No certification check when configure nginx to work as a reverse proxy to forward from http to https

Question

I have two machines. both has nginx installed.

Machine A (Server): has nginx and https enabled on port 4435 with self-signed certification

Machine B (Client): forward requests on /site_manager uri to server A (https) on port 4435.

Note: I didn't install the self signed certification on machine B (Client)

When make curl from the Client B:

using nginx reverse proxy that redirect connection to machine A -> working and that isn't expected because no certificates

using curl request directly to machine A -> didn't work and that is expected

The question: Do you know why nginx able to make https even when no certifications on the machine?

Answer 1

It seems nginx bypass/skip the certification check by default.

To enable it you have to add the following lines:

The proxy_sl_trusted_certificate is the CA certificate that signed the target server certifications in our case that signed server (A)