title: SSL certificate rejected trying to access GitHub over HTTPS behind firewall
body: <p>I'm stuck behind a firewall so have to use HTTPS to access my GitHub repository. I'm using cygwin 1.7.7 on Windows XP.</p>
  
  <p>I've tried setting the remote to <code>https://username@github.com/username/ExcelANT.git</code>, but pushing prompts for a password, but doesn't do anything once I've entered it.
  <code>https://username:&lt;password&gt;github.com/username/ExcelANT.git</code> and cloning the empty repo from scratch but each time it gives me the same error</p>
  
  <blockquote>
    <p>error: SSL certificate problem, verify that the CA cert is OK. Details:<br>
    error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed while accessing <a href="https://github.com/username/ExcelANT.git/info/refs" rel="noreferrer">https://github.com/username/ExcelANT.git/info/refs</a></p>
  </blockquote>
  
  <p>Turning on <code>GIT_CURL_VERBOSE=1</code> gives me</p>
  
  <blockquote>
    <p>* About to connect() to github.com port 443 (#0)<br>
    *   Trying 207.97.227.239... * successfully set certificate verify locations:<br>
    *   CAfile: none<br>
      CApath: /usr/ssl/certs<br>
    * SSL certificate problem, verify that the CA cert is OK. Details:<br>
    error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed<br>
    * Expire cleared<br>
    * Closing connection #0<br>
    * About to connect() to github.com port 443 (#0)<br>
    *   Trying 207.97.227.239... * successfully set certificate verify locations:<br>
    *   CAfile: none<br>
      CApath: /usr/ssl/certs<br>
    * SSL certificate problem, verify that the CA cert is OK. Details:<br>
    error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed<br>
    * Expire cleared<br>
    * Closing connection #0<br>
    error: SSL certificate problem, verify that the CA cert is OK. Details:<br>
    error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed while accessing <a href="https://github.com/username/ExcelANT.git/info/refs" rel="noreferrer">https://github.com/username/ExcelANT.git/info/refs</a></p>
  </blockquote>
  
  <pre><code>fatal: HTTP request failed
  </code></pre>
  
  <p>Is this a problem with my firewall, cygwin or what?</p>
  
  <p>I hadn't set the HTTP proxy in the Git config, however it's an ISA server that needs NTLM authentication, not basic, so unless anyone knows how to force git to use NTLM, I'm scuppered.</p>