From a37db7ff51f3a6cdcdb15d3eb3a072aa46e37173 Mon Sep 17 00:00:00 2001
From: Mike McLean <mikem@redhat.com>
Date: Dec 14 2016 02:38:10 +0000
Subject: Also set WSGIApplicationGroup to %{GLOBAL} for the web


see:
- https://pagure.io/koji/issue/214
- https://pagure.io/koji/pull-request/197

---

diff --git a/www/conf/kojiweb.conf b/www/conf/kojiweb.conf
index 88c5b04..807ef23 100644
--- a/www/conf/kojiweb.conf
+++ b/www/conf/kojiweb.conf
@@ -5,6 +5,9 @@ Alias /koji "/usr/share/koji-web/scripts/wsgi_publisher.py"
 <Directory "/usr/share/koji-web/scripts/">
     Options ExecCGI
     SetHandler wsgi-script
+    WSGIApplicationGroup %{GLOBAL}
+    # ^ works around an OpenSSL issue
+    # see: https://cryptography.io/en/latest/faq/#starting-cryptography-using-mod-wsgi-produces-an-internalerror-during-a-call-in-register-osrandom-engine
     <IfVersion < 2.4>
         Order allow,deny
         Allow from all