Add openssl lock for generating crl