title: Error: unable to verify the first certificate - Springboot
body: <p>I have written a restful API project which is developed using spring boot and I am using the embedded tomcat and running a jar on a linux server.</p>
  <p>The APIs are live at:</p>
  <pre><code>  https://api.arevogroup.com:8089/api/regions
  </code></pre>
  <p>and I can see the verified and correct SSL as well as in the given screenshot. <a href="https://i.stack.imgur.com/s5wFW.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/s5wFW.png" alt="enter image description here" /></a></p>
  <p><strong>but I am getting an this exception in the postman when I call these apis.</strong>
  <a href="https://i.stack.imgur.com/4tOfp.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/4tOfp.png" alt="enter image description here" /></a></p>
  <p>These APIs are consumed by a Xamrin based app which seems to work all good when consumed using iPhone but gives this same exception when the APIs are accessed via android.</p>
  <p>I guess, the way I have generated the ssl certificate has some issues.</p>
  <p>I have used a pfx file and my SSL config in properties file looks like this:</p>
  <pre><code>###SSL Key Info
  security.require-ssl=true
  server.ssl.key-store-password=PASSWORD
  server.ssl.key-store=classpath:ssl_pfx.pfx
  server.ssl.key-store-type=PKCS12
  </code></pre>
  <ol>
  <li>I have 2 questions, if disable the ssl verification, would the communication still be encrypted or not? (man in the middle attack is still possible but the info will still be encrypted, right?).</li>
  <li>If not, how can I fix this?</li>
  </ol>