Path: ...!3.eu.feeder.erje.net!feeder.erje.net!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail
From: Gabx <dogfromhell666@mail2tor.com>
Newsgroups: news.software.nntp
Subject: Re: Port 563 TLSv1.3 [Letsencrypt]
Date: Thu, 27 Mar 2025 22:45:27 +0100
Organization: Victor Yamn Anonymous Remailer
Lines: 38
Message-ID: <m4lv7vFgs3uU1@mid.individual.net>
References: <m4jf8vF4jjqU1@mid.individual.net>
 <vs42m1$v64$1@gatto.corradoroberto.it> <m4lpnsFg0jmU1@mid.individual.net>
 <vs4c2f$cqr$1@gatto.corradoroberto.it>
Reply-To: personne@domain.invalid
Mime-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
X-Trace: individual.net y9GiQ2iJpzRrVdXVg0h2RQ/gU1rZrfMH6LUrCBjLcCxhtBNgzT
Cancel-Lock: sha1:kLf2a+xvOEV/9t+xvqQ56zPy4qE= sha256:XV4M5mK3I5NbwwLDfOHPlFOs9sCBbkjrs/iJvz3GTW0=
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:128.0) Gecko/20100101
 Firefox/128.0 SeaMonkey/2.53.20
In-Reply-To: <vs4c2f$cqr$1@gatto.corradoroberto.it>
Bytes: 2229

Roberto CORRADO wrote:
> "Gabx" wrote:
> 
> 
> ,----[ Quote m4lpnsFg0jmU1@mid.individual.net ]
> |  ,----[ Quote unknown MSG_ID ]
> | | 200 news.tcpreset.net InterNetNews NNRP server INN 2.6.4 ready (posting ok)
> | `----
> | Thanks for your help!
> `----
> 
> IMHO, you have a configuration problem...
> please...
> 
> """
> $ cat /etc/systemd/system/inn-nnrpd.service | curl -F 'nopaste=<-' https://nopaste.corradoroberto.it
> """
> 

I haven't launched nnrpd by a systemd script.
I have set in inn.conf -S flag in nnrpdflags: directive.

tlscafile:                   /etc/news/ssl/chain.pem
tlscertfile:                /etc/news/ssl/cert.pem
tlskeyfile:                /etc/news/ssl/privkey.pem
tlsprotocols:               [ TLSv1.2 TLSv1.3 ]

Than, as you see above, i have copied copied letsencryppt certificates 
in /etc/news/ssl to make certificates and key owned by news user.

By the way i run Ubuntu22.04.
I've stopped implementing nnrpd for now.
I've decided to start with at least one peer first, understand all the 
other config files well and ultimately adopt nnrpd and tls.

Gabx
-- 
https://yamn.virebent.art/contatti.html