apple's software update checks will not work with ocsp blocked, you have to temporarily allow it to get updates. also there are bugs in the UI; if you have it blocked it will tell you your system is up to date (with a current "last checked" timestamp) when it's actually not.