diff --git a/extras/vpnupgrade.sh b/extras/vpnupgrade.sh
index 4e90846..7ebbeae 100644
--- a/extras/vpnupgrade.sh
+++ b/extras/vpnupgrade.sh
@@ -214,8 +214,8 @@ cat > Makefile.inc.local <<'EOF'
 WERROR_CFLAGS =
 USE_DNSSEC = false
 USE_DH31 = false
-USE_NSS_AVA_COPY=true
-USE_NSS_IPSEC_PROFILE=false
+USE_NSS_AVA_COPY = true
+USE_NSS_IPSEC_PROFILE = false
 USE_GLIBC_KERN_FLIP_HEADERS = true
 EOF
 if [ "$(packaging/utils/lswan_detect.sh init)" = "systemd" ]; then
diff --git a/extras/vpnupgrade_centos.sh b/extras/vpnupgrade_centos.sh
index 400a0b1..621ebfb 100644
--- a/extras/vpnupgrade_centos.sh
+++ b/extras/vpnupgrade_centos.sh
@@ -208,8 +208,8 @@ cat > Makefile.inc.local <<'EOF'
 WERROR_CFLAGS =
 USE_DNSSEC = false
 USE_DH31 = false
-USE_NSS_AVA_COPY=true
-USE_NSS_IPSEC_PROFILE=false
+USE_NSS_AVA_COPY = true
+USE_NSS_IPSEC_PROFILE = false
 USE_GLIBC_KERN_FLIP_HEADERS = true
 EOF
 NPROCS=$(grep -c ^processor /proc/cpuinfo)