Currently this test fails with a build of jdk7u-dev on MacOSX.

$ java FailoverCheck
Exception in thread "main" java.lang.Exception: Failover from OCSP to CRLs obscured the cause of the OCSP failure
at FailoverCheck.main(FailoverCheck.java:64)
Caused by: java.security.cert.CertPathValidatorException: java.io.IOException: Server returned HTTP response code: 502 for URL: http://some.bogus.domain
at sun.security.provider.certpath.PKIXMasterCertPathValidator.validate(PKIXMasterCertPathValidator.java:159)
at sun.security.provider.certpath.PKIXCertPathValidator.doValidate(PKIXCertPathValidator.java:349)
at sun.security.provider.certpath.PKIXCertPathValidator.engineValidate(PKIXCertPathValidator.java:191)
at java.security.cert.CertPathValidator.validate(CertPathValidator.java:279)
at FailoverCheck.main(FailoverCheck.java:59)
Caused by: java.io.IOException: Server returned HTTP response code: 502 for URL: http://some.bogus.domain
at sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1615)
at sun.security.provider.certpath.OCSP.check(OCSP.java:199)
at sun.security.provider.certpath.OCSPChecker.check(OCSPChecker.java:339)
at sun.security.provider.certpath.PKIXMasterCertPathValidator.validate(PKIXMasterCertPathValidator.java:133)
... 4 more

I think the issue is that JDK on Mac picks up the proxy settings automatically.