TLS incomplete chain for TCP (LDAPS) proxy

I've been struggling with something similar and I think I found a workaround. Here's my post describing what I've learned: