Windows daily build fails due to signing problem: "SignTool Error: No certificates were found that met all the given criteria."

[Tom Goddard]

Windows daily build failed in the same way the last two nights. Maybe a certificate has expired.

Reading file (WizardImageFile)

File: C:/cygwin64/var/tmp/chimerax_build/develop/windows_package\chimerax-wizard.bmp

Reading file (WizardSmallImageFile)

File: C:/cygwin64/var/tmp/chimerax_build/develop/windows_package\chimerax-wizard-small.bmp

Preparing Setup program executable

Updating version info (SETUP.E32)
Running Sign Tool byparam: signtool.exe sign /f "C:/cygwin64/var/tmp/chimerax_build/develop/windows_package/CodeSign.pfx" /p BiophysJMDA15 /fd sha1 /t ​http://timestamp.comodoca.com/authenticode /d "UCSF ChimeraX" "C:\cygwin64\var\tmp\chimerax_build\develop\chimerax\uninst.e32.tmp"
Sign Tool command failed (Sign Tool command failed with exit code 0x1). Will retry (2 tries left).

SignTool Error: No certificates were found that met all the given criteria.

Running Sign Tool byparam: signtool.exe sign /f "C:/cygwin64/var/tmp/chimerax_build/develop/windows_package/CodeSign.pfx" /p BiophysJMDA15 /fd sha1 /t ​http://timestamp.comodoca.com/authenticode /d "UCSF ChimeraX" "C:\cygwin64\var\tmp\chimerax_build\develop\chimerax\uninst.e32.tmp"
Sign Tool command failed (Sign Tool command failed with exit code 0x1). Will retry (1 tries left).

SignTool Error: No certificates were found that met all the given criteria.

Running Sign Tool byparam: signtool.exe sign /f "C:/cygwin64/var/tmp/chimerax_build/develop/windows_package/CodeSign.pfx" /p BiophysJMDA15 /fd sha1 /t ​http://timestamp.comodoca.com/authenticode /d "UCSF ChimeraX" "C:\cygwin64\var\tmp\chimerax_build\develop\chimerax\uninst.e32.tmp"

rm sig CodeSign.pfx chimerax.iss
SignTool Error: No certificates were found that met all the given criteria.
Error in C:\cygwin64\var\tmp\chimerax_build\develop\windows_package\chimerax.iss: Sign Tool command failed with exit code 0x1.
Compile aborted.
+ '[' '!' -e ../chimerax/chimerax-installer.exe ']'
+ exit 1

[Greg Couch]

The Windows Certificate Manager did not have the current signing certificate. So that was added. Not sure why it wasn't there or if it needs to be there. Or maybe a needed root or intermediate certificate was removed during a Windows update?? Anyway, it works now.