tree 4087e745bddca1d2f6ca9d484a91d7e89ba7aeaf
parent c84007725bf3eaa13e7ab14a91ec49013479db1b
author David Drysdale <drysdale@google.com> 1615564187 +0000
committer David Drysdale <drysdale@google.com> 1617005838 +0100

Add more EEK variant tests and related fixes

 - Test with deliberately-invalid EEK in request:
    - corrupt signature
    - missing initial self-signed cert
 - Test with different sizes of EEK chain.

These tests will only really take effect when we have a valid GEEK to
test with.

Other changes:
 - Fix encoding of KeyUsage bitset.
 - Add a made-up allowed-root pubkey for prod mode. This needs to be
   replaced with the real GEEK when available.
 - Fix generateEek() so that the first private key isn't used for
   all signing operations.

Test: VtsHalRemotelyProvisionedComponentTargetTest
Change-Id: I833894d33cd1757b7a0cfcf18f79b61e4e56a556