From 18dbdec8d5ce4c234a15afa341ae1df06c5a66e7 Mon Sep 17 00:00:00 2001
From: Pat Riehecky <riehecky@fnal.gov>
Date: Mar 12 2019 18:56:14 +0000
Subject: Update server doc for newer TLS and event worker


---

diff --git a/docs/source/server_howto.rst b/docs/source/server_howto.rst
index 0687244..37ce8db 100644
--- a/docs/source/server_howto.rst
+++ b/docs/source/server_howto.rst
@@ -621,6 +621,10 @@ respawning).
     ...
     MaxRequestsPerChild  100
     </IfModule>
+    <IfModule event.c>
+    ...
+    MaxRequestsPerChild  100
+    </IfModule>
 
 /etc/httpd/conf.d/kojihub.conf
 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
@@ -643,6 +647,10 @@ options should point to where the certificates are located on the hub.
     SSLCACertificateFile /etc/pki/koji/koji_ca_cert.crt
     SSLVerifyClient require
     SSLVerifyDepth  10
+    # Python is currently not fully TLSv1.3 compatible and
+    #  older TLS versions are no longer advised
+    #  https://bugs.python.org/issue34670
+    SSLProtocol TLSv1.2
 
 /etc/koji-hub/hub.conf
 ^^^^^^^^^^^^^^^^^^^^^^