doc/operation: update the web link to the DER format specs, fix a critical typo

Update the web link to ITU-T X.690 Recommendation (DER key format),
the previous standard revision has been superseded. Fix a critical typo.

diff --git a/doc/operation.rst b/doc/operation.rst
index 2a6c2a818613f075cae5b1c257835cca9393bf89..62d1ab10cf5bc7fab2eef179fb6eec62af85a787 100644 (file)
--- a/doc/operation.rst
+++ b/doc/operation.rst
@@ -867,7 +867,7 @@ Import of keys to HSM
 
 Knot DNS stores DNSSEC keys in textual PEM format (:rfc:`7468`),
 while many HSM management software require the keys for import to be in binary
-DER format (`Rec. ITU-T X.690 <https://www.itu.int/rec/T-REC-X.690-201508-I/en>`_).
+DER format (`Rec. ITU-T X.690 <https://www.itu.int/ITU-T/recommendations/rec.aspx?rec=x.690>`_).
 Keys can be converted from one format to another by software tools such as
 ``certtool`` from `GnuTLS <https://www.gnutls.org/>`_ suite or
 ``openssl`` from `OpenSSL <https://www.openssl.org/>`_ suite.
@@ -877,7 +877,7 @@ In the examples below, ``c4eae5dea3ee8c15395680085c515f2ad41941b6`` is used as t
 as copied from the Knot DNS zone's :ref:`KASP database directory <database_kasp-db>`,
 ``c4eae5dea3ee8c15395680085c515f2ad41941b6.priv.der`` represents the file containing the private
 key in DER format as generated by the conversion tool, and
-``c4eae5dea3ee8c15395680085c515f2ad41941b6.pub.der`` represents the file containing the private
+``c4eae5dea3ee8c15395680085c515f2ad41941b6.pub.der`` represents the file containing the public
 key in DER format as generated by the conversion tool.
 
 .. code-block:: console