search

animetosho / Nyuu

Flexible usenet binary posting tool
221 stars 32 forks source link

Ignore Cert option not honoured #65

Closed Squiggles4321 closed 4 years ago

Squiggles4321 commented 4 years ago

Hi, I'm using some destination IP based routing in order to split a provider between posting account via a VPN and downloading account direct on the same system. As a result of this I have to target a specific server using an IP address rather then rely on the round robin DNS results. When specifying an IP address in NYUU for the host when using SSL I get back Hostname/IP doesn't match certificate's altnames: is not in the cert's list:

[WARN] NNTP connection failed: Hostname/IP doesn't match certificate's altnames: "IP: <IP ADDRESS FROM -h> is not in the cert's list: ", reconnecting after 15 second(s)... (attempt 1/1) [DBG ] NNTP connection closed

Which makes sense. I expected adding --ignore-cert to override this but I am still getting the same warning. I have confirmed that the server is accepting posts using a different posting client and if I use a host entry (in the hosts file for the system) for the name that appears on the certificate pointing to the one IP address it works (and this is my work around for the moment since the downloaders are working fine with IP).

Does the --ignore-cert only override certain types of SSL issues such as expired certificate, or am I putting it in the wrong location on the command line (I've tried a few.

Full command line: ./nyuu.js -v -h <IP ADDRESS HERE> -P 443 -S --ignore-cert -u <USERNAME> -p <PASSWORD> -n 10 -f <FROM NAME HERE> -g alt.binaries.test -t <PRE COMMENT HERE> -F -o <NZB NAME HERE.nzb> -O ./filestoupload/*

Thanks,

-Squigs

animetosho commented 4 years ago

Thanks for the report. This is bug where the option actually gets inverted.

As a workaround for now, try using --no-ignore-cert