From 62643b878b36c45128c019185f42fcec89cc11e8 Mon Sep 17 00:00:00 2001
From: Ondrej Dvorak <ondrej.dvorak@vsb.cz>
Date: Mon, 5 Sep 2022 14:10:34 +0200
Subject: [PATCH] Update docs.it4i/dice.md, docs.it4i/irods_environment.json,
 docs.it4i/config.yml Deleted docs.it4i/irods.it4i.cz.crt

---
 docs.it4i/config.yml             |   2 +-
 docs.it4i/dice.md                |   6 +-
 docs.it4i/irods.it4i.cz.crt      | 122 -------------------------------
 docs.it4i/irods_environment.json |   2 +-
 4 files changed, 5 insertions(+), 127 deletions(-)
 delete mode 100644 docs.it4i/irods.it4i.cz.crt

diff --git a/docs.it4i/config.yml b/docs.it4i/config.yml
index e4275302b..234d18f3d 100644
--- a/docs.it4i/config.yml
+++ b/docs.it4i/config.yml
@@ -5,7 +5,7 @@ client_user: some_user
 zone: IT4I
 
 authscheme: "pam"
-ssl_ca_cert_file: "~/irods.it4i.cz.crt"
+ssl_ca_cert_file: "~/chain_geant_ov_rsa_ca_4_full.pem"
 ssl_encryption_key_size: 32
 ssl_encryption_algorithm: "AES-256-CBC"
 ssl_encryption_salt_size: 8
diff --git a/docs.it4i/dice.md b/docs.it4i/dice.md
index 113d58701..38a32ab41 100644
--- a/docs.it4i/dice.md
+++ b/docs.it4i/dice.md
@@ -164,7 +164,7 @@ cd ~
 wget https://github.com/cyverse/irodsfs/releases/download/v0.7.6/irodsfs_amd64_linux_v0.7.6.tar
 tar -xvf ~/irodsfs_amd64_linux_v0.7.6.tar
 mkdir ~/IRODS ~/.irods/ && cd "$_" && wget https://docs.it4i.cz/config.yml
-sudo wget https://docs.it4i.cz/irods.it4i.cz.crt -P ~/.irods/
+sudo wget https://pki.cesnet.cz/_media/certs/chain_geant_ov_rsa_ca_4_full.pem -P ~/.irods/
 sed 's,~,'"$HOME"',g' ~/irods/irods_environment.json
 ```
 
@@ -235,7 +235,7 @@ sudo rm -rf \
   ./libssl1.0.0_1.0.2n-1ubuntu5.6_amd64.deb
 sudo apt install -y irods-icommands
 mkdir ~/.irods/ && cd "$_" && wget https://docs.it4i.cz/irods_environment.json
-sudo wget https://docs.it4i.cz/irods.it4i.cz.crt -P ~/.irods
+sudo wget https://pki.cesnet.cz/_media/certs/chain_geant_ov_rsa_ca_4_full.pem -P ~/.irods
 sed 's,~,'"$HOME"',g' ~/.irods/irods_environment.json
 
 ```
@@ -249,7 +249,7 @@ sudo yum install epel-release -y
 sudo yum install python-psutil python-jsonschema
 sudo yum install irods-icommands
 mkdir ~/.irods/ && cd "$_" && wget https://docs.it4i.cz/irods_environment.json
-sudo wget https://docs.it4i.cz/irods.it4i.cz.crt -P ~/.irods
+sudo wget https://pki.cesnet.cz/_media/certs/chain_geant_ov_rsa_ca_4_full.pem -P ~/.irods
 sed 's,~,'"$HOME"',g' ~/.irods/irods_environment.json
 ```
 
diff --git a/docs.it4i/irods.it4i.cz.crt b/docs.it4i/irods.it4i.cz.crt
deleted file mode 100644
index 3e13bc6d6..000000000
--- a/docs.it4i/irods.it4i.cz.crt
+++ /dev/null
@@ -1,122 +0,0 @@
------BEGIN CERTIFICATE-----
-MIIHejCCBWKgAwIBAgIQQJxR26sZ7hTobnmIhzP7dzANBgkqhkiG9w0BAQwFADBE
-MQswCQYDVQQGEwJOTDEZMBcGA1UEChMQR0VBTlQgVmVyZW5pZ2luZzEaMBgGA1UE
-AxMRR0VBTlQgT1YgUlNBIENBIDQwHhcNMjIwODMwMDAwMDAwWhcNMjMwODMwMjM1
-OTU5WjCBiDELMAkGA1UEBhMCQ1oxHjAcBgNVBAgMFU1vcmF2c2tvc2xlenNrw70g
-a3JhajFBMD8GA1UECgw4Vnlzb2vDoSDFoWtvbGEgYsOhxYhza8OhIC0gVGVjaG5p
-Y2vDoSB1bml2ZXJ6aXRhIE9zdHJhdmExFjAUBgNVBAMTDWlyb2RzLml0NGkuY3ow
-ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBAwXmvv/qvImyAJaCkuY4
-1esmvkafSbd+2oAQennLcdV3rSPkRKA7qkauxbrXfc7fblmp1II6GL8UTfNfOp1/
-Gk7/U2/kU4Kc3P7ZGXoH8K+Kmde6K5xEtMF1o3u6toojLQhLoT4jK0YzkuwKSEC3
-2ixEdKg5T6b1MHO49rJVyZpijgPwUyZZ8LbNPamWknUfpwD5oGyx66uwe/z78y/p
-1giffine42zhf/1MHdHeUJCxUCz/CGR27UGlfgSFhr5GOrsrdQCfWljSI7JzZ5+/
-ikw1YVN0/niu3blPPVhrNA804UwBHvSOzgtE6JaJ66zdE3HxJT4L+3TNu5cXpjY5
-AgMBAAGjggMhMIIDHTAfBgNVHSMEGDAWgBRvHTVJEGwy+lmgnryK6B+VvnF6DDAd
-BgNVHQ4EFgQUl9tc8ke4nartn6OEVK9hkURszskwDgYDVR0PAQH/BAQDAgWgMAwG
-A1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMEkGA1Ud
-IARCMEAwNAYLKwYBBAGyMQECAk8wJTAjBggrBgEFBQcCARYXaHR0cHM6Ly9zZWN0
-aWdvLmNvbS9DUFMwCAYGZ4EMAQICMD8GA1UdHwQ4MDYwNKAyoDCGLmh0dHA6Ly9H
-RUFOVC5jcmwuc2VjdGlnby5jb20vR0VBTlRPVlJTQUNBNC5jcmwwdQYIKwYBBQUH
-AQEEaTBnMDoGCCsGAQUFBzAChi5odHRwOi8vR0VBTlQuY3J0LnNlY3RpZ28uY29t
-L0dFQU5UT1ZSU0FDQTQuY3J0MCkGCCsGAQUFBzABhh1odHRwOi8vR0VBTlQub2Nz
-cC5zZWN0aWdvLmNvbTCCAX8GCisGAQQB1nkCBAIEggFvBIIBawFpAHYArfe++nz/
-EMiLnT2cHj4YarRnKV3PsQwkyoWGNOvcgooAAAGC7iQPCgAABAMARzBFAiEAgXKs
-KRPVjUSBRe7oNKbbM31/ts8bJLalWk+VqC5nK8kCIGNltv2kfJ5NmgWj9Vo1hZY2
-EWp6U24v51eRaB1ky7rXAHYAejKMVNi3LbYg6jjgUh7phBZwMhOFTTvSK8E6V6NS
-61IAAAGC7iQPJAAABAMARzBFAiBgGQTRGhnLoEdslVk5+axo8n5OD8Tpt37rfsDM
-S0KeYwIhAKXOGqsUxl2hts5AGtNuMl1nVUaaNB+Lcy65cxuqLKjaAHcA6D7Q2j71
-BjUy51covIlryQPTy9ERa+zraeF3fW0GvW4AAAGC7iQO7gAABAMASDBGAiEA6SGF
-6tt1nsu2eIb92knbIJUQlUCULwSp4carZRPotPYCIQD3sVfKDuLt/e79oA99p05f
-uNsgSOYdGrVQXKCzJCazQzAYBgNVHREEETAPgg1pcm9kcy5pdDRpLmN6MA0GCSqG
-SIb3DQEBDAUAA4ICAQBiwD3C0Tw3O6OenTt6FOrqJuRsT1FuEHDznptmJhXJHQ94
-lK2IiJ77F9kWQDcl1nE4PEtyJMOffKfNu0LQQt7ntkuzoqwWYBkZq8cA8EeZtB8u
-cVqR7EP3Zdw70UBNBFl7pu2Nm5J+nFcyvC/c4XdU62S9VkGfxFuj3BE9/N9kfkrv
-kWmbMCikaDfYfiyV2ZNoV32RHPxUcm5CtcvetjVaI7pkumNOMfJbuA3jyOewOlzf
-g8iL6j2gNvrXs0RbUXxq0L1xGA5yFAD83X0dxixIkB8diYlkws0V5gjNz/L5KuIK
-4BpHcqDjaE8D1GgW5DW6ufT6XeWVsrjqYraUrmDwdJZmzL6g328mQKiOz1WLXijq
-RMN8/gz9PQl8f3p6dDVev4nodTs1eYTwQCxlrtXNJPSydiHsLD00v9hu1sFKB1TC
-G7PMJoSrJ2oZooR9XZhZ4UMLVfbeoL179hGH07/7DKQWJoQlpwjqpZ9ksdAKAhxp
-DU1t5HCr0uQigWNC1jc7Bc7Rwer+SuL8ojcn914CDJl54ERwJAtfrfLznd/rrpAc
-0DbYer02+6JYc84p3hOVo3/CI1UFGoj2f5VkWATBX68aGnQKRglC6OBVYidz8n6Z
-IJhFSMiOcPhit9GQb2nO30HzBMSQhNGsw+Kbvw0UpuRtRQfni0PjANOZy3gB2g==
------END CERTIFICATE-----
-
-# subject: C=NL, O=GEANT Vereniging, CN=GEANT OV RSA CA 4
-# issuer:  C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
-# SHA256 Fingerprint: 37:83:4f:a5:ea:40:fb:f7:b6:11:96:95:59:62:e1:ca:05:58:87:24:35:e4:20:66:53:d3:f6:20:dd:8e:98:8e
------BEGIN CERTIFICATE-----
-MIIG5TCCBM2gAwIBAgIRANpDvROb0li7TdYcrMTz2+AwDQYJKoZIhvcNAQEMBQAw
-gYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpOZXcgSmVyc2V5MRQwEgYDVQQHEwtK
-ZXJzZXkgQ2l0eTEeMBwGA1UEChMVVGhlIFVTRVJUUlVTVCBOZXR3b3JrMS4wLAYD
-VQQDEyVVU0VSVHJ1c3QgUlNBIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTIw
-MDIxODAwMDAwMFoXDTMzMDUwMTIzNTk1OVowRDELMAkGA1UEBhMCTkwxGTAXBgNV
-BAoTEEdFQU5UIFZlcmVuaWdpbmcxGjAYBgNVBAMTEUdFQU5UIE9WIFJTQSBDQSA0
-MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEApYhi1aEiPsg9ZKRMAw9Q
-r8Mthsr6R20VSfFeh7TgwtLQi6RSRLOh4or4EMG/1th8lijv7xnBMVZkTysFiPmT
-PiLOfvz+QwO1NwjvgY+Jrs7fSoVA/TQkXzcxu4Tl3WHi+qJmKLJVu/JOuHud6mOp
-LWkIbhODSzOxANJ24IGPx9h4OXDyy6/342eE6UPXCtJ8AzeumTG6Dfv5KVx24lCF
-TGUzHUB+j+g0lSKg/Sf1OzgCajJV9enmZ/84ydh48wPp6vbWf1H0O3Rd3LhpMSVn
-TqFTLKZSbQeLcx/l9DOKZfBCC9ghWxsgTqW9gQ7v3T3aIfSaVC9rnwVxO0VjmDdP
-FNbdoxnh0zYwf45nV1QQgpRwZJ93yWedhp4ch1a6Ajwqs+wv4mZzmBSjovtV0mKw
-d+CQbSToalEUP4QeJq4Udz5WNmNMI4OYP6cgrnlJ50aa0DZPlJqrKQPGL69KQQz1
-2WgxvhCuVU70y6ZWAPopBa1ykbsttpLxADZre5cH573lIuLHdjx7NjpYIXRx2+QJ
-URnX2qx37eZIxYXz8ggM+wXH6RDbU3V2o5DP67hXPHSAbA+p0orjAocpk2osxHKo
-NSE3LCjNx8WVdxnXvuQ28tKdaK69knfm3bB7xpdfsNNTPH9ElcjscWZxpeZ5Iij8
-lyrCG1z0vSWtSBsgSnUyG/sCAwEAAaOCAYswggGHMB8GA1UdIwQYMBaAFFN5v1qq
-K0rPVIDh2JvAnfKyA2bLMB0GA1UdDgQWBBRvHTVJEGwy+lmgnryK6B+VvnF6DDAO
-BgNVHQ8BAf8EBAMCAYYwEgYDVR0TAQH/BAgwBgEB/wIBADAdBgNVHSUEFjAUBggr
-BgEFBQcDAQYIKwYBBQUHAwIwOAYDVR0gBDEwLzAtBgRVHSAAMCUwIwYIKwYBBQUH
-AgEWF2h0dHBzOi8vc2VjdGlnby5jb20vQ1BTMFAGA1UdHwRJMEcwRaBDoEGGP2h0
-dHA6Ly9jcmwudXNlcnRydXN0LmNvbS9VU0VSVHJ1c3RSU0FDZXJ0aWZpY2F0aW9u
-QXV0aG9yaXR5LmNybDB2BggrBgEFBQcBAQRqMGgwPwYIKwYBBQUHMAKGM2h0dHA6
-Ly9jcnQudXNlcnRydXN0LmNvbS9VU0VSVHJ1c3RSU0FBZGRUcnVzdENBLmNydDAl
-BggrBgEFBQcwAYYZaHR0cDovL29jc3AudXNlcnRydXN0LmNvbTANBgkqhkiG9w0B
-AQwFAAOCAgEAUtlC3e0xj/1BMfPhdQhUXeLjb0xp8UE28kzWE5xDzGKbfGgnrT2R
-lw5gLIx+/cNVrad//+MrpTppMlxq59AsXYZW3xRasrvkjGfNR3vt/1RAl8iI31lG
-hIg6dfIX5N4esLkrQeN8HiyHKH6khm4966IkVVtnxz5CgUPqEYn4eQ+4eeESrWBh
-AqXaiv7HRvpsdwLYekAhnrlGpioZ/CJIT2PTTxf+GHM6cuUnNqdUzfvrQgA8kt1/
-ASXx2od/M+c8nlJqrGz29lrJveJOSEMX0c/ts02WhsfMhkYa6XujUZLmvR1Eq08r
-48/EZ4l+t5L4wt0DV8VaPbsEBF1EOFpz/YS2H6mSwcFaNJbnYqqJHIvm3PLJHkFm
-EoLXRVrQXdCT+3wgBfgU6heCV5CYBz/YkrdWES7tiiT8sVUDqXmVlTsbiRNiyLs2
-bmEWWFUl76jViIJog5fongEqN3jLIGTG/mXrJT1UyymIcobnIGrbwwRVz/mpFQo0
-vBYIi1k2ThVh0Dx88BbF9YiP84dd8Fkn5wbE6FxXYJ287qfRTgmhePecPc73Yrzt
-apdRcsKVGkOpaTIJP/l+lAHRLZxk/dUtyN95G++bOSQqnOCpVPabUGl2E/OEyFrp
-Ipwgu2L/WJclvd6g+ZA/iWkLSMcpnFb+uX6QBqvD6+RNxul1FaB5iHY=
------END CERTIFICATE-----
-# subject: C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
-# issuer:  C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
-# SHA256 Fingerprint: e7:93:c9:b0:2f:d8:aa:13:e2:1c:31:22:8a:cc:b0:81:19:64:3b:74:9c:89:89:64:b1:74:6d:46:c3:d4:cb:d2
------BEGIN CERTIFICATE-----
-MIIF3jCCA8agAwIBAgIQAf1tMPyjylGoG7xkDjUDLTANBgkqhkiG9w0BAQwFADCB
-iDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCk5ldyBKZXJzZXkxFDASBgNVBAcTC0pl
-cnNleSBDaXR5MR4wHAYDVQQKExVUaGUgVVNFUlRSVVNUIE5ldHdvcmsxLjAsBgNV
-BAMTJVVTRVJUcnVzdCBSU0EgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwHhcNMTAw
-MjAxMDAwMDAwWhcNMzgwMTE4MjM1OTU5WjCBiDELMAkGA1UEBhMCVVMxEzARBgNV
-BAgTCk5ldyBKZXJzZXkxFDASBgNVBAcTC0plcnNleSBDaXR5MR4wHAYDVQQKExVU
-aGUgVVNFUlRSVVNUIE5ldHdvcmsxLjAsBgNVBAMTJVVTRVJUcnVzdCBSU0EgQ2Vy
-dGlmaWNhdGlvbiBBdXRob3JpdHkwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIK
-AoICAQCAEmUXNg7D2wiz0KxXDXbtzSfTTK1Qg2HiqiBNCS1kCdzOiZ/MPans9s/B
-3PHTsdZ7NygRK0faOca8Ohm0X6a9fZ2jY0K2dvKpOyuR+OJv0OwWIJAJPuLodMkY
-tJHUYmTbf6MG8YgYapAiPLz+E/CHFHv25B+O1ORRxhFnRghRy4YUVD+8M/5+bJz/
-Fp0YvVGONaanZshyZ9shZrHUm3gDwFA66Mzw3LyeTP6vBZY1H1dat//O+T23LLb2
-VN3I5xI6Ta5MirdcmrS3ID3KfyI0rn47aGYBROcBTkZTmzNg95S+UzeQc0PzMsNT
-79uq/nROacdrjGCT3sTHDN/hMq7MkztReJVni+49Vv4M0GkPGw/zJSZrM233bkf6
-c0Plfg6lZrEpfDKEY1WJxA3Bk1QwGROs0303p+tdOmw1XNtB1xLaqUkL39iAigmT
-Yo61Zs8liM2EuLE/pDkP2QKe6xJMlXzzawWpXhaDzLhn4ugTncxbgtNMs+1b/97l
-c6wjOy0AvzVVdAlJ2ElYGn+SNuZRkg7zJn0cTRe8yexDJtC/QV9AqURE9JnnV4ee
-UB9XVKg+/XRjL7FQZQnmWEIuQxpMtPAlR1n6BB6T1CZGSlCBst6+eLf8ZxXhyVeE
-Hg9j1uliutZfVS7qXMYoCAQlObgOK6nyTJccBz8NUvXt7y+CDwIDAQABo0IwQDAd
-BgNVHQ4EFgQUU3m/WqorSs9UgOHYm8Cd8rIDZsswDgYDVR0PAQH/BAQDAgEGMA8G
-A1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQEMBQADggIBAFzUfA3P9wF9QZllDHPF
-Up/L+M+ZBn8b2kMVn54CVVeWFPFSPCeHlCjtHzoBN6J2/FNQwISbxmtOuowhT6KO
-VWKR82kV2LyI48SqC/3vqOlLVSoGIG1VeCkZ7l8wXEskEVX/JJpuXior7gtNn3/3
-ATiUFJVDBwn7YKnuHKsSjKCaXqeYalltiz8I+8jRRa8YFWSQEg9zKC7F4iRO/Fjs
-8PRF/iKz6y+O0tlFYQXBl2+odnKPi4w2r78NBc5xjeambx9spnFixdjQg3IM8WcR
-iQycE0xyNN+81XHfqnHd4blsjDwSXWXavVcStkNr/+XeTWYRUc+ZruwXtuhxkYze
-Sf7dNXGiFSeUHM9h4ya7b6NnJSFd5t0dCy5oGzuCr+yDZ4XUmFF0sbmZgIn/f3gZ
-XHlKYC6SQK5MNyosycdiyA5d9zZbyuAlJQG03RoHnHcAP9Dc1ew91Pq7P8yF1m9/
-qS3fuQL39ZeatTXaw2ewh0qpKJ4jjv9cJ2vhsE/zB+4ALtRZh8tSQZXq9EfX7mRB
-VXyNWQKV3WKdwrnuWih0hKWbt5DHDAff9Yk2dDLWKMGwsAvgnEzDHNb842m1R0aB
-L6KCq9NjRHDEjf8tM7qtj3u1cIiuPhnPQCjY/MiQu12ZIvVS5ljFH4gxQ+6IHdfG
-jjxDah2nGN59PRbxYvnKkKj9
------END CERTIFICATE-----
diff --git a/docs.it4i/irods_environment.json b/docs.it4i/irods_environment.json
index d0d38abfe..743d5a26b 100644
--- a/docs.it4i/irods_environment.json
+++ b/docs.it4i/irods_environment.json
@@ -5,7 +5,7 @@
     "irods_zone_name": "IT4I",
     "irods_authentication_scheme": "pam_password",
     "irods_ssl_verify_server": "cert",
-    "irods_ssl_ca_certificate_file": "~/irods.it4i.cz.crt",
+    "irods_ssl_ca_certificate_file": "~/chain_geant_ov_rsa_ca_4_full.pem",
     "irods_encryption_algorithm": "AES-256-CBC",
     "irods_encryption_key_size": 32,
     "irods_encryption_num_hash_rounds": 16,
-- 
GitLab