made recommended edits to ssl pages

Author: jennyowen

modules/ROOT/pages/security/ssl-fips-compatibility.adoc

@@ -6,28 +6,17 @@
 
 Federal Information Processing Standards (FIPS) 140 is a U.S. government standard established by the National Institute of Standards and Technology (NIST) which is used to accredit cryptographic modules such as those used in TLS network encryption.  While FIPS 140 compliance is primarily required for federal agencies and their contractors, it also is used in the healthcare sector under regulations like the Health Insurance Portability and Accountability Act (HIPAA) to protect patient data.
 
-For more information see:
-
-* https://cloudsecurityalliance.org/blog/2023/03/23/what-is-fips-140-and-what-does-it-mean-to-be-fips-compliant
-* https://csrc.nist.gov/pubs/fips/140-2/upd2/final
-
-This is a guide to help configure Neo4j to use TLS / SSL encryption in a FIPS compatible way.
+This is a guide to help configure Neo4j to use TLS / SSL encryption in a FIPS-compatible way.
 It is supplementary to the xref:security/ssl-framework.adoc[] documentation, as many of the configuration processes and requirements are the same.
 
-// . Enable a FIPS certified cryptographic provider
-// . Generate SSL certificate and private key xref:security/ssl-framework.adoc#ssl-certificates[instructions]
-// . Configure Neo4j to use SSL for all network connections xref:security/ssl-framework.adoc#ssl-configuration[]
-// . Setup a non-native authentication provider, for example LDAP or SSO. xref:authentication-authorization/index.adoc[]
-// . verify?
-
 
 == Prerequisites
 
-* Verify that the machine running Neo4j has FIPS compatible hardware and operating system.
+* Verify that the machine running Neo4j has FIPS-compatible hardware and operating system.
 Only xref:installation/requirements.adoc#deployment-requirements-software[Linux operating systems] are supported for Neo4j FIPS compatibility at this time.
 * Neo4j Enterprise 5.23.0 or later.
 * Install and configure a non-native authentication provider, for example LDAP or SSO. See xref:authentication-authorization/index.adoc[].
-// * Follow the xref:security/checklist.adoc[] to ensure good security practices.
+
 
 == Enable FIPS SSL Provider (Docker)
 
@@ -102,7 +91,7 @@ dnf install -y apr
 
 === Install OpenSSL
 
-Instructions on how to build and install a FIPS compatible OpenSSL are out of scope for this document. Installation steps can differ depending on operating system, and other security requirements you might have for OpenSSL.
+Instructions on how to build and install a FIPS-compatible OpenSSL are out of scope for this document. Installation steps can differ depending on operating system, and other security requirements you might have for OpenSSL.
 
 In general:
 
@@ -112,14 +101,6 @@ In general:
 +
 See: https://docs.openssl.org/master/man7/fips_module/
 
-OpenSSL documentation can be found at:
-
-* https://openssl-library.org/
-
-and on the project's Github page:
-
-* https://github.com/openssl/openssl
-
 
 === Install correct `netty-tcnative` library
 
@@ -166,16 +147,16 @@ unzip -d /tmp <NEO4J_LIB>/netty-tcnative/netty-tcnative-*-linux-$(arch)-fedora.j
 ldd /tmp/META-INF/native/libnetty_tcnative_linux_$(arch).so
 rm -rf /tmp/META-INF
 ----
-The `ldd` command will show a list of library dependencies and where they will be loaded from on the local machine.
-** If any dependencies are missing, they must be installed or Neo4j will fail to run.
+The `ldd` command shows a list of library dependencies and where they are loaded from on the local machine.
+** If any dependencies are missing, they must be installed, or Neo4j will fail to run.
 ** The `libssl.so` and `libcrypto.so` libraries listed must be the ones installed with OpenSSL in the previous steps.
 +
-. Copy the verified jar to _<NEO4J_LIB>_.
+. Copy the verified JAR file to _<NEO4J_LIB>_.
 +
 [NOTE]
 ====
-Only copy *one* of the jars, otherwise Neo4j will not be able to resolve dependencies at runtime.
-The error, if this happens, will contain a message like:
+Only copy *one* of the JAR files. Otherwise Neo4j will not be able to resolve dependencies at runtime.
+In case of this error, you will get a message like:
 [source]
 ----
 "Failed to load any of the given libraries: [netty_tcnative_linux_x86_64, netty_tcnative_linux_x86_64_fedora, netty_tcnative_x86_64, netty_tcnative]".

modules/ROOT/pages/security/ssl-framework.adoc

@@ -20,7 +20,7 @@ Each version of Neo4j ships with a version of Netty, and Netty requires a specif
 
 Follow these steps to use OpenSSL:
 
-* Install a suitable `netty-tcnative` dependency into the `plugins/` folder of Neo4j.
+* Install a suitable `netty-tcnative` dependency into the `plugins/` directory of Neo4j.
 ** Dependencies can be downloaded from https://netty.io/wiki/forked-tomcat-native.html.
 ** Which `netty-tcnative` version you need depends upon the Neo4j version.
 For versioning details, see the <<table, Netty support per Neo4j version>> table.