diff --git a/lib/tls b/lib/tls
index a84bb764ac..e58e513a60 100644
--- a/lib/tls
+++ b/lib/tls
@@ -323,7 +323,8 @@ function make_root_CA {
 #
 # Uses global ``SSL_ENABLED_SERVICES``
 function is_ssl_enabled_service {
-    services=$@
+    local services=$@
+    local service=""
     for service in ${services}; do
         [[ ,${SSL_ENABLED_SERVICES}, =~ ,${service}, ]] && return 0
     done