m/test/swptm/swtpm_cert: init
This is a Go reimplementaiton of swtpm_cert from upstream swtpm.
Change-Id: I5738709fbe9512cfb3c853622f0ff6655506e9a9
Reviewed-on: https://review.monogon.dev/c/monogon/+/3129
Reviewed-by: Lorenz Brun <lorenz@monogon.tech>
Tested-by: Jenkins CI
diff --git a/metropolis/test/swtpm/README.md b/metropolis/test/swtpm/README.md
index e00892e..6aab10f 100644
--- a/metropolis/test/swtpm/README.md
+++ b/metropolis/test/swtpm/README.md
@@ -24,6 +24,14 @@
some tools to rip out GnuTLS support, and by replacing other with native Go
reimplementations.
+swtpm_cert
+----------
+
+This is a reimplementation of swtpm_cert in Go. The upstream swtpm_cert is implemented in C and has a hard dependency on
+GnuTLS and libtasn1. Rewriting it in Go and using plain stdlib functions seems like the correct solution here (the
+alternative being either bringing in GnuTLS/libtasn1 into `third_party`, or rewriting swtpm_cert to use
+OpenSSL/BoringSSL).
+
certtool
--------