procedure + comments

Author: mayaraman19

source/includes/troubleshooting/tls.rst

@@ -137,35 +137,51 @@ message:
 These types of errors occur because of outdated or buggy SSL proxies that mistakenly
 enforce legacy `TLS renegotiation <https://www.ibm.com/docs/en/i/7.3?topic=settings-renegotiation>`__. 
 
-To resolve this issue, create a configuration file that includes the 
-``UnsafeLegacyServerConnect`` option. This option requires OpenSSL v3.0.4 or 
-greater. The following example shows how to set the ``UnsafeLegacyServerConnect`` 
-option:
+To resolve this issue, perform the following steps:
 
-.. code-block:: shell
-   :emphasize-lines: 10
+.. procedure::
+   
+   .. step:: Check OpenSSL Version
+
+      Run the following command to ensure that you have OpenSSL vv3.0.4 or
+      later installed:
+
+      .. code-block:: bash
+
+         openssl version
+
+   .. step:: Use ``UnsafeLegacyServerConnect`` Option
+   
+      Create a configuration file that includes the 
+      ``UnsafeLegacyServerConnect`` option. The following example shows how to set 
+      the ``UnsafeLegacyServerConnect`` option:
+
+      .. code-block:: shell
+         :emphasize-lines: 10
+
+         openssl_conf = openssl_init
 
-   openssl_conf = openssl_init
+         [openssl_init]
+         ssl_conf = ssl_sect
 
-   [openssl_init]
-   ssl_conf = ssl_sect
+         [ssl_sect]
+         system_default = system_default_sect
 
-   [ssl_sect]
-   system_default = system_default_sect
+         [system_default_sect]
+         Options = UnsafeLegacyServerConnect
 
-   [system_default_sect]
-   Options = UnsafeLegacyServerConnect
+   .. step:: Run Python With OpenSSL Configuration
 
-Then run Python while setting the ``OPENSSL_CONF`` environment variable to use
-the OpenSSL configuration file you just created:
+      Run Python while setting the ``OPENSSL_CONF`` environment variable to use
+      the OpenSSL configuration file you just created:
 
-.. code-block:: shell
+      .. code-block:: shell
 
-   OPENSSL_CONF=/path/to/the/config/file/above.cnf python ...
+         OPENSSL_CONF=/path/to/the/config/file/above.cnf python ...
 
 .. important::
 
    Because setting the ``UnsafeLegacyServerConnect`` option has 
    `security implications <https://docs.openssl.org/3.0/man3/SSL_CTX_set_options/#patched-openssl-client-and-unpatched-server>`__, 
-   this workaround should only be used as a last 
+   use this workaround as a last 
    resort to address ``unsafe legacy renegotiation disabled`` errors.