108 } opt;  variable
181     opt.filename            = DFL_FILENAME;  in main()
182     opt.password            = DFL_PASSWORD;  in main()
183     opt.debug_level         = DFL_DEBUG_LEVEL;  in main()
184     opt.output_file         = DFL_OUTPUT_FILENAME;  in main()
185     opt.subject_name        = DFL_SUBJECT_NAME;  in main()
186     opt.key_usage           = DFL_KEY_USAGE;  in main()
187     opt.force_key_usage     = DFL_FORCE_KEY_USAGE;  in main()
188     opt.ns_cert_type        = DFL_NS_CERT_TYPE;  in main()
189     opt.force_ns_cert_type  = DFL_FORCE_NS_CERT_TYPE;  in main()
190     opt.md_alg              = DFL_MD_ALG;  in main()
191     opt.san_list            = NULL;  in main()
200             opt.filename = q;  in main()
202             opt.password = q;  in main()
204             opt.output_file = q;  in main()
206             opt.debug_level = atoi(q);  in main()
207             if (opt.debug_level < 0 || opt.debug_level > 65535) {  in main()
211             opt.subject_name = q;  in main()
301                     opt.san_list = cur;  in main()
316             opt.md_alg = mbedtls_md_get_type(md_info);  in main()
324                     opt.key_usage |= MBEDTLS_X509_KU_DIGITAL_SIGNATURE;  in main()
326                     opt.key_usage |= MBEDTLS_X509_KU_NON_REPUDIATION;  in main()
328                     opt.key_usage |= MBEDTLS_X509_KU_KEY_ENCIPHERMENT;  in main()
330                     opt.key_usage |= MBEDTLS_X509_KU_DATA_ENCIPHERMENT;  in main()
332                     opt.key_usage |= MBEDTLS_X509_KU_KEY_AGREEMENT;  in main()
334                     opt.key_usage |= MBEDTLS_X509_KU_KEY_CERT_SIGN;  in main()
336                     opt.key_usage |= MBEDTLS_X509_KU_CRL_SIGN;  in main()
345                 case 0: opt.force_key_usage = 0; break;  in main()
346                 case 1: opt.force_key_usage = 1; break;  in main()
356                     opt.ns_cert_type |= MBEDTLS_X509_NS_CERT_TYPE_SSL_CLIENT;  in main()
358                     opt.ns_cert_type |= MBEDTLS_X509_NS_CERT_TYPE_SSL_SERVER;  in main()
360                     opt.ns_cert_type |= MBEDTLS_X509_NS_CERT_TYPE_EMAIL;  in main()
362                     opt.ns_cert_type |= MBEDTLS_X509_NS_CERT_TYPE_OBJECT_SIGNING;  in main()
364                     opt.ns_cert_type |= MBEDTLS_X509_NS_CERT_TYPE_SSL_CA;  in main()
366                     opt.ns_cert_type |= MBEDTLS_X509_NS_CERT_TYPE_EMAIL_CA;  in main()
368                     opt.ns_cert_type |= MBEDTLS_X509_NS_CERT_TYPE_OBJECT_SIGNING_CA;  in main()
377                 case 0: opt.force_ns_cert_type = 0; break;  in main()
378                 case 1: opt.force_ns_cert_type = 1; break;  in main()
387     mbedtls_x509write_csr_set_md_alg(&req, opt.md_alg);  in main()
390     if (opt.key_usage || opt.force_key_usage == 1) {  in main()
391         ret = mbedtls_x509write_csr_set_key_usage(&req, opt.key_usage);  in main()
400     if (opt.ns_cert_type || opt.force_ns_cert_type == 1) {  in main()
401         ret = mbedtls_x509write_csr_set_ns_cert_type(&req, opt.ns_cert_type);  in main()
410     if (opt.san_list != NULL) {  in main()
411         ret = mbedtls_x509write_csr_set_subject_alternative_name(&req, opt.san_list);  in main()
442     if ((ret = mbedtls_x509write_csr_set_subject_name(&req, opt.subject_name)) != 0) {  in main()
455     ret = mbedtls_pk_parse_keyfile(&key, opt.filename, opt.password,  in main()
473     if ((ret = write_certificate_request(&req, opt.output_file,  in main()
503     cur = opt.san_list;  in main()