Translation(s): English - Italiano

Pan Overview

Pan is a Usenet newsreader which is good at both text and binaries.


#apt install pan

SSL encryption

Stunnel Installation

Unfortunately, Pan does not support SSL encryption yet (Pan 0.135), so we are going to use stunnel for SSL tunneling.

# apt install stunnel4

To enable Stunnel edit /etc/default/stunnel4


Stunnel Configuration

In Debian Wheezy/Sid there is no configuration by default. Copy the sample configuration for stunnel and place it to:

#cp /usr/share/doc/stunnel4/examples/stunnel.conf-sample /etc/stunnel/stunnel.conf

Edit the /etc/stunnel/stunnel.conf and add the following nntp option for Usenet

client = yes
accept = localhost:119

accept - Pan will connect locally. Configure Pan to use localhost and port 119

connect - Remote SSL connection using Stunnel. Example:

Stunnel Certificate/Key

Certificate/key is needed in server mode and optional in client mode

Optionally, to generate a RSA Private Key

#openssl genrsa -out priv.pem

Generate Certificate

#openssl req -new -x509 -key priv.pem -out stunnel.pem -days 1095

combine priv.pem with stunnel.pem

Edit the /etc/stunnel/stunnel.conf and set the key-path

key = /etc/stunnel/stunnel.pem

change the path /etc/stunnel/stunnel.pem according to your key path.

Start stunnel:

#/etc/init.d/stunnel restart

See Also