Port the STACK_OF(X509_REVOKED) stuff to use the same pattern @exarkun figured out for X509