Translation(s): English - Italiano

Pan Overview

Pan is a Usenet newsreader which is good at both text and binaries.

Installation

#apt install pan

SSL encryption

Stunnel Installation

Unfortunately, Pan does not support SSL encryption yet (Pan 0.135), so we are going to use stunnel for SSL tunneling. 

# apt install stunnel4

To enable Stunnel edit /etc/default/stunnel4 

ENABLED=1

Stunnel Configuration

In Debian Wheezy/Sid there is no configuration by default. Copy the sample configuration for stunnel and place it to: 

#cp /usr/share/doc/stunnel4/examples/stunnel.conf-sample /etc/stunnel/stunnel.conf

Edit the /etc/stunnel/stunnel.conf and add the following nntp option for Usenet 

[nntp]
client = yes
accept = localhost:119
connect = YOUR_SSL_URL_USENET_PROVIDER:PORT

accept - Pan will connect locally. Configure Pan to use localhost and port 119

connect - Remote SSL connection using Stunnel. Example: ssl-eu.astraweb.com:443

Stunnel Certificate/Key

Certificate/key is needed in server mode and optional in client mode

Optionally, to generate a RSA Private Key 

#openssl genrsa -out priv.pem

Generate Certificate 

#openssl req -new -x509 -key priv.pem -out stunnel.pem -days 1095

combine priv.pem with stunnel.pem

Edit the /etc/stunnel/stunnel.conf and set the key-path 

key = /etc/stunnel/stunnel.pem

change the path /etc/stunnel/stunnel.pem according to your key path.

Start stunnel: 

#/etc/init.d/stunnel restart

See Also