Jan Čermák b7bb667e35 Add CI check for sufficient validity of the OTA signing certificate (#4751) ...

* Add CI check for sufficient validity of the OTA signing certificate

To ensure that we don't miss expiration of the signing certificate, add
a CI check that checks its validity and validity of the full chain of
trust, ensuring CA doesn't expire either. Currently set to 25 months,
which should be enough to allow migration of existing devices to new CA
and allow some wiggle room for upgrades and downgrades.

Refs #4743

* Find real issuer when walking the chain

* Add number of certs checked to the suceess message

2026-06-08 17:31:55 +02:00

..

check-kernel-patches.sh

…

check-signing-validity.sh

…

enter.sh

…

entry.sh

…

update-dtb.sh

…

update-firmware-rpi.sh

…

update-kernel-rpi.sh

…

update-kernel-upstream.sh

…