/null 2>&1 || return 1
time_get_current 'transport_lastvalidtime'
}
# Called to close connection
# No parameters, no return code check
transport_disconnect() {
# It might not be running.
kill "$(< "${transport_tmp_dir_file}/pid")" >/dev/null 2>&1
rm -rf "${transport_tmp_dir_file}"
exec 3<&-
exec 4<&-
# To force code to consider this disconnected.
transport_lastvalidtime=0
}
# Return status
# 0 If connection is still alive
# 1 If it isn't.
transport_alive() {
kill -0 "$transport_pid" >/dev/null 2>&1 || return 1
local newtime=
time_get_current 'newtime'
(( newtime - transport_lastvalidtime > 300 )) && return 1
return 0
}
# Return a line in the variable line.
# Return status
# 0 If Ok
# 1 If connection failed
transport_read_line() {
read -ru 4 line
# Fail.
if [[ $? -ne 0 ]]; then
return 1
else
time_get_current 'transport_lastvalidtime'
fi
line=${line//$'\r'/}
}
# Send a line
# Parameters
# $* send this
# Return code not checked.
transport_write_line() {
kill -0 "$transport_pid" >/dev/null 2>&1 && echo "$*" >&3
}
|