From: David Vašek <david.vasek@nic.cz>
Date: Mon, 19 Jul 2021 08:15:41 +0000 (+0200)
Subject: doc/operation: update the web link to the DER format specs, fix a critical typo
X-Git-Tag: v3.1.0~13
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=58f9e091dc7e78fb83c0a99ec47b7a78854576eb;p=thirdparty%2Fknot-dns.git

doc/operation: update the web link to the DER format specs, fix a critical typo

Update the web link to ITU-T X.690 Recommendation (DER key format),
the previous standard revision has been superseded. Fix a critical typo.
---

diff --git a/doc/operation.rst b/doc/operation.rst
index 2a6c2a8186..62d1ab10cf 100644
--- a/doc/operation.rst
+++ b/doc/operation.rst
@@ -867,7 +867,7 @@ Import of keys to HSM
 
 Knot DNS stores DNSSEC keys in textual PEM format (:rfc:`7468`),
 while many HSM management software require the keys for import to be in binary
-DER format (`Rec. ITU-T X.690 <https://www.itu.int/rec/T-REC-X.690-201508-I/en>`_).
+DER format (`Rec. ITU-T X.690 <https://www.itu.int/ITU-T/recommendations/rec.aspx?rec=x.690>`_).
 Keys can be converted from one format to another by software tools such as
 ``certtool`` from `GnuTLS <https://www.gnutls.org/>`_ suite or
 ``openssl`` from `OpenSSL <https://www.openssl.org/>`_ suite.
@@ -877,7 +877,7 @@ In the examples below, ``c4eae5dea3ee8c15395680085c515f2ad41941b6`` is used as t
 as copied from the Knot DNS zone's :ref:`KASP database directory <database_kasp-db>`,
 ``c4eae5dea3ee8c15395680085c515f2ad41941b6.priv.der`` represents the file containing the private
 key in DER format as generated by the conversion tool, and
-``c4eae5dea3ee8c15395680085c515f2ad41941b6.pub.der`` represents the file containing the private
+``c4eae5dea3ee8c15395680085c515f2ad41941b6.pub.der`` represents the file containing the public
 key in DER format as generated by the conversion tool.
 
 .. code-block:: console