Translation(s): English - Italiano


Pan Overview

Pan is a Usenet newsreader which is good at both text and binaries.

Installation

#apt-get install pan

SSL encryption

Stunnel Installation

Unfortunately, Pan does not support SSL encryption yet (Pan 0.135), so we are going to use stunnel for SSL tunneling.

# apt-get install stunnel4

To enable Stunnel edit /etc/default/stunnel4

ENABLED=1

Stunnel Configuration

In Debian Wheezy/Sid there is no configuration by default. Copy the sample configuration for stunnel and place it to:

#cp /usr/share/doc/stunnel4/examples/stunnel.conf-sample /etc/stunnel/stunnel.conf

Edit the /etc/stunnel/stunnel.conf and add the following nntp option for Usenet

[nntp]
client = yes
accept = localhost:119
connect = YOUR_SSL_URL_USENET_PROVIDER:PORT

accept - Pan will connect locally. Configure Pan to use localhost and port 119

connect - Remote SSL connection using Stunnel. Example: ssl-eu.astraweb.com:443

Stunnel Certificate/Key

Certificate/key is needed in server mode and optional in client mode

Optionally, to generate a RSA Private Key

#openssl genrsa -out priv.pem

Generate Certificate

#openssl req -new -x509 -key priv.pem -out stunnel.pem -days 1095

combine priv.pem with stunnel.pem

Edit the /etc/stunnel/stunnel.conf and set the key-path

key = /etc/stunnel/stunnel.pem

change the path /etc/stunnel/stunnel.pem according to your key path.

Start stunnel:

#/etc/init.d/stunnel restart


See: