move around args.

issue-root.sh

@@ -2,6 +2,7 @@
 
 RSA_OPTS="-newkey rsa:2048 -sha256"
 ECDSA_OPTS="-newkey ec -pkeyopt ec_paramgen_curve:secp384r1 -sha384"
+
  
 while getopts ":h:t:n:d:s:" opt; do
   case $opt in
@@ -35,7 +36,7 @@ while getopts ":h:t:n:d:s:" opt; do
   esac
 done
 
-openssl req -x509 -batch $NEWKEY_OPT "${NAME_OPT[@]}" $DAYS_OPT "${SUBJECT_OPT[@]}" \
+openssl req -x509 -batch $NEWKEY_OPT $DAYS_OPT "${NAME_OPT[@]}" "${SUBJECT_OPT[@]}" \
     -addext "subjectKeyIdentifier=hash" \
     -addext "authorityKeyIdentifier=keyid:always,issuer" \
     -addext "basicConstraints=critical,CA:true" \