If anyone wonders: I now learned that there is a way to configure an
empty chain.
You can't have an empty (0 byte) file as the certificate chain, but you
can have a file that contains just a newline (1 byte) and nothing else
and set that as the chain.
![]() |