PR#1340: Update server doc for newer TLS and event worker - koji

koji

#1340 Update server doc for newer TLS and event worker

Merged 4 years ago by mikem. Opened 4 years ago by jcpunk.

jcpunk/koji event-doc into master

Update server doc for newer TLS and event worker

Pat Riehecky • 4 years ago

18dbdec

file modified

		`@@ -621,6 +621,10 @@`
		`...`
		`MaxRequestsPerChild 100`
		`</IfModule>`
		`+ <IfModule event.c>`
		`+ ...`
		`+ MaxRequestsPerChild 100`
		`+ </IfModule>`

		`/etc/httpd/conf.d/kojihub.conf`
		`^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^`
		`@@ -643,6 +647,10 @@`
		`SSLCACertificateFile /etc/pki/koji/koji_ca_cert.crt`
		`SSLVerifyClient require`
		`SSLVerifyDepth 10`
		`+ # Python is currently not fully TLSv1.3 compatible and`
		`+ # older TLS versions are no longer advised`
		`+ # https://bugs.python.org/issue34670`
		`+ SSLProtocol TLSv1.2`

		`/etc/koji-hub/hub.conf`
		`^^^^^^^^^^^^^^^^^^^^^^`

jcpunk commented 4 years ago

This PR updates the koji server howto doc with:
- recommended TLS settings
- worker bits for the event mpm (default in Fedora)

ktdreyer commented 4 years ago

LGTM.

it's interesting that we have the same Apache httpd setting duplicated in <IfModule prefork.c>, <IfModule worker.c>, and <IfModule event.c>. Would it make sense to have a separate PR to merge these?