Here comes - for my and possibly your convenience - a combined patch against ext/openssl for PKCS#12 and CRL support. It also fixes my patch (missing the header file) and Marc Dellings part (missing some TSRM macros).
ext-openssl.patch
Update: Marc Delling's patch has made it into the distribution, updated patch against current -dev.