Path: news.eternal-september.org!eternal-september.org!feeder3.eternal-september.org!newsfeed.bofh.team!paganini.bofh.team!tor-network!not-for-mail
From: Gabx <null@tcpreset.invalid>
Newsgroups: news.software.nntp
Subject: Re: error initializing TLS
Date: Fri, 18 Apr 2025 12:04:28 +0200
Organization: To protect and to server
Message-ID: <vtt83c$2ggp9$1@paganini.bofh.team>
References: <vtsspm$2g0ao$1@paganini.bofh.team> <8my0vxzx45.fsf@raybanana.net>
Reply-To: null@tcpreset.invalid
Mime-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
Injection-Date: Fri, 18 Apr 2025 10:04:28 -0000 (UTC)
Injection-Info: paganini.bofh.team; logging-data="2638633"; posting-host="MNrygTvfCDZIixwDy2LPnQ.user.paganini.bofh.team"; mail-complaints-to="usenet@bofh.team"; posting-account="9dIQLXBM7WM9KzA+yjdR4A";
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:128.0) Gecko/20100101
 Firefox/128.0 SeaMonkey/2.53.20
X-Notice: Filtered by postfilter v. 0.9.3
X-TOR-Router: sha256:MTg1LjIyMC4xMDEuMTAy --

Ray Banana wrote:
> Thus spake Gabx <null@tcpreset.invalid>
>   
>> Hi,
>> despite disabling TLS and commenting all the entries regarding it, I
>> still see errors like this:
>> Apr 17 09:44:40 news nnrpd[2355543]: error initializing TLS: [CA_file:
>> ] [CA_path: /etc/news] [cert_file: /etc/news/cert.pem] [key_file:
>> /etc/news/key.pem]
>> Running INN2.6.4
> 
> Your server advertises the STARTTLS command:

> Hence, newsreader clients can request SSL encrypted connections
> on port 119 by issuing the STARTTLS command, which will fail as
> SSL is not configured on your server.



my INN2.6.4 is a package managed by ubuntu apt.
So I have to think that inn in my possession looks for these paths 
[CA_path: /etc/news] [cert_file: /etc/news/cert.pem] [key_file 
/etc/news/key.pem] regardless of whether I have enabled nnrpd -S and the 
tls*: options.

Regards

Gabx