[Bug] SSLHandshakeException with Ely.by on Windows (unable to find valid certification path)

[Sreehari425]

When launching Minecraft through QuantumLauncher with authlib-injector 1.2.5 on Windows 10 22H2, authentication against https://ely.by fails due to an SSL handshake error unless a special JVM argument is provided.

Log output

[authlib-injector] [ERROR] Failed to fetch metadata: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

Steps to reproduce

1. Use QuantumLauncher(v0.4.2) on Windows 10 22H2.
2. Add Ely.by (https://ely.by) as the authentication server.
3. Launch the game with authlib-injector 1.2.5.

Workaround

The game only launches successfully if this JVM argument is added:
-Djavax.net.ssl.trustStoreType=Windows-ROOT

Without this, the SSL handshake always fails.

Environment

• OS: Windows 10 22H2
• Java: 1.8.0_51(the one downloaded by launcher)
• authlib-injector: 1.2.5
• Launcher: QuantumLauncher

Additional context

• Tried JVM flag -Dauthlibinjector.ely.by.tls.insecure=true, but it had no effect.

Before the jvm arg(--Djavax.net.ssl.trustStoreType=Windows-ROOT)

After the jvm arg (-Djavax.net.ssl.trustStoreType=Windows-ROOT)