arckoor

Won't compile, needs #4890

@randombit I think this is ready to take a look at. The python binding definitely still needs some attention, and I'm not sure how much more you want me to...

That should be it, I hope I didn't miss anything. I'm not entirely convinced by the allowed `nullptr`s for `hash_fn`, `padding` and `challenge_password` yet though. But I like the new...

I'll wait until #5095 is merged, and then I'm probably going to pick this back up in a bunch of smaller PRs (CRLs, more getters for the Certs, and finally...

Ah, I see what's going on: we [never](https://github.com/randombit/botan/blob/5fbcc7daa2be40fc662e48343882f7abc8827a94/src/lib/x509/x509_ext.cpp#L1303) assert that `unused_bits` is actually something sensible, so nothing is stopping someone from encoding a 32 or larger there and cause the...

I would be in favor of placing the `pyproject.toml` in the top level. All the python scripts are to my knowledge completely hand-formatted, which makes them a bit of a...

For distribution via `pip` I think it would definitely make sense, but should somehow be optional? I.e. I consume basically all my python packages through nixpkgs, and there a prebuilt...

If we're using `ruff` anyway, might as well use `ty`. They are still in beta, but quickly trying it out it works well and the error messages are nicely formatted...

Also, before you merge this, could you take a look at #5095? This is going to cause quite the conflict :p

Maybe as a bit of general feedback for the entire cert creation infrastructure, I'm repeatedly running into the issue of trying to figure out what extensions are already taken care...