From: dwhodgins@nomail.afraid.org   
      
   On Fri, 01 Mar 2024 10:20:10 -0500, candycanearter07  wrote:   
      
   > Paul  wrote at 08:42 this Friday (GMT):   
   >> E-S offers both. This allows really ancient clients which   
   >> lack SSL/TLS to connect to the server (119). And there are   
   >> people who like the really old client software. There   
   >> is no such thing as "too old software" when it   
   >> comes to USENET.   
      
   > Oh does slrnpull support ssl?   
   >   
   >> It would be like expecting an EMACS user to stop using EMACS.   
   >> Not gonna happen.   
   >   
   > Or vim users   
      
   For usenet clients that do no support ssl, stunnel can be used. The   
   program I'm using does not support it, so I use it.   
      
   In /etc/stunnel/stunnel.conf I have ...   
   [nntps]   
   client=yes   
   connect=news.eternal-september.org:563   
   cert=/etc/pki/tls/certs/stunnel.pem   
   accept=564   
   TIMEOUTconnect=60   
      
   The program I'm using (leafnode) then connects using localhost:564.   
   In /etc/leafnode/config ...   
   server = localhost   
   port = 564   
   #server = news.eternal-september.org   
   #port = 119   
   username = munged   
   password = munged   
   timeout = 300   
   timeout_fetchnews = 300   
   initialfetch = 500   
   nodesc = 1   
   maxage = 5   
   filterfile = /etc/leafnode/filters   
   debugmode = 0   
   create_all_links = 0   
   allow_8bit_headers = 1   
   article_despite_filter = 1   
   noxover = 1   
      
   The commented out above were for testing leafnode without using stunnel.   
      
   I then have my usenet reader set to collect articles from localhost port 119,   
   without any authentication needed.   
      
   Besides encrypting the password, another benefit is that for slow connections   
   it's faster as the encryption includes compression.   
      
   Regards, Dave Hodgins   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)