We facing slowness issues with out Web start application when upgraded to the Java 7 update 25, (very slow to open the login screen).
After our investigation we see that now Java security has enabled the OCSP and CRL check for signed certificate and this is what is causing slowness as each jar download is making a trip to Certificate Authority for validation .
When we manually select on CRL method the response is much faster so in effect online verification with OCSP is adding the delay.
Using Wireshark we monitored the OCSP calls and observation is for out 18 jars download it is making close to 80 calls to CA. Does anybody know why we might be making so many calls when jars are much less than that?