Matthew Jackson
bde416604e
- KeydbSource implements KeySource::host_certs(), delegating to the inherent host_certs() — surfaces the | HC | / | HC2 | certs already parsed from keydb.cfg by libfreemkv's parser, so the OEM cert route collects them across the keysource layer. No new parsing. - OnlineSource::host_certs() is a no-op stub: returns empty with zero network access (no client fetch, no server endpoint). Online host-cert serving is deferred. TODO(owner) marker left in place. Tests: trait host_certs returns the keydb HC row; empty when keydb missing; online host_certs is an empty no-op without network.