ssl_partial_chain- ifca_fileis for an intermediate CA, or otherwise we do not have the root CA and want
to trust the intermediate CA certs we do have, set this totrue- this corresponds to
theopenssl s_client -partial_chainflag andX509_V_FLAG_PARTIAL_CHAIN(default:false)
By setting ssl_partial_chain true in your configuration, you can
avoid #163