Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com>

client: fix Windows builds

While it's useful to provide locally cached certificates for a small
pool of test machines, and to test more generally with KDS, we'd like to
be able to test whether VCEK caching is working correctly. For this, we
explicitly request --test_kds=none, and not just hope that the local
cache doesn't hit.

The --test_use_kds=true value is --test_kds=amd. The false value is
"cache".

Signed-off-by: Dionna Glaze <dionnaglaze@google.com>

go get -u ./...
go mod tidy

I inspected the diffs from the previous releases and they seem okay.

Signed-off-by: Dionna Glaze <dionnaglaze@google.com>

Make test KDS tri-value, deprecate --test_use_kds.

Update dependencies and CI's protobuf version

This changes the AuthorKeyEn report field to a better-named SignerInfo.
The interpretation of this field selects which key the fake signer will
use when signing reports. The VLEK certificate extensions are now
checked against AMD's VLEK specification. The difference is VLEK certs
are like VCEK certs, except the HWID extension is swapped with a CSP_ID
extension.

Tests have been updated to reflect these changes, including new
VLEK-specific test cases.

Signed-off-by: Dionna Glaze <dionnaglaze@google.com>

Add support for validating VLEK certificates