154 } opt;  variable
229     opt.issuer_crt          = DFL_ISSUER_CRT;  in main()
230     opt.request_file        = DFL_REQUEST_FILE;  in main()
231     opt.subject_key         = DFL_SUBJECT_KEY;  in main()
232     opt.issuer_key          = DFL_ISSUER_KEY;  in main()
233     opt.subject_pwd         = DFL_SUBJECT_PWD;  in main()
234     opt.issuer_pwd          = DFL_ISSUER_PWD;  in main()
235     opt.output_file         = DFL_OUTPUT_FILENAME;  in main()
236     opt.subject_name        = DFL_SUBJECT_NAME;  in main()
237     opt.issuer_name         = DFL_ISSUER_NAME;  in main()
238     opt.not_before          = DFL_NOT_BEFORE;  in main()
239     opt.not_after           = DFL_NOT_AFTER;  in main()
240     opt.serial              = DFL_SERIAL;  in main()
241     opt.selfsign            = DFL_SELFSIGN;  in main()
242     opt.is_ca               = DFL_IS_CA;  in main()
243     opt.max_pathlen         = DFL_MAX_PATHLEN;  in main()
244     opt.key_usage           = DFL_KEY_USAGE;  in main()
245     opt.ns_cert_type        = DFL_NS_CERT_TYPE;  in main()
256             opt.request_file = q;  in main()
258             opt.subject_key = q;  in main()
260             opt.issuer_key = q;  in main()
262             opt.subject_pwd = q;  in main()
264             opt.issuer_pwd = q;  in main()
266             opt.issuer_crt = q;  in main()
268             opt.output_file = q;  in main()
271             opt.subject_name = q;  in main()
275             opt.issuer_name = q;  in main()
279             opt.not_before = q;  in main()
283             opt.not_after = q;  in main()
287             opt.serial = q;  in main()
291             opt.selfsign = atoi( q );  in main()
292             if( opt.selfsign < 0 || opt.selfsign > 1 )  in main()
297             opt.is_ca = atoi( q );  in main()
298             if( opt.is_ca < 0 || opt.is_ca > 1 )  in main()
303             opt.max_pathlen = atoi( q );  in main()
304             if( opt.max_pathlen < -1 || opt.max_pathlen > 127 )  in main()
315                     opt.key_usage |= MBEDTLS_X509_KU_DIGITAL_SIGNATURE;  in main()
317                     opt.key_usage |= MBEDTLS_X509_KU_NON_REPUDIATION;  in main()
319                     opt.key_usage |= MBEDTLS_X509_KU_KEY_ENCIPHERMENT;  in main()
321                     opt.key_usage |= MBEDTLS_X509_KU_DATA_ENCIPHERMENT;  in main()
323                     opt.key_usage |= MBEDTLS_X509_KU_KEY_AGREEMENT;  in main()
325                     opt.key_usage |= MBEDTLS_X509_KU_KEY_CERT_SIGN;  in main()
327                     opt.key_usage |= MBEDTLS_X509_KU_CRL_SIGN;  in main()
342                     opt.ns_cert_type |= MBEDTLS_X509_NS_CERT_TYPE_SSL_CLIENT;  in main()
344                     opt.ns_cert_type |= MBEDTLS_X509_NS_CERT_TYPE_SSL_SERVER;  in main()
346                     opt.ns_cert_type |= MBEDTLS_X509_NS_CERT_TYPE_EMAIL;  in main()
348                     opt.ns_cert_type |= MBEDTLS_X509_NS_CERT_TYPE_OBJECT_SIGNING;  in main()
350                     opt.ns_cert_type |= MBEDTLS_X509_NS_CERT_TYPE_SSL_CA;  in main()
352                     opt.ns_cert_type |= MBEDTLS_X509_NS_CERT_TYPE_EMAIL_CA;  in main()
354                     opt.ns_cert_type |= MBEDTLS_X509_NS_CERT_TYPE_OBJECT_SIGNING_CA;  in main()
390     if( ( ret = mbedtls_mpi_read_string( &serial, 10, opt.serial ) ) != 0 )  in main()
401     if( !opt.selfsign && strlen( opt.issuer_crt ) )  in main()
409         if( ( ret = mbedtls_x509_crt_parse_file( &issuer_crt, opt.issuer_crt ) ) != 0 )  in main()
425         opt.issuer_name = issuer_name;  in main()
433     if( !opt.selfsign && strlen( opt.request_file ) )  in main()
441         if( ( ret = mbedtls_x509_csr_parse_file( &csr, opt.request_file ) ) != 0 )  in main()
457         opt.subject_name = subject_name;  in main()
467     if( !opt.selfsign && !strlen( opt.request_file ) )  in main()
472         ret = mbedtls_pk_parse_keyfile( &loaded_subject_key, opt.subject_key,  in main()
473                                  opt.subject_pwd );  in main()
487     ret = mbedtls_pk_parse_keyfile( &loaded_issuer_key, opt.issuer_key,  in main()
488                              opt.issuer_pwd );  in main()
498     if( strlen( opt.issuer_crt ) )  in main()
514     if( opt.selfsign )  in main()
516         opt.subject_name = opt.issuer_name;  in main()
526     if( ( ret = mbedtls_x509write_crt_set_subject_name( &crt, opt.subject_name ) ) != 0 )  in main()
533     if( ( ret = mbedtls_x509write_crt_set_issuer_name( &crt, opt.issuer_name ) ) != 0 )  in main()
551     ret = mbedtls_x509write_crt_set_validity( &crt, opt.not_before, opt.not_after );  in main()
564     ret = mbedtls_x509write_crt_set_basic_constraints( &crt, opt.is_ca,  in main()
565                                                opt.max_pathlen );  in main()
603     if( opt.key_usage )  in main()
608         ret = mbedtls_x509write_crt_set_key_usage( &crt, opt.key_usage );  in main()
619     if( opt.ns_cert_type )  in main()
624         ret = mbedtls_x509write_crt_set_ns_cert_type( &crt, opt.ns_cert_type );  in main()
641     if( ( ret = write_certificate( &crt, opt.output_file,  in main()