Some host machine managers will provide their VCEK/ASK/ARK certificates
in PEM format, so we should work with that possibility.

Un-exports verify.VcekDER since it should not be depended on.

This change also removes some debug printfs that were mistakenly left
in.

Signed-off-by: Dionna Glaze <dionnaglaze@google.com>

Allow PEM format certificates

Collection of the product information uses the Device interface to allow
for testing on non-SEV-SNP machines. The LinuxDevice will use CPUID
information.

Verification now uses product information from either the attestation or
the verification options. The option value takes precedence. When both
are missing, then the library defaults to the first version that was
available for use: "Milan-B0".

This extends the support of products to Genoa, but does not yet include
the embedded AMD root and intermediate certificates for Genoa.

Fixes Issue#11 and Issue#64.

Signed-off-by: Dionna Glaze <dionnaglaze@google.com>

Improve product handling in attestations

Signed-off-by: Fabian Kammel <fabian.kammel@control-plane.io>

…or user.

Signed-off-by: Fabian Kammel <fabian@kammel.dev>

Signed-off-by: Fabian Kammel <fabian@kammel.dev>

Signed-off-by: Fabian Kammel <fabian@kammel.dev>

Signed-off-by: Fabian Kammel <fabian@kammel.dev>

Signed-off-by: Fabian Kammel <fabian@kammel.dev>

fix link to AMD docs

Signed-off-by: Fabian Kammel <fabian@kammel.dev>

Make error when getting certificates more transparent for user

Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com>

fix: Use reported TCB when fetching VCEK

Fix `TrustedKeyKeys` typo