diff --git a/contrib/sign.sh b/contrib/sign.sh
index a88c52df7a264ecc1399e72f0c7fb61d266e8b12..082e967eba1b977525f384fd8ec2c789d2bf2228 100755
--- a/contrib/sign.sh
+++ b/contrib/sign.sh
@@ -18,23 +18,23 @@ See also
 EOHELP
 	exit 1
 fi
- 
-SECRET=$1
- 
-manifest=$2
-upper=$(mktemp)
-lower=$(mktemp)
- 
+
+SECRET="$1"
+
+manifest="$2"
+upper="$(mktemp)"
+lower="$(mktemp)"
+
 awk "BEGIN    { sep=0 }
      /^---\$/ { sep=1; next }
               { if(sep==0) print > \"$upper\";
                 else       print > \"$lower\"}" \
-    $manifest
- 
-ecdsasign $upper < $SECRET >> $lower
- 
-cat  $upper  > $manifest
-echo ---    >> $manifest
-cat  $lower >> $manifest
- 
-rm -f $upper $lower
+    "$manifest"
+
+ecdsasign "$upper" < "$SECRET" >> "$lower"
+
+cat  "$upper"  > "$manifest"
+echo ---      >> "$manifest"
+cat  "$lower" >> "$manifest"
+
+rm -f "$upper" "$lower"