links

docs.it4i/get-started-with-it4innovations/obtaining-login-credentials/certificates-faq.md

@@ -20,7 +20,7 @@ However, users need only manage User and CA certificates. Note that your user ce
 Q: Which X.509 certificates are recognised by IT4Innovations?
 -------------------------------------------------------------
 
-Any certificate that has been issued by a Certification Authority (CA) from a member of the IGTF ([http:www.igtf.net](http://www.igtf.net/)) is recognised by IT4Innovations: European certificates are issued by members of the EUGridPMA ([https://www.eugridmpa.org](https://www.eugridpma.org/)), which is part if the IGTF and coordinates the trust fabric for e-Science Grid authentication within Europe. Further the Czech *"Qualified certificate" (Kvalifikovaný certifikát)* (provided by <http://www.postsignum.cz/> or <http://www.ica.cz/Kvalifikovany-certifikat.aspx>), that is used in electronic contact with Czech public authorities is accepted.
+[The Certificates for Digital Signatures](obtaining-login-credentials/#the-certificates-for-digital-signatures).
 
 Q: How do I get a User Certificate that can be used with IT4Innovations?
 ------------------------------------------------------------------------
@@ -37,7 +37,7 @@ Yes, provided that the CA which provides this service is also a member of IGTF.
 Q: Does IT4Innovations support the TERENA certificate service?
 --------------------------------------------------------------
 
- Yes, ITInnovations supports TERENA eScience personal certificates. For more information, please visit [https://tcs-escience-portal.terena.org](https://tcs-escience-portal.terena.org/), where you also can find if your organisation/country can use this service
+ Yes, ITInnovations supports TERENA eScience personal certificates. For more information, please visit [TCS - Trusted Certificate Service](https://tcs-escience-portal.terena.org/), where you also can find if your organisation/country can use this service
 
 Q: What format should my certificate take?
 ------------------------------------------
@@ -46,7 +46,7 @@ User Certificates come in many formats, the three most common being the ’PKCS1
 
 The PKCS12 (often abbreviated to ’p12’) format stores your user certificate, along with your associated private key, in a single file. This form of your certificate is typically employed by web browsers, mail clients, and grid services like UNICORE, DART, gsissh-term and Globus toolkit (GSI-SSH, GridFTP and GRAM5).
 
-The PEM format (*.pem) stores your user certificate and your associated private key in two separate files. This form of your certificate can be used by PRACE’s gsissh-term and with the grid related services like Globus toolkit (GSI-SSH, GridFTP and GRAM5).
+The PEM format (`*`.pem) stores your user certificate and your associated private key in two separate files. This form of your certificate can be used by PRACE’s gsissh-term and with the grid related services like Globus toolkit (GSI-SSH, GridFTP and GRAM5).
 
 To convert your Certificate from PEM to p12 formats, and *vice versa*, IT4Innovations recommends using the openssl tool (see separate FAQ entry).
 
@@ -59,7 +59,7 @@ Q: What are CA certificates?
 
 Certification Authority (CA) certificates are used to verify the link between your user certificate and the authority which issued it. They are also used to verify the link between the host certificate of a IT4Innovations server and the CA which issued that certificate. In essence they establish a chain of trust between you and the target server. Thus, for some grid services, users must have a copy of all the CA certificates.
 
-To assist users, SURFsara (a member of PRACE) provides a complete and up-to-date bundle of all the CA certificates that any PRACE user (or IT4Innovations grid services user) will require. Bundle of certificates, in either p12, PEM or JKS formats, are available from <http://winnetou.sara.nl/prace/certs/>.
+To assist users, SURFsara (a member of PRACE) provides a complete and up-to-date bundle of all the CA certificates that any PRACE user (or IT4Innovations grid services user) will require. Bundle of certificates, in either p12, PEM or JKS formats, are [available here](http://winnetou.sara.nl/prace/certs/).
 
 It is worth noting that gsissh-term and DART automatically updates their CA certificates from this SURFsara website. In other cases, if you receive a warning that a server’s certificate can not be validated (not trusted), then please update your CA certificates via the SURFsara website. If this fails, then please contact the IT4Innovations helpdesk.
 
@@ -69,7 +69,7 @@ Lastly, if you need the CA certificates for a personal Globus 5 installation, th
     myproxy-get-trustroots -s myproxy-prace.lrz.de
 ```
 
-If you run this command as ’root’, then it will install the certificates into /etc/grid-security/certificates. If you run this not as ’root’, then the certificates will be installed into $HOME/.globus/certificates. For Globus, you can download the globuscerts.tar.gz packet from <http://winnetou.sara.nl/prace/certs/>.
+If you run this command as ’root’, then it will install the certificates into /etc/grid-security/certificates. If you run this not as ’root’, then the certificates will be installed into $HOME/.globus/certificates. For Globus, you can download the globuscerts.tar.gz packet [available here](http://winnetou.sara.nl/prace/certs/).
 
 Q: What is a DN and how do I find mine?
 ---------------------------------------
@@ -114,7 +114,7 @@ To check your certificate (e.g., DN, validity, issuer, public key algorithm, etc
     openssl x509 -in usercert.pem -text -noout
 ```
 
-To download openssl for both Linux and Windows, please visit <http://www.openssl.org/related/binaries.html>. On Macintosh Mac OS X computers openssl is already pre-installed and can be used immediately.
+To download openssl if not pre-installed, please visit (https://www.openssl.org/source/). On Macintosh Mac OS X computers openssl is already pre-installed and can be used immediately.
 
 Q: How do I create and then manage a keystore?
 ----------------------------------------------

docs.it4i/get-started-with-it4innovations/obtaining-login-credentials/obtaining-login-credentials.md

@@ -103,7 +103,7 @@ You will receive your personal login credentials by protected e-mail. The login
 2.  ssh private key and private key passphrase
 3.  system password
 
-The clusters are accessed by the [private key](../accessing-the-clusters/shell-access-and-data-transfer/ssh-keys/) and username. Username and password is used for login to the information systems listed on <http://support.it4i.cz/>.
+The clusters are accessed by the [private key](../accessing-the-clusters/shell-access-and-data-transfer/ssh-keys/) and username. Username and password is used for login to the [information systems](http://support.it4i.cz/).
 
 Change Passphrase
 -----------------
@@ -119,12 +119,12 @@ On Windows, use [PuTTY Key Generator](../accessing-the-clusters/shell-access-and
 Change Password
 ---------------
 
-Change password in your user profile at <https://extranet.it4i.cz/user/>
+Change password in [your user profile](https://extranet.it4i.cz/user/).
 
 The Certificates for Digital Signatures
 ---------------------------------------
 
-We accept personal certificates issued by any widely respected certification authority (CA). This includes certificates by CAs organized in International Grid Trust Federation (<http://www.igtf.net/>), its European branch EUGridPMA - <https://www.eugridpma.org/> and its member organizations, e.g. the CESNET certification authority - <https://tcs-p.cesnet.cz/confusa/>. The Czech *"Qualified certificate" (Kvalifikovaný certifikát)* (provided by <http://www.postsignum.cz/> or <http://www.ica.cz/Kvalifikovany-certifikat.aspx>), that is used in electronic contact with Czech authorities is accepted as well.
+We accept personal certificates issued by any widely respected certification authority (CA). This includes certificates by CAs organized in [International Grid Trust Federation](http://www.igtf.net/), its European branch [EUGridPMA](https://www.eugridpma.org/) and its member organizations, e.g. the [CESNET certification authority](https://tcs.cesnet.cz). The Czech Qualified certificate (Kvalifikovaný certifikát) [PostSignum](http://www.postsignum.cz/) or [I.CA](http://www.ica.cz/Kvalifikovany-certifikat.aspx), that is used in electronic contact with Czech authorities is accepted as well.
 
 Certificate generation process is well-described here:
 
@@ -137,7 +137,7 @@ Alternative Way to Personal Certificate
 
 Follow these steps **only** if you can not obtain your certificate in a standard way. In case you choose this procedure, please attach a **scan of photo ID** (personal ID or passport or drivers license) when applying for [login credentials](obtaining-login-credentials/#the-login-credentials).
 
-1.  Go to <https://www.cacert.org/>.
+1.  Go to [CAcert](https://www.cacert.org/).
     -   If there's a security warning, just acknowledge it.
 2.  Click *Join*.
 3.  Fill in the form and submit it by the *Next* button.