Merge branch 'dice-patch' into 'master'

oprava cesty k certum, jiny cert

See merge request !401

docs.it4i/config.yml

@@ -5,7 +5,7 @@ client_user: some_user
 zone: IT4I
 
 authscheme: "pam"
-ssl_ca_cert_file: "/usr/local/etc/irods.it4i.cz.crt"
+ssl_ca_cert_file: "~/chain_geant_ov_rsa_ca_4_full.pem"
 ssl_encryption_key_size: 32
 ssl_encryption_algorithm: "AES-256-CBC"
 ssl_encryption_salt_size: 8

docs.it4i/dice.md

@@ -161,14 +161,14 @@ Enter your current PAM password:
 
 ```console
 cd ~
-sudo wget https://docs.it4i.cz/irods.it4i.cz.crt -P /usr/local/etc/
 wget https://github.com/cyverse/irodsfs/releases/download/v0.7.6/irodsfs_amd64_linux_v0.7.6.tar
 tar -xvf ~/irodsfs_amd64_linux_v0.7.6.tar
-mkdir ~/IRODS ~/.irods
-cd ~/.irods && wget https://docs.it4i.cz/config.yml
+mkdir ~/IRODS ~/.irods/ && cd "$_" && wget https://docs.it4i.cz/config.yml
+sudo wget https://pki.cesnet.cz/_media/certs/chain_geant_ov_rsa_ca_4_full.pem -P ~/.irods/
+sed 's,~,'"$HOME"',g' ~/irods/irods_environment.json
 ```
 
-- edit `~/.irods/config.yml` with username from aai
+- edit `~/.irods/config.yml` with username from [AAI][f]
 
 ***How to mount your collection:***
 
@@ -213,29 +213,31 @@ total 0
 ***steps for Ubuntu20:***
 
 ```console
-Prepare IRODS APT repository
-
-dejan@dejan:~$ LSB_RELEASE="bionic"
-dejan@dejan:~$ wget -qO - https://packages.irods.org/irods-signing-key.asc | sudo apt-key add -
-OK
-dejan@dejan:~$ echo "deb [arch=amd64] https://packages.irods.org/apt/ ${LSB_RELEASE}  main" \
+LSB_RELEASE="bionic"
+wget -qO - https://packages.irods.org/irods-signing-key.asc | sudo apt-key add -
+echo "deb [arch=amd64] https://packages.irods.org/apt/ ${LSB_RELEASE}  main" \
 >   | sudo tee /etc/apt/sources.list.d/renci-irods.list
 deb [arch=amd64] https://packages.irods.org/apt/ bionic  main
-dejan@dejan:~$ sudo apt-get update
-dejan@dejan:~$ apt-cache search irods
-dejan@dejan:~$ wget -c \
+
+sudo apt-get update
+apt-cache search irods
+wget -c \
   http://security.ubuntu.com/ubuntu/pool/main/p/python-urllib3/python-urllib3_1.22-1ubuntu0.18.04.2_all.deb \
   http://security.ubuntu.com/ubuntu/pool/main/r/requests/python-requests_2.18.4-2ubuntu0.1_all.deb \
   http://security.ubuntu.com/ubuntu/pool/main/o/openssl1.0/libssl1.0.0_1.0.2n-1ubuntu5.10_amd64.deb
-dejan@dejan:~$ sudo apt install \
+sudo apt install \
   ./python-urllib3_1.22-1ubuntu0.18.04.2_all.deb \
   ./python-requests_2.18.4-2ubuntu0.1_all.deb \
   ./libssl1.0.0_1.0.2n-1ubuntu5.6_amd64.deb
-dejan@dejan:~$ rm -rf \
+sudo rm -rf \
   ./python-urllib3_1.22-1ubuntu0.18.04.2_all.deb \
   ./python-requests_2.18.4-2ubuntu0.1_all.deb \
   ./libssl1.0.0_1.0.2n-1ubuntu5.6_amd64.deb
-dejan@dejan:~$ sudo apt install -y irods-icommands
+sudo apt install -y irods-icommands
+mkdir ~/.irods/ && cd "$_" && wget https://docs.it4i.cz/irods_environment.json
+sudo wget https://pki.cesnet.cz/_media/certs/chain_geant_ov_rsa_ca_4_full.pem -P ~/.irods
+sed 's,~,'"$HOME"',g' ~/.irods/irods_environment.json
+
 ```
 
 ***Steps for centos***
@@ -246,11 +248,12 @@ sudo wget -qO - https://packages.irods.org/renci-irods.yum.repo | sudo tee /etc/
 sudo yum install epel-release -y
 sudo yum install python-psutil python-jsonschema
 sudo yum install irods-icommands
-sudo wget https://docs.it4i.cz/irods.it4i.cz.crt -P /usr/local/etc/
 mkdir ~/.irods/ && cd "$_" && wget https://docs.it4i.cz/irods_environment.json
+sudo wget https://pki.cesnet.cz/_media/certs/chain_geant_ov_rsa_ca_4_full.pem -P ~/.irods
+sed 's,~,'"$HOME"',g' ~/.irods/irods_environment.json
 ```
 
-- edit ***irods_user_name*** in `~/.irods/irods_environment.json` with username from aai
+- edit ***irods_user_name*** in `~/.irods/irods_environment.json` with username from [AAI][f]
 
 ```console
 [some_user@local_pc ~]$ pwd

docs.it4i/irods.it4i.cz.crt

------BEGIN CERTIFICATE-----
-MIIHejCCBWKgAwIBAgIQQJxR26sZ7hTobnmIhzP7dzANBgkqhkiG9w0BAQwFADBE
-MQswCQYDVQQGEwJOTDEZMBcGA1UEChMQR0VBTlQgVmVyZW5pZ2luZzEaMBgGA1UE
-AxMRR0VBTlQgT1YgUlNBIENBIDQwHhcNMjIwODMwMDAwMDAwWhcNMjMwODMwMjM1
-OTU5WjCBiDELMAkGA1UEBhMCQ1oxHjAcBgNVBAgMFU1vcmF2c2tvc2xlenNrw70g
-a3JhajFBMD8GA1UECgw4Vnlzb2vDoSDFoWtvbGEgYsOhxYhza8OhIC0gVGVjaG5p
-Y2vDoSB1bml2ZXJ6aXRhIE9zdHJhdmExFjAUBgNVBAMTDWlyb2RzLml0NGkuY3ow
-ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBAwXmvv/qvImyAJaCkuY4
-1esmvkafSbd+2oAQennLcdV3rSPkRKA7qkauxbrXfc7fblmp1II6GL8UTfNfOp1/
-Gk7/U2/kU4Kc3P7ZGXoH8K+Kmde6K5xEtMF1o3u6toojLQhLoT4jK0YzkuwKSEC3
-2ixEdKg5T6b1MHO49rJVyZpijgPwUyZZ8LbNPamWknUfpwD5oGyx66uwe/z78y/p
-1giffine42zhf/1MHdHeUJCxUCz/CGR27UGlfgSFhr5GOrsrdQCfWljSI7JzZ5+/
-ikw1YVN0/niu3blPPVhrNA804UwBHvSOzgtE6JaJ66zdE3HxJT4L+3TNu5cXpjY5
-AgMBAAGjggMhMIIDHTAfBgNVHSMEGDAWgBRvHTVJEGwy+lmgnryK6B+VvnF6DDAd
-BgNVHQ4EFgQUl9tc8ke4nartn6OEVK9hkURszskwDgYDVR0PAQH/BAQDAgWgMAwG
-A1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMEkGA1Ud
-IARCMEAwNAYLKwYBBAGyMQECAk8wJTAjBggrBgEFBQcCARYXaHR0cHM6Ly9zZWN0
-aWdvLmNvbS9DUFMwCAYGZ4EMAQICMD8GA1UdHwQ4MDYwNKAyoDCGLmh0dHA6Ly9H
-RUFOVC5jcmwuc2VjdGlnby5jb20vR0VBTlRPVlJTQUNBNC5jcmwwdQYIKwYBBQUH
-AQEEaTBnMDoGCCsGAQUFBzAChi5odHRwOi8vR0VBTlQuY3J0LnNlY3RpZ28uY29t
-L0dFQU5UT1ZSU0FDQTQuY3J0MCkGCCsGAQUFBzABhh1odHRwOi8vR0VBTlQub2Nz
-cC5zZWN0aWdvLmNvbTCCAX8GCisGAQQB1nkCBAIEggFvBIIBawFpAHYArfe++nz/
-EMiLnT2cHj4YarRnKV3PsQwkyoWGNOvcgooAAAGC7iQPCgAABAMARzBFAiEAgXKs
-KRPVjUSBRe7oNKbbM31/ts8bJLalWk+VqC5nK8kCIGNltv2kfJ5NmgWj9Vo1hZY2
-EWp6U24v51eRaB1ky7rXAHYAejKMVNi3LbYg6jjgUh7phBZwMhOFTTvSK8E6V6NS
-61IAAAGC7iQPJAAABAMARzBFAiBgGQTRGhnLoEdslVk5+axo8n5OD8Tpt37rfsDM
-S0KeYwIhAKXOGqsUxl2hts5AGtNuMl1nVUaaNB+Lcy65cxuqLKjaAHcA6D7Q2j71
-BjUy51covIlryQPTy9ERa+zraeF3fW0GvW4AAAGC7iQO7gAABAMASDBGAiEA6SGF
-6tt1nsu2eIb92knbIJUQlUCULwSp4carZRPotPYCIQD3sVfKDuLt/e79oA99p05f
-uNsgSOYdGrVQXKCzJCazQzAYBgNVHREEETAPgg1pcm9kcy5pdDRpLmN6MA0GCSqG
-SIb3DQEBDAUAA4ICAQBiwD3C0Tw3O6OenTt6FOrqJuRsT1FuEHDznptmJhXJHQ94
-lK2IiJ77F9kWQDcl1nE4PEtyJMOffKfNu0LQQt7ntkuzoqwWYBkZq8cA8EeZtB8u
-cVqR7EP3Zdw70UBNBFl7pu2Nm5J+nFcyvC/c4XdU62S9VkGfxFuj3BE9/N9kfkrv
-kWmbMCikaDfYfiyV2ZNoV32RHPxUcm5CtcvetjVaI7pkumNOMfJbuA3jyOewOlzf
-g8iL6j2gNvrXs0RbUXxq0L1xGA5yFAD83X0dxixIkB8diYlkws0V5gjNz/L5KuIK
-4BpHcqDjaE8D1GgW5DW6ufT6XeWVsrjqYraUrmDwdJZmzL6g328mQKiOz1WLXijq
-RMN8/gz9PQl8f3p6dDVev4nodTs1eYTwQCxlrtXNJPSydiHsLD00v9hu1sFKB1TC
-G7PMJoSrJ2oZooR9XZhZ4UMLVfbeoL179hGH07/7DKQWJoQlpwjqpZ9ksdAKAhxp
-DU1t5HCr0uQigWNC1jc7Bc7Rwer+SuL8ojcn914CDJl54ERwJAtfrfLznd/rrpAc
-0DbYer02+6JYc84p3hOVo3/CI1UFGoj2f5VkWATBX68aGnQKRglC6OBVYidz8n6Z
-IJhFSMiOcPhit9GQb2nO30HzBMSQhNGsw+Kbvw0UpuRtRQfni0PjANOZy3gB2g==
------END CERTIFICATE-----
-
-# subject: C=NL, O=GEANT Vereniging, CN=GEANT OV RSA CA 4
-# issuer:  C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
-# SHA256 Fingerprint: 37:83:4f:a5:ea:40:fb:f7:b6:11:96:95:59:62:e1:ca:05:58:87:24:35:e4:20:66:53:d3:f6:20:dd:8e:98:8e
------BEGIN CERTIFICATE-----
-MIIG5TCCBM2gAwIBAgIRANpDvROb0li7TdYcrMTz2+AwDQYJKoZIhvcNAQEMBQAw
-gYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpOZXcgSmVyc2V5MRQwEgYDVQQHEwtK
-ZXJzZXkgQ2l0eTEeMBwGA1UEChMVVGhlIFVTRVJUUlVTVCBOZXR3b3JrMS4wLAYD
-VQQDEyVVU0VSVHJ1c3QgUlNBIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTIw
-MDIxODAwMDAwMFoXDTMzMDUwMTIzNTk1OVowRDELMAkGA1UEBhMCTkwxGTAXBgNV
-BAoTEEdFQU5UIFZlcmVuaWdpbmcxGjAYBgNVBAMTEUdFQU5UIE9WIFJTQSBDQSA0
-MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEApYhi1aEiPsg9ZKRMAw9Q
-r8Mthsr6R20VSfFeh7TgwtLQi6RSRLOh4or4EMG/1th8lijv7xnBMVZkTysFiPmT
-PiLOfvz+QwO1NwjvgY+Jrs7fSoVA/TQkXzcxu4Tl3WHi+qJmKLJVu/JOuHud6mOp
-LWkIbhODSzOxANJ24IGPx9h4OXDyy6/342eE6UPXCtJ8AzeumTG6Dfv5KVx24lCF
-TGUzHUB+j+g0lSKg/Sf1OzgCajJV9enmZ/84ydh48wPp6vbWf1H0O3Rd3LhpMSVn
-TqFTLKZSbQeLcx/l9DOKZfBCC9ghWxsgTqW9gQ7v3T3aIfSaVC9rnwVxO0VjmDdP
-FNbdoxnh0zYwf45nV1QQgpRwZJ93yWedhp4ch1a6Ajwqs+wv4mZzmBSjovtV0mKw
-d+CQbSToalEUP4QeJq4Udz5WNmNMI4OYP6cgrnlJ50aa0DZPlJqrKQPGL69KQQz1
-2WgxvhCuVU70y6ZWAPopBa1ykbsttpLxADZre5cH573lIuLHdjx7NjpYIXRx2+QJ
-URnX2qx37eZIxYXz8ggM+wXH6RDbU3V2o5DP67hXPHSAbA+p0orjAocpk2osxHKo
-NSE3LCjNx8WVdxnXvuQ28tKdaK69knfm3bB7xpdfsNNTPH9ElcjscWZxpeZ5Iij8
-lyrCG1z0vSWtSBsgSnUyG/sCAwEAAaOCAYswggGHMB8GA1UdIwQYMBaAFFN5v1qq
-K0rPVIDh2JvAnfKyA2bLMB0GA1UdDgQWBBRvHTVJEGwy+lmgnryK6B+VvnF6DDAO
-BgNVHQ8BAf8EBAMCAYYwEgYDVR0TAQH/BAgwBgEB/wIBADAdBgNVHSUEFjAUBggr
-BgEFBQcDAQYIKwYBBQUHAwIwOAYDVR0gBDEwLzAtBgRVHSAAMCUwIwYIKwYBBQUH
-AgEWF2h0dHBzOi8vc2VjdGlnby5jb20vQ1BTMFAGA1UdHwRJMEcwRaBDoEGGP2h0
-dHA6Ly9jcmwudXNlcnRydXN0LmNvbS9VU0VSVHJ1c3RSU0FDZXJ0aWZpY2F0aW9u
-QXV0aG9yaXR5LmNybDB2BggrBgEFBQcBAQRqMGgwPwYIKwYBBQUHMAKGM2h0dHA6
-Ly9jcnQudXNlcnRydXN0LmNvbS9VU0VSVHJ1c3RSU0FBZGRUcnVzdENBLmNydDAl
-BggrBgEFBQcwAYYZaHR0cDovL29jc3AudXNlcnRydXN0LmNvbTANBgkqhkiG9w0B
-AQwFAAOCAgEAUtlC3e0xj/1BMfPhdQhUXeLjb0xp8UE28kzWE5xDzGKbfGgnrT2R
-lw5gLIx+/cNVrad//+MrpTppMlxq59AsXYZW3xRasrvkjGfNR3vt/1RAl8iI31lG
-hIg6dfIX5N4esLkrQeN8HiyHKH6khm4966IkVVtnxz5CgUPqEYn4eQ+4eeESrWBh
-AqXaiv7HRvpsdwLYekAhnrlGpioZ/CJIT2PTTxf+GHM6cuUnNqdUzfvrQgA8kt1/
-ASXx2od/M+c8nlJqrGz29lrJveJOSEMX0c/ts02WhsfMhkYa6XujUZLmvR1Eq08r
-48/EZ4l+t5L4wt0DV8VaPbsEBF1EOFpz/YS2H6mSwcFaNJbnYqqJHIvm3PLJHkFm
-EoLXRVrQXdCT+3wgBfgU6heCV5CYBz/YkrdWES7tiiT8sVUDqXmVlTsbiRNiyLs2
-bmEWWFUl76jViIJog5fongEqN3jLIGTG/mXrJT1UyymIcobnIGrbwwRVz/mpFQo0
-vBYIi1k2ThVh0Dx88BbF9YiP84dd8Fkn5wbE6FxXYJ287qfRTgmhePecPc73Yrzt
-apdRcsKVGkOpaTIJP/l+lAHRLZxk/dUtyN95G++bOSQqnOCpVPabUGl2E/OEyFrp
-Ipwgu2L/WJclvd6g+ZA/iWkLSMcpnFb+uX6QBqvD6+RNxul1FaB5iHY=
------END CERTIFICATE-----
-# subject: C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
-# issuer:  C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
-# SHA256 Fingerprint: e7:93:c9:b0:2f:d8:aa:13:e2:1c:31:22:8a:cc:b0:81:19:64:3b:74:9c:89:89:64:b1:74:6d:46:c3:d4:cb:d2
------BEGIN CERTIFICATE-----
-MIIF3jCCA8agAwIBAgIQAf1tMPyjylGoG7xkDjUDLTANBgkqhkiG9w0BAQwFADCB
-iDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCk5ldyBKZXJzZXkxFDASBgNVBAcTC0pl
-cnNleSBDaXR5MR4wHAYDVQQKExVUaGUgVVNFUlRSVVNUIE5ldHdvcmsxLjAsBgNV
-BAMTJVVTRVJUcnVzdCBSU0EgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwHhcNMTAw
-MjAxMDAwMDAwWhcNMzgwMTE4MjM1OTU5WjCBiDELMAkGA1UEBhMCVVMxEzARBgNV
-BAgTCk5ldyBKZXJzZXkxFDASBgNVBAcTC0plcnNleSBDaXR5MR4wHAYDVQQKExVU
-aGUgVVNFUlRSVVNUIE5ldHdvcmsxLjAsBgNVBAMTJVVTRVJUcnVzdCBSU0EgQ2Vy
-dGlmaWNhdGlvbiBBdXRob3JpdHkwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIK
-AoICAQCAEmUXNg7D2wiz0KxXDXbtzSfTTK1Qg2HiqiBNCS1kCdzOiZ/MPans9s/B
-3PHTsdZ7NygRK0faOca8Ohm0X6a9fZ2jY0K2dvKpOyuR+OJv0OwWIJAJPuLodMkY
-tJHUYmTbf6MG8YgYapAiPLz+E/CHFHv25B+O1ORRxhFnRghRy4YUVD+8M/5+bJz/
-Fp0YvVGONaanZshyZ9shZrHUm3gDwFA66Mzw3LyeTP6vBZY1H1dat//O+T23LLb2
-VN3I5xI6Ta5MirdcmrS3ID3KfyI0rn47aGYBROcBTkZTmzNg95S+UzeQc0PzMsNT
-79uq/nROacdrjGCT3sTHDN/hMq7MkztReJVni+49Vv4M0GkPGw/zJSZrM233bkf6
-c0Plfg6lZrEpfDKEY1WJxA3Bk1QwGROs0303p+tdOmw1XNtB1xLaqUkL39iAigmT
-Yo61Zs8liM2EuLE/pDkP2QKe6xJMlXzzawWpXhaDzLhn4ugTncxbgtNMs+1b/97l
-c6wjOy0AvzVVdAlJ2ElYGn+SNuZRkg7zJn0cTRe8yexDJtC/QV9AqURE9JnnV4ee
-UB9XVKg+/XRjL7FQZQnmWEIuQxpMtPAlR1n6BB6T1CZGSlCBst6+eLf8ZxXhyVeE
-Hg9j1uliutZfVS7qXMYoCAQlObgOK6nyTJccBz8NUvXt7y+CDwIDAQABo0IwQDAd
-BgNVHQ4EFgQUU3m/WqorSs9UgOHYm8Cd8rIDZsswDgYDVR0PAQH/BAQDAgEGMA8G
-A1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQEMBQADggIBAFzUfA3P9wF9QZllDHPF
-Up/L+M+ZBn8b2kMVn54CVVeWFPFSPCeHlCjtHzoBN6J2/FNQwISbxmtOuowhT6KO
-VWKR82kV2LyI48SqC/3vqOlLVSoGIG1VeCkZ7l8wXEskEVX/JJpuXior7gtNn3/3
-ATiUFJVDBwn7YKnuHKsSjKCaXqeYalltiz8I+8jRRa8YFWSQEg9zKC7F4iRO/Fjs
-8PRF/iKz6y+O0tlFYQXBl2+odnKPi4w2r78NBc5xjeambx9spnFixdjQg3IM8WcR
-iQycE0xyNN+81XHfqnHd4blsjDwSXWXavVcStkNr/+XeTWYRUc+ZruwXtuhxkYze
-Sf7dNXGiFSeUHM9h4ya7b6NnJSFd5t0dCy5oGzuCr+yDZ4XUmFF0sbmZgIn/f3gZ
-XHlKYC6SQK5MNyosycdiyA5d9zZbyuAlJQG03RoHnHcAP9Dc1ew91Pq7P8yF1m9/
-qS3fuQL39ZeatTXaw2ewh0qpKJ4jjv9cJ2vhsE/zB+4ALtRZh8tSQZXq9EfX7mRB
-VXyNWQKV3WKdwrnuWih0hKWbt5DHDAff9Yk2dDLWKMGwsAvgnEzDHNb842m1R0aB
-L6KCq9NjRHDEjf8tM7qtj3u1cIiuPhnPQCjY/MiQu12ZIvVS5ljFH4gxQ+6IHdfG
-jjxDah2nGN59PRbxYvnKkKj9
------END CERTIFICATE-----

docs.it4i/irods1.it4i.cz.crt

------BEGIN CERTIFICATE-----
-MIIHezCCBWOgAwIBAgIQWi8LC+shJ7H9XiWIJYC/JDANBgkqhkiG9w0BAQwFADBE
-MQswCQYDVQQGEwJOTDEZMBcGA1UEChMQR0VBTlQgVmVyZW5pZ2luZzEaMBgGA1UE
-AxMRR0VBTlQgT1YgUlNBIENBIDQwHhcNMjEwOTI0MDAwMDAwWhcNMjIwOTI0MjM1
-OTU5WjCBiTELMAkGA1UEBhMCQ1oxHjAcBgNVBAgMFU1vcmF2c2tvc2xlenNrw70g
-a3JhajFBMD8GA1UECgw4Vnlzb2vDoSDFoWtvbGEgYsOhxYhza8OhIC0gVGVjaG5p
-Y2vDoSB1bml2ZXJ6aXRhIE9zdHJhdmExFzAVBgNVBAMTDmlyb2RzMS5pdDRpLmN6
-MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDpgPV2UhQ1Mebx75zxj
-LVmIw60KXTMucsFVvmcLAKzqT82BeBCml+/TQBWQPJstdMiui/ll+E6+wXl2L47V
-5Yyz7bx1bYg4IXPmyhpqG/MJbbGTmheYd87PwoX3zygppOsgwvK9rsY3mdrQqXmA
-Fx7+oaRizO23nSSx2H7/PqiL/wQu/mYW/uoSKkJw1dAPUynTKwXlOetQZ4GM5TtO
-EWDzMvzG8HqLRjjtEg7I0iL3LkKnOGWIHYSIFy9itF55HS7gNmIdgpCIHi/YLW2U
-cFuTcZpWuJF64wCmBkVyvcw+nTXIXV+5jIg9wRXNbyjda/HO5o6Kjg93PJl7khmb
-bQIDAQABo4IDITCCAx0wHwYDVR0jBBgwFoAUbx01SRBsMvpZoJ68iugflb5xegww
-HQYDVR0OBBYEFE0wy9WZZpkR0e+S28ZcNlbzLD6kMA4GA1UdDwEB/wQEAwIFoDAM
-BgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBJBgNV
-HSAEQjBAMDQGCysGAQQBsjEBAgJPMCUwIwYIKwYBBQUHAgEWF2h0dHBzOi8vc2Vj
-dGlnby5jb20vQ1BTMAgGBmeBDAECAjA/BgNVHR8EODA2MDSgMqAwhi5odHRwOi8v
-R0VBTlQuY3JsLnNlY3RpZ28uY29tL0dFQU5UT1ZSU0FDQTQuY3JsMHUGCCsGAQUF
-BwEBBGkwZzA6BggrBgEFBQcwAoYuaHR0cDovL0dFQU5ULmNydC5zZWN0aWdvLmNv
-bS9HRUFOVE9WUlNBQ0E0LmNydDApBggrBgEFBQcwAYYdaHR0cDovL0dFQU5ULm9j
-c3Auc2VjdGlnby5jb20wggF+BgorBgEEAdZ5AgQCBIIBbgSCAWoBaAB2AEalVet1
-+pEgMLWiiWn0830RLEF0vv1JuIWr8vxw/m1HAAABfBeiEKYAAAQDAEcwRQIhAPfD
-3hi8vipH2M7Sy4BiUgbbAt5ygaqwIFrLz11LEZfoAiAsipZZE8x/qsG39XsESiF5
-TarIMWC/S+gwakdCwmqeSQB2AEHIyrHfIkZKEMahOglCh15OMYsbA+vrS8do8JBi
-lgb2AAABfBeiELoAAAQDAEcwRQIhAM04GehcIEYwIzyrYOuhMztJ2LfvpMTX2vZj
-8nxz78slAiASSx/0AU/HbrJqzIggTslSuoVmqGDCqNhvZs5fwRYNsgB2ACl5vvCe
-OTkh8FZzn2Old+W+V32cYAr4+U1dJlwlXceEAAABfBeiEIgAAAQDAEcwRQIgQiKN
-l8NfIYhHFQT5waJc5BnxX6JzSGDp3QNcHVI0da0CIQDtgYdXXlwJpQxx/5nzOSBa
-qWd0qwtJffQVwbet1qqxcTAZBgNVHREEEjAQgg5pcm9kczEuaXQ0aS5jejANBgkq
-hkiG9w0BAQwFAAOCAgEAbeIYOjIda12Z/wgyf8CFR80JsDuOt48Nel5wi08OMFQj
-0f8qIGJpNtDx3K24ic1Grdep4XpaXRe9uNPYh4rHtc0esj8q1IYcjcmFhKyCWE83
-3QbprXQ1e8ijHBQlxgr+AydMA8YQ1WxTMRUtRAl0FKerXamd+PglByy6vz+p87Ty
-NxCq35An2IjFPM4kWU1trK0M7fq7Wvy7eCVX0iv+UouRcwkFjwCt1yH1X1W5UK7q
-hnozLXkHUca+KFYahsz7gZvfwxdmzMjZF6EZOOnk1UOcAxaukU7oajhf0A7Qufpe
-b/sX/IodIKvBtxX2Iea1F6cf96kfHVvKC3VyF3JXVBqumgjQjC7aLpZrcIFqARbP
-dDreQMbuH8mA313+eU31j6CWPprOWsCdEqFax+wVyRVaA4TrSv6D1F8z1+j/sknk
-+ucBD1JaSeKpjhsl1aPFbdF+d6LCGSjdlLZ1bXwMSdBkYfoEL120Q9lFaUldKVTr
-Jt5QTZQfnCgJPmlE55KVObhbK37If/x4MyJiM2FHf3My9i0HPZ8oKJGPvNNSlqtO
-PnA/CDd+22T2wPeKDAMFPmIzyGt+G4XAW/nP1pIdd9wB2uHGnS+71vY/NGdIdgre
-E5YVezyKONQIrpQjXDpprm0xeEQfJGOg9f09ZTcsFQGdXewdY3TMRxhiEUCEYwY=
------END CERTIFICATE-----
-
-# subject: C=NL, O=GEANT Vereniging, CN=GEANT OV RSA CA 4
-# issuer:  C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
-# SHA256 Fingerprint: 37:83:4f:a5:ea:40:fb:f7:b6:11:96:95:59:62:e1:ca:05:58:87:24:35:e4:20:66:53:d3:f6:20:dd:8e:98:8e
------BEGIN CERTIFICATE-----
-MIIG5TCCBM2gAwIBAgIRANpDvROb0li7TdYcrMTz2+AwDQYJKoZIhvcNAQEMBQAw
-gYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpOZXcgSmVyc2V5MRQwEgYDVQQHEwtK
-ZXJzZXkgQ2l0eTEeMBwGA1UEChMVVGhlIFVTRVJUUlVTVCBOZXR3b3JrMS4wLAYD
-VQQDEyVVU0VSVHJ1c3QgUlNBIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTIw
-MDIxODAwMDAwMFoXDTMzMDUwMTIzNTk1OVowRDELMAkGA1UEBhMCTkwxGTAXBgNV
-BAoTEEdFQU5UIFZlcmVuaWdpbmcxGjAYBgNVBAMTEUdFQU5UIE9WIFJTQSBDQSA0
-MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEApYhi1aEiPsg9ZKRMAw9Q
-r8Mthsr6R20VSfFeh7TgwtLQi6RSRLOh4or4EMG/1th8lijv7xnBMVZkTysFiPmT
-PiLOfvz+QwO1NwjvgY+Jrs7fSoVA/TQkXzcxu4Tl3WHi+qJmKLJVu/JOuHud6mOp
-LWkIbhODSzOxANJ24IGPx9h4OXDyy6/342eE6UPXCtJ8AzeumTG6Dfv5KVx24lCF
-TGUzHUB+j+g0lSKg/Sf1OzgCajJV9enmZ/84ydh48wPp6vbWf1H0O3Rd3LhpMSVn
-TqFTLKZSbQeLcx/l9DOKZfBCC9ghWxsgTqW9gQ7v3T3aIfSaVC9rnwVxO0VjmDdP
-FNbdoxnh0zYwf45nV1QQgpRwZJ93yWedhp4ch1a6Ajwqs+wv4mZzmBSjovtV0mKw
-d+CQbSToalEUP4QeJq4Udz5WNmNMI4OYP6cgrnlJ50aa0DZPlJqrKQPGL69KQQz1
-2WgxvhCuVU70y6ZWAPopBa1ykbsttpLxADZre5cH573lIuLHdjx7NjpYIXRx2+QJ
-URnX2qx37eZIxYXz8ggM+wXH6RDbU3V2o5DP67hXPHSAbA+p0orjAocpk2osxHKo
-NSE3LCjNx8WVdxnXvuQ28tKdaK69knfm3bB7xpdfsNNTPH9ElcjscWZxpeZ5Iij8
-lyrCG1z0vSWtSBsgSnUyG/sCAwEAAaOCAYswggGHMB8GA1UdIwQYMBaAFFN5v1qq
-K0rPVIDh2JvAnfKyA2bLMB0GA1UdDgQWBBRvHTVJEGwy+lmgnryK6B+VvnF6DDAO
-BgNVHQ8BAf8EBAMCAYYwEgYDVR0TAQH/BAgwBgEB/wIBADAdBgNVHSUEFjAUBggr
-BgEFBQcDAQYIKwYBBQUHAwIwOAYDVR0gBDEwLzAtBgRVHSAAMCUwIwYIKwYBBQUH
-AgEWF2h0dHBzOi8vc2VjdGlnby5jb20vQ1BTMFAGA1UdHwRJMEcwRaBDoEGGP2h0
-dHA6Ly9jcmwudXNlcnRydXN0LmNvbS9VU0VSVHJ1c3RSU0FDZXJ0aWZpY2F0aW9u
-QXV0aG9yaXR5LmNybDB2BggrBgEFBQcBAQRqMGgwPwYIKwYBBQUHMAKGM2h0dHA6
-Ly9jcnQudXNlcnRydXN0LmNvbS9VU0VSVHJ1c3RSU0FBZGRUcnVzdENBLmNydDAl
-BggrBgEFBQcwAYYZaHR0cDovL29jc3AudXNlcnRydXN0LmNvbTANBgkqhkiG9w0B
-AQwFAAOCAgEAUtlC3e0xj/1BMfPhdQhUXeLjb0xp8UE28kzWE5xDzGKbfGgnrT2R
-lw5gLIx+/cNVrad//+MrpTppMlxq59AsXYZW3xRasrvkjGfNR3vt/1RAl8iI31lG
-hIg6dfIX5N4esLkrQeN8HiyHKH6khm4966IkVVtnxz5CgUPqEYn4eQ+4eeESrWBh
-AqXaiv7HRvpsdwLYekAhnrlGpioZ/CJIT2PTTxf+GHM6cuUnNqdUzfvrQgA8kt1/
-ASXx2od/M+c8nlJqrGz29lrJveJOSEMX0c/ts02WhsfMhkYa6XujUZLmvR1Eq08r
-48/EZ4l+t5L4wt0DV8VaPbsEBF1EOFpz/YS2H6mSwcFaNJbnYqqJHIvm3PLJHkFm
-EoLXRVrQXdCT+3wgBfgU6heCV5CYBz/YkrdWES7tiiT8sVUDqXmVlTsbiRNiyLs2
-bmEWWFUl76jViIJog5fongEqN3jLIGTG/mXrJT1UyymIcobnIGrbwwRVz/mpFQo0
-vBYIi1k2ThVh0Dx88BbF9YiP84dd8Fkn5wbE6FxXYJ287qfRTgmhePecPc73Yrzt
-apdRcsKVGkOpaTIJP/l+lAHRLZxk/dUtyN95G++bOSQqnOCpVPabUGl2E/OEyFrp
-Ipwgu2L/WJclvd6g+ZA/iWkLSMcpnFb+uX6QBqvD6+RNxul1FaB5iHY=
------END CERTIFICATE-----

docs.it4i/irods_environment.json

@@ -5,7 +5,7 @@
     "irods_zone_name": "IT4I",
     "irods_authentication_scheme": "pam_password",
     "irods_ssl_verify_server": "cert",
-    "irods_ssl_ca_certificate_file": "/usr/local/etc/irods.it4i.cz.crt",
+    "irods_ssl_ca_certificate_file": "~/chain_geant_ov_rsa_ca_4_full.pem",
     "irods_encryption_algorithm": "AES-256-CBC",
     "irods_encryption_key_size": 32,
     "irods_encryption_num_hash_rounds": 16,