SSL: use of SSL_MODE_NO_AUTO_CHAIN. The SSL_MODE_NO_AUTO_CHAIN mode prevents OpenSSL from automatically building a certificate chain on the fly if there is no certificate chain explicitly provided. Before this change, certificates provided via the ssl_client_certificate and ssl_trusted_certificate directives were used by OpenSSL to automatically build certificate chains, resulting in unexpected (and in some cases unneeded) chains being sent to clients.

# Copyright (C) Igor Sysoev
# Copyright (C) Nginx, Inc.


CFLAGS = -nologo -O2 -Ob1 -Oi -Gs $(LIBC) $(CPU_OPT) -D L_ENDIAN

!IF "$(SHA1_ASM)" == "YES"

sha1.lib:
	cd $(SHA1)
	cl -c $(CFLAGS) -D SHA1_ASM sha1dgst.c
	link -lib -out:sha1.lib sha1dgst.obj asm/s-win32.obj

!ELSE

sha1.lib:
	cd $(SHA1)
	cl -c $(CFLAGS) sha1dgst.c
	link -lib -out:sha1.lib sha1dgst.obj

!ENDIF