From 2a9cd44902bce4d4d953640b57c13adc3f040c20 Mon Sep 17 00:00:00 2001
From: Richard T Bonhomme <tincantech@protonmail.com>
Date: Fri, 22 Apr 2022 17:21:27 +0100
Subject: [PATCH] Refactor default_server_san() - Quote all expansions (#494)

Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
---
 easyrsa3/easyrsa | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/easyrsa3/easyrsa b/easyrsa3/easyrsa
index 8984161..0300495 100755
--- a/easyrsa3/easyrsa
+++ b/easyrsa3/easyrsa
@@ -1908,10 +1908,10 @@ display_dn() {
 # generate default SAN from req/X509, passed by full pathname
 default_server_san() {
 	path="$1"
-	cn=$(
+	cn="$(
 		easyrsa_openssl req -in "$path" -noout -subject -nameopt sep_multiline |
 		awk -F'=' '/^  *CN=/{print $2}'
-		)
+		)"
 
 	if echo "$cn" | grep -E -q '^\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}$'; then
 		print "subjectAltName = IP:$cn"