How to use self signed certificate?

[bazingger]

I want to use WebSocket+TLS+Web on the server, but I don’t have domain name manage authority and root of the server, so I can’t apply for a certificate or use the server’s 443 port.

I created a self signed certificate, and opened other port of this server for nginx. and set v2ray to WebSocket+TLS+Web。
And configured the root certificate of the self signed certificate on the client
But when I connect by the proxy, there are following errors:

tls: failed to verify certificate: x509: certificate signed by unknown authority transport/internet/websocket: failed to dial WebSocket

my nginx config:

server {
	listen       44443 ssl;
	server_name  localhost;

	ssl_certificate      /path/to/my/cert.crt;
	ssl_certificate_key  /path/to/my/cert.key;

	ssl_session_cache    shared:SSL:1m;
	ssl_session_timeout  5m;

	ssl_ciphers  HIGH:!aNULL:!MD5;
	ssl_prefer_server_ciphers  on;

	location / {
		root   html;
		index  index.html index.htm;
	}
	location /mypath {
		proxy_redirect off;
		proxy_pass http://127.0.0.1:44444;
		proxy_http_version 1.1;
		proxy_set_header Upgrade $http_upgrade;
		proxy_set_header Connection "upgrade";
		proxy_set_header Host $http_host;
		proxy_read_timeout 300s;
	}
}

my v2ray server config:

{
  "tag": "vmess-inbound",
  "listen": "127.0.0.1",
  "port": 44444,
  "protocol": "vmess",
  "settings": {
    "clients": [
      {
        "id": "***",
        "alterId": 0,
        "level": 1
      }
    ],
    "decryption": "none"
  },
  "streamSettings": {
    "network": "ws",
    "wsSettings": {
      "path": "/mypath"
    }
  }
}

my v2ray client config:

{
  "protocol": "vmess",
  "tag": "proxy",
  "settings": {
    "vnext": [
      {
        "address": "my.host",
        "port": 44443,
        "users": [
          {
            "id": "-***",
            "alterId": 0,
            "security": "auto",
            "level": 1
          }
        ]
      }
    ]
  },
  "streamSettings": {
    "network": "ws",
    "security": "tls",
    "tlsSettings": {
      "allowInsecure": false,
      "certificates": [
        {
          "usage": "verify",
          "certificateFile": "path/to/my/cert/ca.crt"
        }
      ],
      "serverName": "my.host"
    },
    "wsSettings": {
      "path": "/mypath"
    }
  }
}