OpenSSL 4.0 is deprecating X509_STORE_get0_objects(). The previous patch
is implementing the get1 version using the get0 one for older versions.
Every occurence of X509_STORE_get0_objects() was replaced by
X509_STORE_get1_objects().
This changes the ref count of the STACK_OF(X509_OBJECT) everywhere, and
need it to be sk_X509_OBJECT_pop_free(objs, X509_OBJECT_free) each time.
Don't backport that unless really needed if we want to be compatible
with OpenSSL 4.0. It changes all the refcounts.