Some openssl versions require CA certificates to return the chain. This fixes tests on Debian 6 and 7.