Description

When using ssl.certificate.pem configuration the client doesn't send the full chain.
Note: ssl.certificate.location sends the full chain

How to reproduce

Run producer/consumer where ssl.ca.location has only the Root CA and set ssl.certificate.pem with the full chain.

Logs:

From .NET client (proxy from librdkafka)

Confluent.Kafka.ProduceException`2[System.String,System.String]: Broker: Topic authorization failed
   at Confluent.Kafka.Producer`2.Produce(TopicPartition topicPartition, Message`2 message, Action`1 deliveryHandler)
   at Confluent.Kafka.Producer`2.Produce(String topic, Message`2 message, Action`1 deliveryHandler)

Checklist

Please provide the following information:

• dot-net v1.5.3 (librdkafka - v1.5.3 )
• Apache Kafka version: 2.6.0
• librdkafka client configuration
• Operating system: macOS Big sur 11.1
• Provide logs (with debug=.. as necessary) from librdkafka
• Provide broker log excerpts
• Critical issue - No