kemsta / go-easyrsa / 23586488425

77%

push

travis-ci

V2 (#17)

* Security fixes, dependency updates, and CI migration to GitHub Actions

- Fix private key file permissions: 0644 → 0600 (world-readable keys)
- Fix integer overflow in removeDups: map key int64 → string (hex)
- Fix integer overflow in serial parsing: strconv.ParseInt → big.Int.SetString
- Replace deprecated io/ioutil with os.ReadFile/os.CreateTemp (Go 1.16+)
- Update Go version: 1.18 → 1.25.0; update all dependencies to latest
- Migrate CI: remove .travis.yml, rewrite GitHub Actions workflow
  - Go matrix: 1.17/1.18 → 1.22/1.23
  - Actions updated to v4/v5/v6; add go vet job; coverallsapp v1→v2

* Fix CI Go matrix to match minimum version from go.mod (1.25.0)

* Pin golangci-lint to v2.11.3 (supports Go 1.25+)

* Update golangci-lint-action to v7 (required for golangci-lint v2)

* Replace deprecated CRL APIs with x509.RevocationList

- x509.ParseCRL → x509.ParseRevocationList (storage.go)
- caCert.CreateCRL → x509.CreateRevocationList (pki.go)
- CRLHolder interface: *pkix.CertificateList → *x509.RevocationList
- Switch from pkix.RevokedCertificate to x509.RevocationListEntry
- Replace ioutil in storage_test.go with os

* Add v2 design docs and easy-rsa submodule

- docs/design.md: full v2 library architecture — pluggable storage
  interfaces, semi-open Option pattern, Config with easy-rsa parity,
  PKI method signatures, and env var coverage table
- docs/easyrsa-parity.md: command-to-method mapping table
- subprojects/easy-rsa: git submodule (OpenVPN/easy-rsa) for e2e tests

* Implement full v2 PKI: crypto, fs/memory storage, all PKI methods

- crypto/key.go: GenKey (RSA/ECDSA/Ed25519), MarshalPrivateKey,
  UnmarshalPrivateKey (handles encrypted + PKCS1 fallback), PublicKey
- crypto/dh.go: GenDHParams using safe prime generation
- storage/memory: in-memory implementations of all 5 storage interfaces
- storage/fs: filesystem implementations (easy-rsa-compatible layout)
  - KeyStorage: ca.crt at root, issued/<name>.crt, private/<name>.key,
 ... (continued)

1182 of 2083 new or added lines in 20 files covered. (56.75%)

1182 of 2083 relevant lines covered (56.75%)

35.32 hits per line