pins: add future root / leaf keys to pin list

LastPass will soon be updating some of its certificates and
keys.  In order to maintain continuity before and after the
changes, add pins for the not-yet-in-place certificates.

As I do not yet know exactly what the chain will look like,
I've included all of the pubkeys from the probable root,
as well as the leaf certs just in case another provider is
used.  When the final chain is in place, we'll reduce this
list to a smaller set.

Backported from master

Signed-off-by: Bob Copeland <[email protected]>

pins.h

@@ -5,5 +5,19 @@ const char *PK_PINS[] = {
 	"HXXQgxueCIU5TTLHob/bPbwcKOKw6DkfsTWYHbxbqTY=",
 	/* current lastpass.eu primary (AddTrust) */
 	"lCppFqbkrlJ3EcVFAkeip0+44VaoJUymbnOaEUk7tEU=",
+	/* future lastpass root CA (GlobalSign R1) */
+	"K87oWBWM9UZfyddvDfoxL+8lpNyoUB2ptGtn0fv6G2Q=",
+	/* future lastpass root CA (GlobalSign R2) */
+	"iie1VXtL7HzAMF+/PVPR9xzT80kQxdZeJ+zduCB3uj0=",
+	/* future lastpass root CA (GlobalSign R3) */
+	"cGuxAXyFXFkWm61cF4HPWX8S0srS9j0aSqN0k4AP+4A=",
+	/* future lastpass.com primary (leaf) */
+	"0hkr5YW/WE6Nq5hNTcApxpuaiwlwy5HUFiOt3Qd9VBc=",
+	/* future lastpass.com backup (leaf) */
+	"8CzY4qWQKZjFDwHXTOIpsVfWkiVnrhQOJEM4Q2b2Ar4=",
+	/* future lastpass.eu primary (leaf) */
+	"SQAWwwYXoceSd8VNbiyxspGXEjFndkklEO2XzLMts10=",
+	/* future lastpass.eu backup (leaf) */
+	"qr2VCNpUi0PK80PfRyF7lFBIEU1Gzz931k03hrD+xGQ=",
 };
 #endif