Add stop-gap for shorter certs

Workaround for qzind#491

Author: tresf

ant/apple/apple-keygen.sh.in

@@ -72,6 +72,14 @@ function replace_vars {
     cmd=$(echo "$cmd" | sed -e "s|\!sslcert|$trustedcertpath|g")
     cmd=$(echo "$cmd" | sed -e "s|\!sslkey|$trustedkeypath|g")
 
+    # Shorten cert life for macOS 10.15+ to 825 days per #491
+    curver=($(sw_vers -productVersion |tr '.' ' '))
+    curver="${curver[0]}.${curver[1]}"
+    compare="$(echo "$curver>10.14" | bc -l)"
+    if [ $compare -gt 0 ]; then
+        cmd=$(echo "$cmd" | sed -e "s|-validity ${ssl.validity}|-validity 825|g")
+    fi
+
     echo "$cmd"
     return 0
 }