Add support for mutual TLS authentication. This is the preferred method
of authentication for bosch-iot-suite and the only one that allows you to
keep the authenticator in a (f)TPM.

Optionally, an Openssl engine can be configured if required for access to
the ssl private key.

Signed-off-by: Robin van der Gracht <[email protected]>

Signed-off-by: Robin van der Gracht <[email protected]>

libcairo2-dev is required for building the pycairo wheel which is
a dependency for pygobject.

Signed-off-by: Robin van der Gracht <[email protected]>

Dictionaries can't contain multiple items with the same key. This prevents
removal of multiple options from the same config section.

Signed-off-by: Florian Bezannier <[email protected]>
Signed-off-by: Robin van der Gracht <[email protected]>

This option makes Hawkbit take the x-forward headers into account.

Signed-off-by: Florian Bezannier <[email protected]>
Signed-off-by: Robin van der Gracht <[email protected]>

Signed-off-by: Florian Bezannier <[email protected]>
Signed-off-by: Robin van der Gracht <[email protected]>

Signed-off-by: Florian Bezannier <[email protected]>
Signed-off-by: Robin van der Gracht <[email protected]>

Based on the work of Florain Bezannier.
Changes are that the client key and certificate are now provided to the
rauc_dbus_dummy by rauc-hawkbit-updater through arguments of the
InstallBundle method call (for streaming installations).
This also removes the need for a separate mtls rauc_dbus_dummy fixture.

Signed-off-by: Robin van der Gracht <[email protected]>