Ssl 在反向代理中获取错误的版本号

我在nginx中配置了带有自签名CA的反向代理。从一开始我就认为这是CA的问题，所以重新创建它们，但问题仍然是一样的。这种配置的思想是监听ip>>第一个nginx，它将加密日期>>第二个nginx，它将解密并转发到目标服务。没有ssl配置，日期的移动是正常的，但当我打开ssl时，一切都糟透了

我的配置：

# user  nobody;
worker_processes auto;

events {
    worker_connections  1024;
}

stream {

    # DB connections
    ###########################################################
    upstream sql_backend {
        server 1.1.1.1:10000;
    }
    
    server    {
        listen 2.2.2.2:11000;    
        ssl_certificate     C:/nginx/ssl/server.pem;
        ssl_certificate_key C:/nginx/ssl/server.key;
        proxy_pass sql_backend;    
    }
    ###########################################################
    upstream sql_proxy {
        server 2.2.2.2:11000;
    }

    server {
        listen     2.2.2.2:10000;
        proxy_pass    sql_proxy;
        proxy_ssl on;
        proxy_ssl_certificate     C:/nginx/ssl/client.pem;
        proxy_ssl_certificate_key C:/nginx/ssl/client.key;
    }
    ###########################################################

    # serv connections

    upstream serv_backend {        
        server 1.1.1.1:1433;
    }
    
    server    {
        listen 2.2.2.2:14330;
        ssl_certificate     C:/nginx/ssl/server.pem;
        ssl_certificate_key C:/nginx/ssl/server.key;
        proxy_pass serv_backend;    
    }

    upstream serv_proxy {
        server 2.2.2.2:14330;   
    }

    server {
        listen     2.2.2.2:1433;
        proxy_pass    serv_proxy; 
        proxy_ssl on;
        proxy_ssl_certificate     C:/nginx/ssl/client.pem;
        proxy_ssl_certificate_key C:/nginx/ssl/client.key;
    }
}

我遇到的问题出现在error.log中

 SSL_do_handshake() failed (SSL: error:1408F10B:SSL routines:ssl3_get_record:wrong version number) while SSL handshaking to upstream, client: 10.60.12.237, server: 10.60.12.139:10000, upstream: "10.60.12.139:11000", bytes from/to client:0/0, bytes from/to upstream:0/0

我尝试使用

ssl_协议TLSv1 TLSv1.1 TLSv1.2

和

代理\u ssl\u会话\u重新使用但仍然是相同的问题

我不知道这是否有用，但是从curl到这台机器的答案

curl 2.2.2.2:10000
curl: (56) Recv failure: Connection reset by peer
curl 2.2.2.2:11000
curl: (1) Received HTTP/0.9 when not allowed
curl 2.2.2.2:14330
curl: (52) Empty reply from server
curl 2.2.2.2:1433
C^ Getting noting from this, timeout