Right now I need to import the Root-CA's cert, the Intermediate-CA's cert and the Client cert on the client for it to be able to connect to the server. The server has access to the Root-CA's cert via the SSLCACertificateFile directive.
I suppose that right now the server cannot verify the Intermediate-CA because it does not have access to it's cert. So it queries the client. Is that right?
If that is so: How can I give the server the ability to verify the trust chain on it's own? Maybe an URL in the signers certificate? Adding more than one SSLCACertificateFile directive didn't work.