Mac OS X dmg is corrupted for the nightly builds

[halirutan]

In this issue #3437 (comment), the reporter pointed out he could not install the dmg file from the development builds. I tried to reproduce the problem on my MacBook (10.12.6) and I got as well the following error:

That is something we need to fix ASAP. Could the dev who is responsible for the release building on CI look at this? I can help and test, but I cannot build the release myself as there seem to be some local settings that are required that I don't have.

[Siedlerchr]

Could you try to test with an older version of here?
http://builds.jabref.org/fixfetcherisbn/
I am unsure whether it is caused by a certficiation issue (the code signing expired) or if its caused by a commit

[halirutan]

@Siedlerchr This one works.

[ncihnegn]

My Firefox download is corrupted but curl works fine.

[halirutan]

OK, I googled a bit around and I believe I found the problem:

codesign -v JabRef_macos_4_1-dev--snapshot--2017-11-13--master--c1d425a31.dmg

JabRef_macos_4_1-dev--snapshot--2017-11-13--master--c1d425a31.dmg: CSSMERR_TP_CERT_EXPIRED

The certificate of the older dmg is not expired.

[Siedlerchr]

@halirutan Yes, what I already thought. We are aware that our codesigning is expired and we are in the process of getting a new one.
In the meantime I found this solution: processing/processing#4705 (comment)

[LinusDietz]

We disabled code signing until we obtain the certificate.

Refs #3546