After failing to get Giganews Accelerator to run under wine I decided to proceed in getting Pan to run ssl using stunnel.
Here’s how I did it.
First off get stunnel installed:
sudo apt-get install stunnel
Second edit the stunnel.conf
sudo gedit /etc/stunnel/stunnel.conf
Here is mine, replace the news server with yours:
; Sample stunnel configuration file by Michal Trojnara 2002-2006
; Some options used here may not be adequate for your particular configuration
; Please make sure you understand them (especially the effect of chroot jail)
; Certificate/key is needed in server mode and optional in client mode
; cert = /etc/stunnel/mail.pem
;key = /etc/stunnel/mail.pem
; Protocol version (all, SSLv2, SSLv3, TLSv1)
sslVersion = SSLv3
; Some security enhancements for UNIX systems - comment them out on Win32
chroot = /var/lib/stunnel4/
setuid = stunnel4
setgid = stunnel4
; PID is created inside chroot jail
pid = /stunnel4.pid
; Some performance tunings
socket = l:TCP_NODELAY=1
socket = r:TCP_NODELAY=1
;compression = rle
; Workaround for Eudora bug
;options = DONT_INSERT_EMPTY_FRAGMENTS
; Authentication stuff
;verify = 2
; Don't forget to c_rehash CApath
; CApath is located inside chroot jail
;CApath = /certs
; It's often easier to use CAfile
;CAfile = /etc/stunnel/certs.pem
; Don't forget to c_rehash CRLpath
; CRLpath is located inside chroot jail
;CRLpath = /crls
; Alternatively you can use CRLfile
;CRLfile = /etc/stunnel/crls.pem
; Some debugging stuff useful for troubleshooting
debug = 7
output = /var/log/stunnel4/stunnel.log
; Use it for client mode
client = yes
; Service-level configuration
[nntp]
accept = localhost:119
connect = YOUR.NEWSGROUP.HERE:PORT
; [pop3s]
; accept = 995
; connect = 110
; [imaps]
; accept = 993
; connect = 143
; [ssmtp]
; accept = 465
; connect = 25
; [https]
; accept = 443
; connect = 80
; TIMEOUTclose = 0
; vim:ft=dosini
Edit stunnel4:
sudo gedit /etc/default/stunnel4
Set Enabled=1
# /etc/default/stunnel
# Julien LEMOINE
# September 2003
# Change to one to enable stunnel
ENABLED=1
FILES="/etc/stunnel/*.conf"
OPTIONS=""
# Change to one to enable ppp restart scripts
PPP_RESTART=0
Start stunnel4:
/etc/init.d/stunnel4 start
Fire up Pan and set set your server to localhost on port 119