Pan is a Usenet newsreader which is good at both text and binaries.
#apt-get install pan
Unfortunately, Pan does not support SSL encryption yet (Pan 0.135), so we are going to use stunnel for SSL tunneling.
# apt-get install stunnel4
To enable Stunnel edit /etc/default/stunnel4
In Debian Wheezy/Sid there is no configuration by default. Copy the sample configuration for stunnel and place it to:
#cp /usr/share/doc/stunnel4/examples/stunnel.conf-sample /etc/stunnel/stunnel.conf
Edit the /etc/stunnel/stunnel.conf and add the following nntp option for Usenet
[nntp] client = yes accept = localhost:119 connect = YOUR_SSL_URL_USENET_PROVIDER:PORT
accept - Pan will connect locally. Configure Pan to use localhost and port 119
connect - Remote SSL connection using Stunnel. Example: ssl-eu.astraweb.com:443
Certificate/key is needed in server mode and optional in client mode
Optionally, to generate a RSA Private Key
#openssl genrsa -out priv.pem
#openssl req -new -x509 -key priv.pem -out stunnel.pem -days 1095
combine priv.pem with stunnel.pem
Edit the /etc/stunnel/stunnel.conf and set the key-path
key = /etc/stunnel/stunnel.pem
change the path /etc/stunnel/stunnel.pem according to your key path.