From 1c9740c7c1ef8a5cc25b55a33b2f38949b389f8c Mon Sep 17 00:00:00 2001 From: Ananth916 <74174916+Ananth916@users.noreply.github.com> Date: Thu, 4 Jun 2026 13:29:51 +0530 Subject: [PATCH 1/2] RDKB-65279 : Default OCSP stapling --- ocsp-support.sh | 11 +++++++++++ 1 file changed, 11 insertions(+) diff --git a/ocsp-support.sh b/ocsp-support.sh index bfdc459..71c8a45 100644 --- a/ocsp-support.sh +++ b/ocsp-support.sh @@ -33,7 +33,18 @@ if [ -z "$StatusOCSPCA" ]; then StatusOCSPCA=`dmcli eRT getv Device.DeviceInfo.X_RDKCENTRAL-COM_RFC.Feature.CRL.DirectOCSP | grep value | awk '{print $5}'` fi +if [ "$StatusOCSPSTAPLE" != "true" ]; then + echo "StatusOCSPSTAPLE is setting true" + syscfg set "EnableOCSPStapling" "true" + syscfg commit +fi +if [ "$StatusOCSPCA" != "true" ]; then + echo "StatusOCSPCA is setting true" + syscfg set "EnableOCSPCA" "true" + syscfg commit +fi + echo "status of RFC StatusOCSPSTAPLE $StatusOCSPSTAPLE StatusOCSPCA $StatusOCSPCA" >> $OCSP_LOG_FILE if [ "$StatusOCSPSTAPLE" = "true" ]; then From 17db1286065e4d3459fb6920c96f74e6ce3c9122 Mon Sep 17 00:00:00 2001 From: Ananth916 <74174916+Ananth916@users.noreply.github.com> Date: Fri, 5 Jun 2026 10:56:49 +0530 Subject: [PATCH 2/2] RDKB-65279 : Default OCSP stapling --- ocsp-support.sh | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/ocsp-support.sh b/ocsp-support.sh index 71c8a45..d3c94e9 100644 --- a/ocsp-support.sh +++ b/ocsp-support.sh @@ -34,16 +34,19 @@ if [ -z "$StatusOCSPCA" ]; then fi if [ "$StatusOCSPSTAPLE" != "true" ]; then - echo "StatusOCSPSTAPLE is setting true" + echo "Defaulting StatusOCSPSTAPLE set to true" >> $OCSP_LOG_FILE syscfg set "EnableOCSPStapling" "true" syscfg commit fi if [ "$StatusOCSPCA" != "true" ]; then - echo "StatusOCSPCA is setting true" + echo "Defaulting StatusOCSPCA set to true" >> $OCSP_LOG_FILE syscfg set "EnableOCSPCA" "true" syscfg commit fi + +StatusOCSPSTAPLE=`syscfg get EnableOCSPStapling` +StatusOCSPCA=`syscfg get EnableOCSPCA` echo "status of RFC StatusOCSPSTAPLE $StatusOCSPSTAPLE StatusOCSPCA $StatusOCSPCA" >> $OCSP_LOG_FILE