301     char *p, *q, *r;  in main()  local
377         if ((q = strchr(p, '=')) == NULL) {  in main()
380         *q++ = '\0';  in main()
383             opt.request_file = q;  in main()
385             opt.subject_key = q;  in main()
387             opt.issuer_key = q;  in main()
389             opt.subject_pwd = q;  in main()
391             opt.issuer_pwd = q;  in main()
393             opt.issuer_crt = q;  in main()
395             opt.output_file = q;  in main()
397             opt.subject_name = q;  in main()
399             opt.issuer_name = q;  in main()
401             opt.not_before = q;  in main()
403             opt.not_after = q;  in main()
410             opt.serial = q;  in main()
417             opt.serial_hex = q;  in main()
419             opt.authority_identifier = atoi(q);  in main()
426             opt.subject_identifier = atoi(q);  in main()
433             opt.basic_constraints = atoi(q);  in main()
441                 mbedtls_md_info_from_string(q);  in main()
448             opt.version = atoi(q);  in main()
455             opt.selfsign = atoi(q);  in main()
461             opt.is_ca = atoi(q);  in main()
467             opt.max_pathlen = atoi(q);  in main()
473             while (q != NULL) {  in main()
474                 if ((r = strchr(q, ',')) != NULL) {  in main()
478                 if (strcmp(q, "digital_signature") == 0) {  in main()
480                 } else if (strcmp(q, "non_repudiation") == 0) {  in main()
482                 } else if (strcmp(q, "key_encipherment") == 0) {  in main()
484                 } else if (strcmp(q, "data_encipherment") == 0) {  in main()
486                 } else if (strcmp(q, "key_agreement") == 0) {  in main()
488                 } else if (strcmp(q, "key_cert_sign") == 0) {  in main()
490                 } else if (strcmp(q, "crl_sign") == 0) {  in main()
497                 q = r;  in main()
502             while (q != NULL) {  in main()
503                 if ((r = strchr(q, ',')) != NULL) {  in main()
509                 if (strcmp(q, "serverAuth") == 0) {  in main()
511                 } else if (strcmp(q, "clientAuth") == 0) {  in main()
513                 } else if (strcmp(q, "codeSigning") == 0) {  in main()
515                 } else if (strcmp(q, "emailProtection") == 0) {  in main()
517                 } else if (strcmp(q, "timeStamping") == 0) {  in main()
519                 } else if (strcmp(q, "OCSPSigning") == 0) {  in main()
521                 } else if (strcmp(q, "any") == 0) {  in main()
531                 q = r;  in main()
537             while (q != NULL) {  in main()
539                 r = q;  in main()
572                 if ((subtype_value = strchr(q, ':')) != NULL) {  in main()
579                 if (strcmp(q, "RFC822") == 0) {  in main()
581                 } else if (strcmp(q, "URI") == 0) {  in main()
583                 } else if (strcmp(q, "DNS") == 0) {  in main()
585                 } else if (strcmp(q, "IP") == 0) {  in main()
596                 } else if (strcmp(q, "DN") == 0) {  in main()
616                     q = subtype_value;  in main()
617                     cur->node.san.unstructured_name.p = (unsigned char *) q;  in main()
618                     cur->node.san.unstructured_name.len = strlen(q);  in main()
628                 q = r;  in main()
631             while (q != NULL) {  in main()
632                 if ((r = strchr(q, ',')) != NULL) {  in main()
636                 if (strcmp(q, "ssl_client") == 0) {  in main()
638                 } else if (strcmp(q, "ssl_server") == 0) {  in main()
640                 } else if (strcmp(q, "email") == 0) {  in main()
642                 } else if (strcmp(q, "object_signing") == 0) {  in main()
644                 } else if (strcmp(q, "ssl_ca") == 0) {  in main()
646                 } else if (strcmp(q, "email_ca") == 0) {  in main()
648                 } else if (strcmp(q, "object_signing_ca") == 0) {  in main()
655                 q = r;  in main()
658             if (strcmp(q, "der") == 0) {  in main()
660             } else if (strcmp(q, "pem") == 0) {  in main()