Merge pull request #3546 from c-po/haproxy
reverse-proxy: T6419: build full CA chain when verifying backend server