aws-chunked encoding issue while using nginx as https proxy

> uname -a
Linux toptop 6.4.0-150600.23.47-default #1 SMP PREEMPT_DYNAMIC Thu Apr  3 03:44:04 UTC 2025 (2854fd7) x86_64 x86_64 x86_64 GNU/Linux

> /usr/sbin/nginx -V
nginx version: nginx/1.28.0
built by gcc 7.5.0 (SUSE Linux) 
built with OpenSSL 3.1.4 24 Oct 2023
TLS SNI support enabled
configure arguments: --prefix=/etc/nginx --sbin-path=/usr/sbin/nginx --modules-path=/usr/lib64/nginx/modules --conf-path=/etc/nginx/nginx.conf --error-log-path=/var/log/nginx/error.log --http-log-path=/var/log/nginx/access.log --pid-path=/var/run/nginx.pid --lock-path=/var/run/nginx.lock --http-client-body-temp-path=/var/cache/nginx/client_temp --http-proxy-temp-path=/var/cache/nginx/proxy_temp --http-fastcgi-temp-path=/var/cache/nginx/fastcgi_temp --http-uwsgi-temp-path=/var/cache/nginx/uwsgi_temp --http-scgi-temp-path=/var/cache/nginx/scgi_temp --user=nginx --group=nginx --with-compat --with-file-aio --with-threads --with-http_addition_module --with-http_auth_request_module --with-http_dav_module --with-http_flv_module --with-http_gunzip_module --with-http_gzip_static_module --with-http_mp4_module --with-http_random_index_module --with-http_realip_module --with-http_secure_link_module --with-http_slice_module --with-http_ssl_module --with-http_stub_status_module --with-http_sub_module --with-http_v2_module --with-http_v3_module --with-mail --with-mail_ssl_module --with-stream --with-stream_realip_module --with-stream_ssl_module --with-stream_ssl_preread_module --with-cc-opt='-O2 -g -m64 -fmessage-length=0 -D_FORTIFY_SOURCE=2 -fstack-protector -funwind-tables -fasynchronous-unwind-tables -fPIC' --with-ld-opt='-Wl,-z,relro -Wl,-z,now -pie'

> aws s3api put-object --bucket my_bucket --key toto.txt --body toto.txt --endpoint-url https://toto.example.com --ca-bundle toto.example.com.crt

An error occurred (MalformedTrailerError) when calling the PutObject operation: The request contained trailing data that was not well-formed or did not conform to our published schema.

2025-07-09 20:58:51,863 - MainThread - botocore.auth - DEBUG - CanonicalRequest:
PUT
/my_bucket/toto.txt

content-encoding:aws-chunked
host:toto.example.com
x-amz-content-sha256:STREAMING-UNSIGNED-PAYLOAD-TRAILER
x-amz-date:20250709T185851Z
x-amz-decoded-content-length:8
x-amz-sdk-checksum-algorithm:CRC64NVME
x-amz-security-token: long_token
x-amz-trailer:x-amz-checksum-crc64nvme

content-encoding;host;x-amz-content-sha256;x-amz-date;x-amz-decoded-content-length;x-amz-sdk-checksum-algorithm;x-amz-security-token;x-amz-trailer
STREAMING-UNSIGNED-PAYLOAD-TRAILER

> export AWS_REQUEST_CHECKSUM_CALCULATION=when_required
> aws s3api put-object --bucket pbidaultdummybucket --key toto.txt --body toto.txt --endpoint-url https://toto.example.com --ca-bundle toto.example.com.crt
{
    "ETag": "\"874f0bc52c9563dda66c96\"",
    "ChecksumCRC64NVME": "0cvvWi+LXfc=",
    "ChecksumType": "FULL_OBJECT",
    "ServerSideEncryption": "AES256"
}

> cat /etc/nginx/conf.d/toto.conf 
server {
    listen 443 ssl;
    server_name toto.example.com;

    ssl_certificate     /etc/nginx/ssl/toto.example.com.crt;
    ssl_certificate_key /etc/nginx/ssl/toto.example.com.key;

    location / {
        proxy_pass         http://192.168.69.100:32708;
        proxy_set_header   Host $host;
        proxy_set_header   X-Real-IP $remote_addr;
        proxy_set_header   X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header   X-Forwarded-Proto $scheme;
        proxy_http_version 1.1;
    }
}