From a466f96b4eecb6a8aa4837c38ce5d37b10763c5a Mon Sep 17 00:00:00 2001
From: Richard T Bonhomme <tincantech@protonmail.com>
Date: Fri, 22 Apr 2022 17:32:58 +0100
Subject: [PATCH] Refactor display_san() and display_dn() - Quote all exansions
 (#494)

Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
---
 easyrsa3/easyrsa | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/easyrsa3/easyrsa b/easyrsa3/easyrsa
index 0300495..4bf5994 100755
--- a/easyrsa3/easyrsa
+++ b/easyrsa3/easyrsa
@@ -1883,21 +1883,21 @@ display_san() {
 		print "$(echo "$EASYRSA_EXTRA_EXTS" | grep subjectAltName |
 			sed 's/^\s*subjectAltName\s*=\s*//')"
 	else
-		san=$(
+		san="$(
 		x509v3san="X509v3 Subject Alternative Name:"
 		"$EASYRSA_OPENSSL" "$format" -in "$path" -noout -text |
 			sed -n "/${x509v3san}/{n;s/ //g;s/IPAddress:/IP:/g;s/RegisteredID/RID/;p;}"
-			)
+			)"
 
 		[ -n "$san" ] && print "$san"
 	fi
-}
+} # => display_san()
 
 # display cert DN info on a req/X509, passed by full pathname
 display_dn() {
 	format="$1" path="$2"
 	print "$("$EASYRSA_OPENSSL" "$format" -in "$path" -noout -subject -nameopt multiline)"
-	san=$(display_san "$1" "$2")
+	san="$(display_san "$1" "$2")"
 	if [ -n "$san" ]; then
 		print ""
 		print "X509v3 Subject Alternative Name:"