I think the tomcat connectors have the capabilities to do ocsp. Not completely sure.

But it will be good to have a trust manager that can do ocsp. Starting JDK5, there have been numerous x509 enhancements. We need to document (and beef up the services) to utilize ocsp.