SSL proto opts were not being placed in the config, this got removed somehow, so I readded it.
Added locking around CRL ent checks.