Mercurial > hg > nginx-mail
annotate src/mail/ngx_mail_pop3_handler.c @ 665:0b460e61bdcd default tip
Merge with nginx 1.0.0.
| author | Maxim Dounin <mdounin@mdounin.ru> |
|---|---|
| date | Mon, 25 Apr 2011 04:22:17 +0400 |
| parents | 5938746e70c2 8246d8a2c2be |
| children |
| rev | line source |
|---|---|
| 336 | 1 |
| 2 /* | |
| 3 * Copyright (C) Igor Sysoev | |
| 4 */ | |
| 5 | |
| 6 | |
| 7 #include <ngx_config.h> | |
| 8 #include <ngx_core.h> | |
| 9 #include <ngx_event.h> | |
| 10 #include <ngx_mail.h> | |
| 11 #include <ngx_mail_pop3_module.h> | |
| 12 | |
| 13 | |
| 14 static ngx_int_t ngx_mail_pop3_user(ngx_mail_session_t *s, ngx_connection_t *c); | |
| 15 static ngx_int_t ngx_mail_pop3_pass(ngx_mail_session_t *s, ngx_connection_t *c); | |
| 16 static ngx_int_t ngx_mail_pop3_capa(ngx_mail_session_t *s, ngx_connection_t *c, | |
| 17 ngx_int_t stls); | |
| 18 static ngx_int_t ngx_mail_pop3_stls(ngx_mail_session_t *s, ngx_connection_t *c); | |
| 19 static ngx_int_t ngx_mail_pop3_apop(ngx_mail_session_t *s, ngx_connection_t *c); | |
| 20 static ngx_int_t ngx_mail_pop3_auth(ngx_mail_session_t *s, ngx_connection_t *c); | |
| 21 | |
| 22 | |
| 23 static u_char pop3_greeting[] = "+OK POP3 ready" CRLF; | |
| 24 static u_char pop3_ok[] = "+OK" CRLF; | |
| 25 static u_char pop3_next[] = "+ " CRLF; | |
| 26 static u_char pop3_username[] = "+ VXNlcm5hbWU6" CRLF; | |
| 27 static u_char pop3_password[] = "+ UGFzc3dvcmQ6" CRLF; | |
| 28 static u_char pop3_invalid_command[] = "-ERR invalid command" CRLF; | |
| 29 | |
| 30 | |
| 31 void | |
| 32 ngx_mail_pop3_init_session(ngx_mail_session_t *s, ngx_connection_t *c) | |
| 33 { | |
| 34 u_char *p; | |
| 35 ngx_mail_core_srv_conf_t *cscf; | |
| 36 ngx_mail_pop3_srv_conf_t *pscf; | |
| 37 | |
| 38 pscf = ngx_mail_get_module_srv_conf(s, ngx_mail_pop3_module); | |
| 39 cscf = ngx_mail_get_module_srv_conf(s, ngx_mail_core_module); | |
| 40 | |
| 41 if (pscf->auth_methods | |
| 42 & (NGX_MAIL_AUTH_APOP_ENABLED|NGX_MAIL_AUTH_CRAM_MD5_ENABLED)) | |
| 43 { | |
| 44 if (ngx_mail_salt(s, c, cscf) != NGX_OK) { | |
| 45 ngx_mail_session_internal_server_error(s); | |
| 46 return; | |
| 47 } | |
| 48 | |
| 382 | 49 s->out.data = ngx_pnalloc(c->pool, sizeof(pop3_greeting) + s->salt.len); |
| 336 | 50 if (s->out.data == NULL) { |
| 51 ngx_mail_session_internal_server_error(s); | |
| 52 return; | |
| 53 } | |
| 54 | |
| 55 p = ngx_cpymem(s->out.data, pop3_greeting, sizeof(pop3_greeting) - 3); | |
| 56 *p++ = ' '; | |
| 57 p = ngx_cpymem(p, s->salt.data, s->salt.len); | |
| 58 | |
| 59 s->out.len = p - s->out.data; | |
| 60 | |
| 61 } else { | |
| 613 | 62 ngx_str_set(&s->out, pop3_greeting); |
| 336 | 63 } |
| 64 | |
| 65 c->read->handler = ngx_mail_pop3_init_protocol; | |
| 66 | |
| 67 ngx_add_timer(c->read, cscf->timeout); | |
| 68 | |
| 459 | 69 if (ngx_handle_read_event(c->read, 0) != NGX_OK) { |
| 336 | 70 ngx_mail_close_connection(c); |
| 71 } | |
| 72 | |
| 73 ngx_mail_send(c->write); | |
| 74 } | |
| 75 | |
| 76 | |
| 77 void | |
| 78 ngx_mail_pop3_init_protocol(ngx_event_t *rev) | |
| 79 { | |
| 80 ngx_connection_t *c; | |
| 81 ngx_mail_session_t *s; | |
| 82 | |
| 83 c = rev->data; | |
| 84 | |
| 85 c->log->action = "in auth state"; | |
| 86 | |
| 87 if (rev->timedout) { | |
| 88 ngx_log_error(NGX_LOG_INFO, c->log, NGX_ETIMEDOUT, "client timed out"); | |
| 89 c->timedout = 1; | |
| 90 ngx_mail_close_connection(c); | |
| 91 return; | |
| 92 } | |
| 93 | |
| 94 s = c->data; | |
| 95 | |
| 96 if (s->buffer == NULL) { | |
| 97 if (ngx_array_init(&s->args, c->pool, 2, sizeof(ngx_str_t)) | |
| 98 == NGX_ERROR) | |
| 99 { | |
| 100 ngx_mail_session_internal_server_error(s); | |
| 101 return; | |
| 102 } | |
| 103 | |
| 104 s->buffer = ngx_create_temp_buf(c->pool, 128); | |
| 105 if (s->buffer == NULL) { | |
| 106 ngx_mail_session_internal_server_error(s); | |
| 107 return; | |
| 108 } | |
| 109 } | |
| 110 | |
| 111 s->mail_state = ngx_pop3_start; | |
| 112 c->read->handler = ngx_mail_pop3_auth_state; | |
| 113 | |
| 114 ngx_mail_pop3_auth_state(rev); | |
| 115 } | |
| 116 | |
| 117 | |
| 118 void | |
| 119 ngx_mail_pop3_auth_state(ngx_event_t *rev) | |
| 120 { | |
| 121 ngx_int_t rc; | |
| 122 ngx_connection_t *c; | |
| 123 ngx_mail_session_t *s; | |
| 124 | |
| 125 c = rev->data; | |
| 126 s = c->data; | |
| 127 | |
| 128 ngx_log_debug0(NGX_LOG_DEBUG_MAIL, c->log, 0, "pop3 auth state"); | |
| 129 | |
| 130 if (rev->timedout) { | |
| 131 ngx_log_error(NGX_LOG_INFO, c->log, NGX_ETIMEDOUT, "client timed out"); | |
| 132 c->timedout = 1; | |
| 133 ngx_mail_close_connection(c); | |
| 134 return; | |
| 135 } | |
| 136 | |
| 137 if (s->out.len) { | |
| 138 ngx_log_debug0(NGX_LOG_DEBUG_MAIL, c->log, 0, "pop3 send handler busy"); | |
| 139 s->blocked = 1; | |
| 140 return; | |
| 141 } | |
| 142 | |
| 143 s->blocked = 0; | |
| 144 | |
| 145 rc = ngx_mail_read_command(s, c); | |
| 146 | |
| 147 if (rc == NGX_AGAIN || rc == NGX_ERROR) { | |
| 148 return; | |
| 149 } | |
| 150 | |
| 613 | 151 ngx_str_set(&s->out, pop3_ok); |
| 336 | 152 |
| 153 if (rc == NGX_OK) { | |
| 154 switch (s->mail_state) { | |
| 155 | |
| 156 case ngx_pop3_start: | |
| 157 | |
| 158 switch (s->command) { | |
| 159 | |
| 160 case NGX_POP3_USER: | |
| 161 rc = ngx_mail_pop3_user(s, c); | |
| 162 break; | |
| 163 | |
| 164 case NGX_POP3_CAPA: | |
| 165 rc = ngx_mail_pop3_capa(s, c, 1); | |
| 166 break; | |
| 167 | |
| 168 case NGX_POP3_APOP: | |
| 169 rc = ngx_mail_pop3_apop(s, c); | |
| 170 break; | |
| 171 | |
| 172 case NGX_POP3_AUTH: | |
| 173 rc = ngx_mail_pop3_auth(s, c); | |
| 174 break; | |
| 175 | |
| 176 case NGX_POP3_QUIT: | |
| 177 s->quit = 1; | |
| 178 break; | |
| 179 | |
| 180 case NGX_POP3_NOOP: | |
| 181 break; | |
| 182 | |
| 183 case NGX_POP3_STLS: | |
| 184 rc = ngx_mail_pop3_stls(s, c); | |
| 185 break; | |
| 186 | |
| 187 default: | |
| 188 rc = NGX_MAIL_PARSE_INVALID_COMMAND; | |
| 189 break; | |
| 190 } | |
| 191 | |
| 192 break; | |
| 193 | |
| 194 case ngx_pop3_user: | |
| 195 | |
| 196 switch (s->command) { | |
| 197 | |
| 198 case NGX_POP3_PASS: | |
| 199 rc = ngx_mail_pop3_pass(s, c); | |
| 200 break; | |
| 201 | |
| 202 case NGX_POP3_CAPA: | |
| 203 rc = ngx_mail_pop3_capa(s, c, 0); | |
| 204 break; | |
| 205 | |
| 206 case NGX_POP3_QUIT: | |
| 207 s->quit = 1; | |
| 208 break; | |
| 209 | |
| 210 case NGX_POP3_NOOP: | |
| 211 break; | |
| 212 | |
| 213 default: | |
| 214 rc = NGX_MAIL_PARSE_INVALID_COMMAND; | |
| 215 break; | |
| 216 } | |
| 217 | |
| 218 break; | |
| 219 | |
| 220 /* suppress warinings */ | |
| 221 case ngx_pop3_passwd: | |
| 222 break; | |
| 223 | |
| 224 case ngx_pop3_auth_login_username: | |
|
468
2580fe1c5a9a
Mail: support for smtp auth login with username.
Maxim Dounin <mdounin@mdounin.ru>
parents:
459
diff
changeset
|
225 rc = ngx_mail_auth_login_username(s, c, 0); |
| 336 | 226 |
| 613 | 227 ngx_str_set(&s->out, pop3_password); |
| 336 | 228 s->mail_state = ngx_pop3_auth_login_password; |
| 229 break; | |
| 230 | |
| 231 case ngx_pop3_auth_login_password: | |
| 232 rc = ngx_mail_auth_login_password(s, c); | |
| 233 break; | |
| 234 | |
| 235 case ngx_pop3_auth_plain: | |
| 236 rc = ngx_mail_auth_plain(s, c, 0); | |
| 237 break; | |
| 238 | |
| 239 case ngx_pop3_auth_cram_md5: | |
| 240 rc = ngx_mail_auth_cram_md5(s, c); | |
| 241 break; | |
| 242 } | |
| 243 } | |
| 244 | |
| 245 switch (rc) { | |
| 246 | |
| 247 case NGX_DONE: | |
| 248 ngx_mail_auth(s, c); | |
| 249 return; | |
| 250 | |
| 251 case NGX_ERROR: | |
| 252 ngx_mail_session_internal_server_error(s); | |
| 253 return; | |
| 254 | |
| 255 case NGX_MAIL_PARSE_INVALID_COMMAND: | |
| 256 s->mail_state = ngx_pop3_start; | |
| 257 s->state = 0; | |
| 258 | |
| 613 | 259 ngx_str_set(&s->out, pop3_invalid_command); |
| 336 | 260 |
| 261 /* fall through */ | |
| 262 | |
| 263 case NGX_OK: | |
| 264 | |
| 265 s->args.nelts = 0; | |
| 266 s->buffer->pos = s->buffer->start; | |
| 267 s->buffer->last = s->buffer->start; | |
| 268 | |
| 269 if (s->state) { | |
| 270 s->arg_start = s->buffer->start; | |
| 271 } | |
| 272 | |
| 273 ngx_mail_send(c->write); | |
| 274 } | |
| 275 } | |
| 276 | |
| 277 static ngx_int_t | |
| 278 ngx_mail_pop3_user(ngx_mail_session_t *s, ngx_connection_t *c) | |
| 279 { | |
| 356 | 280 ngx_str_t *arg; |
| 336 | 281 |
| 282 #if (NGX_MAIL_SSL) | |
| 283 if (ngx_mail_starttls_only(s, c)) { | |
| 284 return NGX_MAIL_PARSE_INVALID_COMMAND; | |
| 285 } | |
| 286 #endif | |
| 287 | |
| 288 if (s->args.nelts != 1) { | |
| 289 return NGX_MAIL_PARSE_INVALID_COMMAND; | |
| 290 } | |
| 291 | |
| 292 arg = s->args.elts; | |
| 293 s->login.len = arg[0].len; | |
| 382 | 294 s->login.data = ngx_pnalloc(c->pool, s->login.len); |
| 336 | 295 if (s->login.data == NULL) { |
| 296 return NGX_ERROR; | |
| 297 } | |
| 298 | |
| 299 ngx_memcpy(s->login.data, arg[0].data, s->login.len); | |
| 300 | |
| 301 ngx_log_debug1(NGX_LOG_DEBUG_MAIL, c->log, 0, | |
| 302 "pop3 login: \"%V\"", &s->login); | |
| 303 | |
| 304 s->mail_state = ngx_pop3_user; | |
| 305 | |
| 306 return NGX_OK; | |
| 307 } | |
| 308 | |
| 309 | |
| 310 static ngx_int_t | |
| 311 ngx_mail_pop3_pass(ngx_mail_session_t *s, ngx_connection_t *c) | |
| 312 { | |
| 313 ngx_str_t *arg; | |
| 314 | |
| 315 if (s->args.nelts != 1) { | |
| 316 return NGX_MAIL_PARSE_INVALID_COMMAND; | |
| 317 } | |
| 318 | |
| 319 arg = s->args.elts; | |
| 320 s->passwd.len = arg[0].len; | |
| 382 | 321 s->passwd.data = ngx_pnalloc(c->pool, s->passwd.len); |
| 336 | 322 if (s->passwd.data == NULL) { |
| 323 return NGX_ERROR; | |
| 324 } | |
| 325 | |
| 326 ngx_memcpy(s->passwd.data, arg[0].data, s->passwd.len); | |
| 327 | |
| 328 #if (NGX_DEBUG_MAIL_PASSWD) | |
| 329 ngx_log_debug1(NGX_LOG_DEBUG_MAIL, c->log, 0, | |
| 330 "pop3 passwd: \"%V\"", &s->passwd); | |
| 331 #endif | |
| 332 | |
| 333 return NGX_DONE; | |
| 334 } | |
| 335 | |
| 336 | |
| 337 static ngx_int_t | |
| 338 ngx_mail_pop3_capa(ngx_mail_session_t *s, ngx_connection_t *c, ngx_int_t stls) | |
| 339 { | |
| 340 ngx_mail_pop3_srv_conf_t *pscf; | |
| 341 | |
| 342 pscf = ngx_mail_get_module_srv_conf(s, ngx_mail_pop3_module); | |
| 343 | |
| 344 #if (NGX_MAIL_SSL) | |
| 345 | |
| 346 if (stls && c->ssl == NULL) { | |
| 356 | 347 ngx_mail_ssl_conf_t *sslcf; |
| 348 | |
| 336 | 349 sslcf = ngx_mail_get_module_srv_conf(s, ngx_mail_ssl_module); |
| 350 | |
| 351 if (sslcf->starttls == NGX_MAIL_STARTTLS_ON) { | |
| 352 s->out = pscf->starttls_capability; | |
| 353 return NGX_OK; | |
| 354 } | |
| 355 | |
| 356 if (sslcf->starttls == NGX_MAIL_STARTTLS_ONLY) { | |
| 357 s->out = pscf->starttls_only_capability; | |
| 358 return NGX_OK; | |
| 359 } | |
| 360 } | |
| 361 | |
| 362 #endif | |
| 363 | |
| 364 s->out = pscf->capability; | |
| 365 return NGX_OK; | |
| 366 } | |
| 367 | |
| 368 | |
| 369 static ngx_int_t | |
| 370 ngx_mail_pop3_stls(ngx_mail_session_t *s, ngx_connection_t *c) | |
| 371 { | |
| 372 #if (NGX_MAIL_SSL) | |
| 373 ngx_mail_ssl_conf_t *sslcf; | |
| 374 | |
| 375 if (c->ssl == NULL) { | |
| 376 sslcf = ngx_mail_get_module_srv_conf(s, ngx_mail_ssl_module); | |
| 377 if (sslcf->starttls) { | |
| 378 c->read->handler = ngx_mail_starttls_handler; | |
| 379 return NGX_OK; | |
| 380 } | |
| 381 } | |
| 382 | |
| 383 #endif | |
| 384 | |
| 385 return NGX_MAIL_PARSE_INVALID_COMMAND; | |
| 386 } | |
| 387 | |
| 388 | |
| 389 static ngx_int_t | |
| 390 ngx_mail_pop3_apop(ngx_mail_session_t *s, ngx_connection_t *c) | |
| 391 { | |
| 392 ngx_str_t *arg; | |
| 393 ngx_mail_pop3_srv_conf_t *pscf; | |
| 394 | |
| 395 #if (NGX_MAIL_SSL) | |
| 396 if (ngx_mail_starttls_only(s, c)) { | |
| 397 return NGX_MAIL_PARSE_INVALID_COMMAND; | |
| 398 } | |
| 399 #endif | |
| 400 | |
| 401 if (s->args.nelts != 2) { | |
| 402 return NGX_MAIL_PARSE_INVALID_COMMAND; | |
| 403 } | |
| 404 | |
| 405 pscf = ngx_mail_get_module_srv_conf(s, ngx_mail_pop3_module); | |
| 406 | |
| 407 if (!(pscf->auth_methods & NGX_MAIL_AUTH_APOP_ENABLED)) { | |
| 408 return NGX_MAIL_PARSE_INVALID_COMMAND; | |
| 409 } | |
| 410 | |
| 411 arg = s->args.elts; | |
| 412 | |
| 413 s->login.len = arg[0].len; | |
| 382 | 414 s->login.data = ngx_pnalloc(c->pool, s->login.len); |
| 336 | 415 if (s->login.data == NULL) { |
| 416 return NGX_ERROR; | |
| 417 } | |
| 418 | |
| 419 ngx_memcpy(s->login.data, arg[0].data, s->login.len); | |
| 420 | |
| 421 s->passwd.len = arg[1].len; | |
| 382 | 422 s->passwd.data = ngx_pnalloc(c->pool, s->passwd.len); |
| 336 | 423 if (s->passwd.data == NULL) { |
| 424 return NGX_ERROR; | |
| 425 } | |
| 426 | |
| 427 ngx_memcpy(s->passwd.data, arg[1].data, s->passwd.len); | |
| 428 | |
| 429 ngx_log_debug2(NGX_LOG_DEBUG_MAIL, c->log, 0, | |
| 430 "pop3 apop: \"%V\" \"%V\"", &s->login, &s->passwd); | |
| 431 | |
| 432 s->auth_method = NGX_MAIL_AUTH_APOP; | |
| 433 | |
| 434 return NGX_DONE; | |
| 435 } | |
| 436 | |
| 437 | |
| 438 static ngx_int_t | |
| 439 ngx_mail_pop3_auth(ngx_mail_session_t *s, ngx_connection_t *c) | |
| 440 { | |
| 441 ngx_int_t rc; | |
| 442 ngx_mail_pop3_srv_conf_t *pscf; | |
| 443 | |
| 444 #if (NGX_MAIL_SSL) | |
| 445 if (ngx_mail_starttls_only(s, c)) { | |
| 446 return NGX_MAIL_PARSE_INVALID_COMMAND; | |
| 447 } | |
| 448 #endif | |
| 449 | |
| 450 pscf = ngx_mail_get_module_srv_conf(s, ngx_mail_pop3_module); | |
| 451 | |
| 452 if (s->args.nelts == 0) { | |
| 453 s->out = pscf->auth_capability; | |
| 454 s->state = 0; | |
| 455 | |
| 456 return NGX_OK; | |
| 457 } | |
| 458 | |
|
571
5938746e70c2
Mail: get rid of ugly protocol check in ngx_mail_auth_parse().
Maxim Dounin <mdounin@mdounin.ru>
parents:
468
diff
changeset
|
459 rc = ngx_mail_auth_parse(s, c, 0); |
| 336 | 460 |
| 461 switch (rc) { | |
| 462 | |
| 463 case NGX_MAIL_AUTH_LOGIN: | |
| 464 | |
| 613 | 465 ngx_str_set(&s->out, pop3_username); |
| 336 | 466 s->mail_state = ngx_pop3_auth_login_username; |
| 467 | |
| 468 return NGX_OK; | |
| 469 | |
|
468
2580fe1c5a9a
Mail: support for smtp auth login with username.
Maxim Dounin <mdounin@mdounin.ru>
parents:
459
diff
changeset
|
470 case NGX_MAIL_AUTH_LOGIN_USERNAME: |
|
2580fe1c5a9a
Mail: support for smtp auth login with username.
Maxim Dounin <mdounin@mdounin.ru>
parents:
459
diff
changeset
|
471 |
| 613 | 472 ngx_str_set(&s->out, pop3_password); |
|
468
2580fe1c5a9a
Mail: support for smtp auth login with username.
Maxim Dounin <mdounin@mdounin.ru>
parents:
459
diff
changeset
|
473 s->mail_state = ngx_pop3_auth_login_password; |
|
2580fe1c5a9a
Mail: support for smtp auth login with username.
Maxim Dounin <mdounin@mdounin.ru>
parents:
459
diff
changeset
|
474 |
|
2580fe1c5a9a
Mail: support for smtp auth login with username.
Maxim Dounin <mdounin@mdounin.ru>
parents:
459
diff
changeset
|
475 return ngx_mail_auth_login_username(s, c, 1); |
|
2580fe1c5a9a
Mail: support for smtp auth login with username.
Maxim Dounin <mdounin@mdounin.ru>
parents:
459
diff
changeset
|
476 |
| 336 | 477 case NGX_MAIL_AUTH_PLAIN: |
| 478 | |
| 613 | 479 ngx_str_set(&s->out, pop3_next); |
| 336 | 480 s->mail_state = ngx_pop3_auth_plain; |
| 481 | |
| 482 return NGX_OK; | |
| 483 | |
| 484 case NGX_MAIL_AUTH_CRAM_MD5: | |
| 485 | |
| 486 if (!(pscf->auth_methods & NGX_MAIL_AUTH_CRAM_MD5_ENABLED)) { | |
| 487 return NGX_MAIL_PARSE_INVALID_COMMAND; | |
| 488 } | |
| 489 | |
| 490 if (ngx_mail_auth_cram_md5_salt(s, c, "+ ", 2) == NGX_OK) { | |
| 491 s->mail_state = ngx_pop3_auth_cram_md5; | |
| 492 return NGX_OK; | |
| 493 } | |
| 494 | |
| 495 return NGX_ERROR; | |
| 496 } | |
| 497 | |
| 498 return rc; | |
| 499 } |