title: leiningen: How do I turn off ssl verification?
body: <p>I'm a first-time leiningen user on Windows.  When I run <code>lein run</code> I get the following error:</p>
  
  <pre><code>C:\Users\me\clojure-app&gt;lein run
  Could not transfer artifact org.clojure:clojure:pom:1.7.0 from/to central (https://repo1.maven.org/maven2/): sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
  Could not transfer artifact org.clojure:tools.nrepl:pom:0.2.10 from/to central (https://repo1.maven.org/maven2/): sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
  Could not transfer artifact clojure-complete:clojure-complete:pom:0.2.3 from/to central (https://repo1.maven.org/maven2/): sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
  This could be due to a typo in :dependencies or network issues.
  If you are behind a proxy, try setting the 'http_proxy' environment variable.
  </code></pre>
  
  <p>My <code>http_proxy</code> and <code>https_proxy</code> environment variables are indeed set properly.</p>
  
  <p>I'm behind a corporate firewall that re-signs web traffic with its own SSL certificates, which I suspected could be the root of my issues.  However, I set my <code>HTTP_CLIENT</code> environment variable to:</p>
  
  <pre><code>curl --insecure -f -L -o
  </code></pre>
  
  <p>...to avoid SSL verification (as suggested by <a href="https://github.com/technomancy/leiningen/commit/6c927c7e12360eac9ef54778df22756d48621a40" rel="nofollow">this note in the installation help</a>) but that did not change the error message.</p>
  
  <p>So, my root question, I suppose is: what steps must a user take to get <code>lein run</code> to successfully bring down dependencies on a Windows machine that is behind a corporate firewall that re-signs SSL traffic?  :o)</p>