Use Bash arrays instead of word splitting

[nre.git] / verify

diff --git a/verify b/verify
index 092e52eed7ba732a222ccd1a07b3a7cc8cf6baa2..6e977098aedba5f77fc882685204a9767193f099 100755 (executable)
--- a/verify
+++ b/verify
@@ -42,14 +42,14 @@ verify root.ca/key.crt
 verifyExtlist "$(openssl x509 -in "root.ca/key.crt" -noout -text)" root
 
 # Verify level-1 structure
-for ca in $STRUCT_CAS; do
+for ca in "${STRUCT_CAS[@]}"; do
     verify $ca.ca/key.crt
     verifyExtlist "$(openssl x509 -in "$ca.ca/key.crt" -noout -text)" "$ca"
 done
 
 # Verify level-2 (time) structure
-for ca in ${STRUCT_CAS}; do
-    for i in $TIME_IDX; do
+for ca in "${STRUCT_CAS[@]}"; do
+    for i in "${TIME_IDX[@]}"; do
         . ../CAs/$ca
         CA_FILE=$year/ca/${ca}_${year}_${i}.crt
         time=${points[${i}]}