ssl-proxies: Fix CRL check race condition

JGlobus uses CRLs as if they were immutable objects, however when
using the Bouncy Castle provider, the ASN.1 parser uses lazy
evaluation internally, which means the X509CRL object is not
thread safe.
Cleaned up white space.
Merge pull request #65 from gbehrmann/bug/crl-race

ssl-proxies: Fix CRL check race condition