Implement RFC4055 compliance, OCSP support, and policy enhancements

.github/workflows/ci.yml

@@ -15,28 +15,27 @@ jobs:
     name: Lint
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - name: Set up Go
-        uses: actions/setup-go@v5
+        uses: actions/setup-go@v6
         with:
           go-version-file: go.mod
           cache: true
 
       - name: Run golangci-lint
-        uses: golangci/golangci-lint-action@v6
+        uses: golangci/golangci-lint-action@v7
         with:
-          version: latest
-          cache: true
+          version: v2.12.2
 
   unit-tests:
     name: Unit Tests
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - name: Set up Go
-        uses: actions/setup-go@v5
+        uses: actions/setup-go@v6
         with:
           go-version-file: go.mod
           cache: true
@@ -45,7 +44,7 @@ jobs:
         run: go test -v -race -coverprofile=coverage.out -covermode=atomic $(go list ./... | grep -v '/tests$')
 
       - name: Upload coverage to Codecov
-        uses: codecov/codecov-action@v4
+        uses: codecov/codecov-action@v6
         with:
           files: ./coverage.out
           fail_ci_if_error: false
@@ -57,10 +56,10 @@ jobs:
     name: Integration Tests
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - name: Set up Go
-        uses: actions/setup-go@v5
+        uses: actions/setup-go@v6
         with:
           go-version-file: go.mod
           cache: true

.gitignore

@@ -1,5 +1,5 @@
 # Binaries
-pcl
+/pcl
 *.exe
 *.exe~
 *.dll

.golangci.yml

@@ -1,59 +1,56 @@
+version: "2"
+
 run:
   timeout: 5m
   modules-download-mode: readonly
 
 linters:
   enable:
     - errcheck
-    - gosimple
     - govet
     - ineffassign
     - staticcheck
     - unused
-    - gofmt
-    - goimports
     - misspell
     - unconvert
     - gosec
     - prealloc
 
-linters-settings:
-  errcheck:
-    check-type-assertions: true
-    check-blank: false
-
-  govet:
-    disable:
-      - fieldalignment
-
-  gofmt:
-    simplify: true
-
-  goimports:
-    local-prefixes: github.com/cavoq/PCL
-
-  misspell:
-    locale: US
-
-  gosec:
-    excludes:
-      - G104
-      - G304
-      - G306
-
-  staticcheck:
-    checks:
-      - all
-      - -SA1019
+  settings:
+    errcheck:
+      check-type-assertions: true
+      check-blank: false
+
+    govet:
+      disable:
+        - fieldalignment
+
+    misspell:
+      locale: US
+
+    gosec:
+      excludes:
+        - G104  # Errors unhandled (deferred close)
+        - G107  # URL from variable — intentional in fetchers
+        - G115  # Integer overflow in byte conversions — ASN.1 encoding
+        - G301  # Dir permissions 0750+ — acceptable for public data dirs
+        - G304  # File path via variable — intentional throughout
+        - G306  # File permissions — 0644 is intentional for cert/policy files
+
+    staticcheck:
+      checks:
+        - all
+        - -SA1019
+
+  exclusions:
+    rules:
+      - path: _test\.go
+        linters:
+          - gosec
+          - unparam
+          - errcheck
+          - prealloc
 
 issues:
-  exclude-use-default: false
   max-issues-per-linter: 0
   max-same-issues: 0
-
-  exclude-rules:
-    - path: _test\.go
-      linters:
-        - gosec
-        - unparam
-        - errcheck