Warning about Google/GMail CA expiring 6/7/2013

[Bradley Stone <bvstone@xxxxxxxxx>]

Not sure if anyone remembers in 2009 when Google let their server SSL
certificate expire...

Many 3rd party email applications failed until they issued their new SSL
certificate.  Sometimes you could say to trust it anyway, or you could set
your clock back while it was fixed.  But on the IBM i, that's not a real
possibility.

It may happen again on 6/7/2013.  And in true Google fashion there is no
real way to contact them to see if they are even aware of it.. and trust
me, I've tried for the last few days.

Even if they do update the certificate on their end at the last minute,
unless you're aware and import the new CA(s) you'll be dead in the water
for email from your IBM i if you're using Google/GMail as your mail router.

One of the intermediate CAs on their GMail SSL/TLS certificate expires on
June 7th, 2013.  That of course will cause issues again with many servers
who actually need to manually import CAs to "trust".

So, just a warning out there to anyone sending email from the IBM i using
Google as their mail router/server.  I've emailed my MAILTOOL Plus
customers about it and will provide a new CA list when it's available.  But
if anyone has any way to get this through to Google, it may save a lot of
embarrassment for them.  :)  I really can't seem them just updating it at
the last minute...  or can I.  ;)

Brad
www.bvstools.com