title: Clarification in configuring OCSP in tomcat
body: <p>We can configure OCSP in tomcat using, </p>
  
  <pre><code>    &lt;Connector port="8443"
     protocol="org.apache.coyote.http11.Http11AprProtocol"
     secure="true" scheme="https"
     SSLEnabled="true" SSLCertificateFile="/path/to/ocsp-cert.crt"
     SSLCertificateKeyFile="/path/to/ocsp-cert.key"
     SSLCACertificateFile="/path/to/ca.pem"
     SSLVerifyClient="require"
     SSLVerifyDepth="10"
     clientAuth="true"/&gt;
  </code></pre>
  
  <p>As mentioned in tomcat documentation, <a href="https://tomcat.apache.org/tomcat-7.0-doc/ssl-howto.html#Using_OCSP_Certificates" rel="noreferrer">https://tomcat.apache.org/tomcat-7.0-doc/ssl-howto.html#Using_OCSP_Certificates</a></p>
  
  <p>But from that documentation I didn't get where OCSP is performed whether on server side(For revocating client certificate) or client side(for revocating server certificate) ? </p>