This test creates an alternate swupd root certificate. If one already
exists, back it up, and restore it when the test is done. Previously,
this test just blindly deleted the certificate if it existed.

We already detect and report that certain tests require at least two
builds within the current format, but only one exists. Change that from
a test *failure* to a *skip*.

Example:
 We need at least 2 versions in format 38 to continue with this test
 Test teardown complete.
 not ok 2 RCT002: Repair a big system
 # (from function `test_setup' in file test/real_content/real_content_lib.bash, line 144,
 #  from function `setup' in test file test/real_content/../functional/testlib.bash, line 4647)
 #   `test_setup' failed
 #

becomes:
 ok 2 RCT002: Repair a big system # skip We need at least 2 versions in format 38 to continue with this test

The previous method for wrapping ssl was removed so update to the
replacement version.

Signed-off-by: William Douglas <[email protected]>

Enable an alternative swupd certificate location (the location of the
default or given cert with an ".alt" appended to it). The purpose of
this change is to allow more reliable and flexible key rotations.

If either the main cert or alt cert fails when doing content
verification then the other will be tried (and be used for the next
operation). In this way, as long as both certs don't fail for the same
content verification, progress can be made with either cert.

Signed-off-by: William Douglas <[email protected]>

- Add support for a second signing certificate
- Test fixes

Signed-off-by: William Douglas <[email protected]>