feat: adding OCSP revocation implementation

[kody-kimberl]

This PR adds a new package that will perform OCSP revocation checking for a certificate chain.

Based on my design from #132 and the specification here.

This PR addresses part of the following issue:

• [revocation] Implement OCSP support #124

Once it is approved and merged, a second PR will implement this functionality into notation-go.

Signed-off-by: Kody Kimberl [email protected]

[codecov-commenter]

Codecov Report

Merging #134 (2a643ff) into main (010204d) will decrease coverage by 1.00%.
The diff coverage is 82.72%.

📣 This organization is not using Codecov’s GitHub App Integration. We recommend you install it so Codecov can continue to function properly for your repositories. Learn more

@@            Coverage Diff             @@
##             main     #134      +/-   ##
==========================================
- Coverage   90.32%   89.32%   -1.00%     
==========================================
  Files          16       21       +5     
  Lines        1457     1677     +220     
==========================================
+ Hits         1316     1498     +182     
- Misses        110      142      +32     
- Partials       31       37       +6     

Impacted Files	Coverage Δ
signature/types.go	0.00% <0.00%> (ø)
revocation/ocsp/ocsp.go	82.69% <82.69%> (ø)
revocation/ocsp/errors.go	100.00% <100.00%> (ø)
revocation/result/errors.go	100.00% <100.00%> (ø)
revocation/result/results.go	100.00% <100.00%> (ø)
revocation/revocation.go	100.00% <100.00%> (ø)

📣 We’re building smart automated test selection to slash your CI/CD build times. Learn more

[kody-kimberl]

I've made a new commit that address some of the unresolved comments. It may not perfectly address them (as a final decision had not been made for everything), but it should bring many aspects of the implementation closer to everyone's desired solution.

[kody-kimberl]

1.18 is failing due to the incorporation of url.JoinPath (which was added in 1.19) to construct the url instead of adding the strings together. Rather than changing this back (since JoinPath is the better option), @shizhMSFT recommended a new PR to update the Go support window (Issue: #115).

The PR can be found here: #135

[kody-kimberl]

Signing issue is resolved. Somehow two were unsigned. I rebased reworded to add signatures then force pushed it. The diff befor and after the force push is the same (as seen here), so shouldn't require extensive re-review.

[shizhMSFT]

LGTM

[patrickzheng200]

LGTM