Return ResetRequired for certificate retrieval

[steven-bellock]

If a SET_CERTIFICATE request results in ResetRequired then subsequent GET_CERTIFICATE requests for that slot, and GET_DIGESTS, should result in ResetRequired.

Signed-off-by: Steven Bellock [email protected]

[steven-bellock]

@rw8896 to review.

Note that this reset mask should be sticky between GET_VERSIONs, although I haven't tested that yet.

1. SET_CERTIFICATE -> ResetRequired
2. VCA
3. GET_CERTIFICATE ->ResetRequired

[rw8896]

Thanks! It looks good to me.

[jyao1]

Question:
Do we need to update device secret lib sample?
Do we need to update spdm-emu?

[steven-bellock]

Do we need to update device secret lib sample?

Maybe once libspdm_write_certificate_to_nvm has the need_reset parameter.

Do we need to update spdm-emu?

I will check if this breaks spdm-emu.

[steven-bellock]

I will check if this breaks spdm-emu.

It appears to work OK with this change.

[jyao1]

Do we need to update device secret lib sample?

Maybe once libspdm_write_certificate_to_nvm has the need_reset parameter.

Could you please add that?

[steven-bellock]

Could you please add that?

That's a separate issue / pull request.