Daniel Neus

Is this pull request still WIP or ready for review? :)

Yes, that's correct. There is no support for symmetric algorithms in the PKCS11 wrapper at the moment. Haven't used PKCS#11 with symmetric algorithms to date, but i think the addition...

I think it's a bug. The amalgamation build should include the external headers into `botan_all.h`. What do you think @randombit ?

I understand the baseline requirements in such a way that the `pathLenConstraint` field should be omitted only for root CA certificates. But to be honest, I don't understand why 😅...

> To me the idea that the CA would be influenced by how the requestor signed their request would be even more surprising, tbh. Yes, i think you are right....