commit 148d0f9fc562b43efa9a87649e52e3ffc9af9e4d
author Maxim Dounin <mdounin@mdounin.ru> Mon Mar 23 02:42:35 2015 +0300
committer Maxim Dounin <mdounin@mdounin.ru> Mon Mar 23 02:42:35 2015 +0300
tree fb6b6a11ed55a7cb8ef202830cfddffe638a118e
parent 96289018d474b2f61caf2c53dc63b4c9e58fbe23

SSL: use of SSL_MODE_NO_AUTO_CHAIN.

The SSL_MODE_NO_AUTO_CHAIN mode prevents OpenSSL from automatically
building a certificate chain on the fly if there is no certificate chain
explicitly provided.  Before this change, certificates provided via the
ssl_client_certificate and ssl_trusted_certificate directives were
used by OpenSSL to automatically build certificate chains, resulting
in unexpected (and in some cases unneeded) chains being sent to clients.