fix(test): simplify device CA rendezvous trust test flow

Add wrong Device CA cert first (manufacturer cert), verify onboarding
fails, delete it, then add the correct cert. This removes a redundant
fail-delete-readd cycle while preserving the same trust verification
coverage. Also removes unused certs_file variable.

Signed-off-by: Miguel Martín <mmartinv@redhat.com>
Assisted-by: Claude Opus 4.6 <noreply@anthropic.com>

Author: mmartinv

test/ci/test-device-ca-rendezvous-trust.sh

@@ -5,8 +5,6 @@ set -euo pipefail
 source "$(cd -- "$(dirname -- "${BASH_SOURCE[0]}")" &>/dev/null && pwd)/utils.sh"
 source "$(cd -- "$(dirname -- "${BASH_SOURCE[0]}")" &>/dev/null && pwd)/../utils/mgmt-api-v1.sh"
 
-certs_file="${logs_dir}/certs.json"
-
 run_test() {
 
   log_info "Setting the error trap handler"
@@ -52,6 +50,9 @@ run_test() {
   log_info "Sending Ownership Voucher to the Owner"
   send_manufacturer_ov_to_owner "${manufacturer_url}" "${guid}" "${owner_url}"
 
+  log_info "Adding wrong Device CA certificate to rendezvous"
+  add_device_ca_cert "${rendezvous_url}" "${manufacturer_crt}" | jq -r -M .
+
   log_info "Running FIDO Device Onboard (expected to fail)"
   client_timeout=10s
   ! run_fido_device_onboard "${guid}" --debug || log_error "Onboarding must fail!"
@@ -60,20 +61,13 @@ run_test() {
   # server logs are only saved to log files if the test fails.
   get_service_logs "rendezvous" | grep "cryptographic verification failed: x509: certificate signed by unknown authority" || log_error "Rendezvous didn't reject the ownership voucher!"
 
-  log_info "Adding Device CA certificate to rendezvous"
-  add_device_ca_cert "${rendezvous_url}" "${device_ca_crt}" | jq -r -M .
-
   log_info "Get the rendezvous Device CA certificates"
   fingerprint=$(get_device_ca_certs "${rendezvous_url}" | jq -r -M '.certs[0].fingerprint')
 
   log_info "Deleting certificate with fingerprint '${fingerprint}'"
   delete_device_ca_cert "${rendezvous_url}" "${fingerprint}"
 
-  log_info "Running FIDO Device Onboard (expected to fail again)"
-  ! run_fido_device_onboard "${guid}" --debug || log_error "Onboarding must fail!"
-  get_service_logs "rendezvous" | grep "cryptographic verification failed: x509: certificate signed by unknown authority" || log_error "Rendezvous didn't reject the ownership voucher!"
-
-  log_info "Adding Device CA certificate to rendezvous"
+  log_info "Adding correct Device CA certificate to rendezvous"
   add_device_ca_cert "${rendezvous_url}" "${device_ca_crt}" | jq -r -M .
 
   log_info "Running FIDO Device Onboard"