tree 8232af5f793a1b94bfd9826226d5fbf840c06f00
parent a6e15d069b68a15b2d2946d48e11c80ada9456f6
author laurenw-arm <lauren.wehrmeister@arm.com> 1704854290 -0600
committer laurenw-arm <lauren.wehrmeister@arm.com> 1705605489 -0600

feat(fconf): support signing-key in root cert node

Until now we have only supported describing chain of trusts through the
CoT DTB with a single ROTPK so the signing key for root certificates was
implicit. Therefore signing key was not a supported property in the
root certificates node.

Now we want to extend that to describe CoTs with mulitiple roots of
trust so we need a way to specify for each root certificate with which
ROTPK it should be verified. For that, we reuse the 'signing-key'
property already in use for the non-root certificates, but we make it
optional for root certificates in single-RoT CoTs and for root
certificates signed with the default ROTPK in multi-RoT CoTs.

Change-Id: I41eb6579e8f1d01eaf10480fe5e224d2eed9c736
Signed-off-by: Lauren Wehrmeister <lauren.wehrmeister@arm.com>