Updated common mail server SSL certificates

jstedfast · Jan 28, 2023 · ba28d24 · ba28d24
1 parent 2d98b6d
commit ba28d24
Showing 1 changed file with 6 additions and 35 deletions.
diff --git a/MailKit/MailService.cs b/MailKit/MailService.cs
@@ -434,57 +434,28 @@ internal static bool IsKnownMailServerCertificate (X509Certificate2 certificate)
 			case "imap.gmail.com":
 				switch (issuer) {
 				case GMailCertificateIssuer:
-					return (serial == "00D3845D126ECF1D930A0FB9775FF9161A" && fingerprint == "A346D5274266BF7D23800187DE1D2A2CB2AC5AE9") // Expires 11/28/2022 3:18:37 AM
-						|| (serial == "0080FB56A5668CE27A0A355DE0F1717D3C" && fingerprint == "6D7CFEA95EB8D0E780B63C789E743FE21F728978") // Expires 12/19/2022 3:22:01 AM
-						|| (serial == "385F5A8529CDFD3912609BFC5F2EC79A" && fingerprint == "A41D18BB4E734175000B3C4FBBFDA94AA81886E4") // Expires 1/17/2023 1:15:12 PM
-						|| (serial == "00FFA246E901AEBD310A02F6B5AE792546" && fingerprint == "0B16EB8E3623CCB886EA0E6F979FD64F2E55BB5E"); // Expires 1/25/2023 8:45:02 AM
+					return (serial == "34B84EF11142CF4512D41976BF659B41" && fingerprint == "ABF1B02CBF92482FE1640E8EAD4C9CE0C8BD8573"); // Expires 4/3/2023 4:18:36 AM
 				default:
 					return false;
 				}
 			case "pop.gmail.com":
 				switch (issuer) {
 				case GMailCertificateIssuer:
-					return (serial == "008FD790D29DCF011B1240BF192B42A9A0" && fingerprint == "F4FA96FF05365689DDAD8ED8A7A21BCD2B138016") // Expires 11/28/2022 3:18:37 AM
-						|| (serial == "00CE4E415DF5F2EC12695C7739F7BBFA" && fingerprint == "69B94801A761E16AD2B2F9787DF02D4356B43188") // Expires 12/19/2022 3:22:00 AM
-						|| (serial == "00FE4D89F40A39199F0A416ABDA0A86DFE" && fingerprint == "B0B709B97156546F9B4865D7621999E92900A122") // Expires 1/17/2023 1:15:12 PM
-						|| (serial == "00D448D641EFB7976F12C421C73D2DB1E2" && fingerprint == "A1945DBB8DFAF4E73934853F5ED38840A1373C11"); // Expires 1/25/2023 8:45:02 AM
+					return (serial == "064F13D6F20B4C140AA426791CCA36CB" && fingerprint == "4C3B78DD1078069E257E717513BF3E246DDA45E0"); // Expires 4/3/2023 4:18:36 AM
 				default:
 					return false;
 				}
 			case "smtp.gmail.com":
 				switch (issuer) {
 				case GMailCertificateIssuer:
-					return (serial == "00A069C2B28215F43612A1018B5E706BFE" && fingerprint == "436A907DE78D0280181364AB842419E2465196E2") // Expires 11/28/2022 3:18:38 AM
-						|| (serial == "00B03FABC7EF901D541292C973AA6BFC29" && fingerprint == "D4696E592D75435902742567E75740E02843A862") // Expires 12/19/2022 3:22:03 AM
-						|| (serial == "3A7926A7D849F35A0A0BF5C70ACF6EC6" && fingerprint == "FFE52B9761BF3EDD2EFBE00AF397E97624A7DBED") // Expires 1/17/2023 1:15:13 PM
-						|| (serial == "00D668E47F4848A9CD0AA8BF1969DFD717" && fingerprint == "D3DD6E9E091E25703C65D65363E0D9230BA5A1A5"); // Expires 1/25/2023 8:45:03 AM
+					return (serial == "00A7342694B906B4FE0A3683770F0FE5A7" && fingerprint == "23D7F12451BE47686D2A2C2837A88E1A5341F970"); // Expires 4/3/2023 4:18:38 AM
 				default:
 					return false;
 				}
 			case "outlook.com":
 				switch (issuer) {
 				case OutlookCertificateIssuer:
-					return (serial == "010CB801C9719EE668C7A803EFD5D8C4" && fingerprint == "5223FB99040188673B9847FAF8EAC3531F0FE55B") // Expires 12/12/2022 6:59:59 PM
-						|| (serial == "08349B4851225195DE03A3515F5600BE" && fingerprint == "02D13AF3D6DF147C2573AE8793AB8FBE8461E4CD") // Expires 12/12/2022 6:59:59 PM
-						|| (serial == "0B9E5C99FC34EBBF53EECD242509420C" && fingerprint == "C013CFEFD55B3D38101DAB624C89A0E046A8A587") // Expires 12/22/2022 6:59:59 PM
-						|| (serial == "05B20A80B48B137AE71783B5062FD2FE" && fingerprint == "0EEF7509B944504CB3C3ED3ECC05EF1008779665") // Expires 12/22/2022 6:59:59 PM
-						|| (serial == "04A1C21185146636B7235D842A1483BB" && fingerprint == "0A26630D07A9E624D186C8BFBDA39C79630A96FD") // Expires 12/22/2022 6:59:59 PM
-						|| (serial == "0371908B3F8B83FD09B448C237C26ECE" && fingerprint == "A1708642F2ECAE9BA98A005D9F0E675AF928232F") // Expires 12/22/2022 6:59:59 PM
-						|| (serial == "0E30AAEA6BD2C037B5F54561807FFC72" && fingerprint == "595F0036867A6227DDEE915F0AE761CD2EE65C65") // Expires 12/22/2022 6:59:59 PM
-						|| (serial == "07AD8D0BAE29B5A21814958B948122BE" && fingerprint == "C5CAA1AA341D4F3509DAC633D3B80AC927F72842") // Expires 12/22/2022 6:59:59 PM
-						|| (serial == "05BE55DA2BB1CAC2C35677AEB3BE7FD4" && fingerprint == "416CD89591D050FFD2520F35358FA642CA2E1B81") // Expires 12/22/2022 6:59:59 PM
-						|| (serial == "04AD62A5375D5D3B3D4B7E45D8F936F8" && fingerprint == "48F453D1C94B85D87DB151064AC40AC8473BF7F6") // Expires 12/22/2022 6:59:59 PM
-						|| (serial == "052EAC2D0BB68BA1A27E236FF6A48EDE" && fingerprint == "1F84128281B98D0A7AD21C17A9E7CFE150AE24E1") // Expires 12/22/2022 6:59:59 PM
-						|| (serial == "05CF601FAD764AE86FD1CC173DBE358B" && fingerprint == "33CBCB82CA0697FAEB87DBE6766E22E8B0729D5E") // Expires 12/22/2022 6:59:59 PM
-						|| (serial == "0CF35BFC2811106763FF7B797DCF1BFF" && fingerprint == "47CB819B4CC48DB9E63F09B25EDE1A20B834A151") // Expires 12/22/2022 6:59:59 PM
-						|| (serial == "017AD2ED2E361E76CEC93AB14218851D" && fingerprint == "B22A5C780B64C7A6915493760FDEE2D9709E79F1") // Expires 12/22/2022 6:59:59 PM
-						|| (serial == "06565F9B6A832F1BC8809F4E577292E7" && fingerprint == "4E39B4134B8C77577D803D7640E8882205001C58") // Expires 12/22/2022 6:59:59 PM
-						|| (serial == "0E595DF437B3F531517F7C62AFEA850D" && fingerprint == "B822391039E81E5FE07CC7479E73A18BEB2FFB5F") // Expires 12/22/2022 6:59:59 PM
-						|| (serial == "09248624EDC9886EBC1013A9C06E13FE" && fingerprint == "8A92F2C7BFA8B78E453D00E65EAA5F7C0D89FDEA") // Expires 12/22/2022 11:59:59 PM
-						|| (serial == "0F71C8C0B67D41BC5A0CE715334711E3" && fingerprint == "405D32901FC1E18E6BCE2B4C53A6788DE9702598") // Expires 12/23/2022 6:59:59 PM
-						|| (serial == "08D3CAD9D9C04D44DC4795B0F94ABF48" && fingerprint == "F2E96865A36C2EDA003F021907F32539C1C9FD97") // Expires 12/23/2022 6:59:59 PM
-						|| (serial == "0E0F58AC112C1EEE5020441EF6E386E6" && fingerprint == "479F0B7F299EE8F0F5A37E5CFBEFE7F2DE16E173") // Expires 12/23/2022 6:59:59 PM
-						|| (serial == "058D13DD0B766164D1332309438DA5C2" && fingerprint == "63A17BB1A88D9E0FE87CAA41DD127612C93ECF3B") // Expires 6/24/2023 7:59:59 PM
+					return (serial == "058D13DD0B766164D1332309438DA5C2" && fingerprint == "63A17BB1A88D9E0FE87CAA41DD127612C93ECF3B") // Expires 6/24/2023 7:59:59 PM
 						|| (serial == "052F5D88215367212347874DD75D8A24" && fingerprint == "248E21138E0DEEF1D76686F12F5902D5E5957CF0") // Expires 6/24/2023 7:59:59 PM
 						|| (serial == "049EC157D421AB5B625E38BBE2FC90C0" && fingerprint == "195377147AEF853E9392B2E7CB056FC599B2BEC4") // Expires 7/5/2023 7:59:59 PM
 						|| (serial == "01D8732030D7FA91FF94392A06F057CF" && fingerprint == "9BAFBCA6838946CA189768BBE303941B17D5818E") // Expires 7/5/2023 7:59:59 PM
@@ -513,7 +484,7 @@ internal static bool IsKnownMailServerCertificate (X509Certificate2 certificate)
 			case "*.imap.mail.yahoo.com":
 				switch (issuer) {
 				case YahooCertificateIssuer:
-					return (serial == "076CCE71C269FB9690282190D87014ED" && fingerprint == "83FE78CAC8B31260321E1AAC3640FE0CAEA3B8E8"); // Expires 1/4/2023 6:59:59 PM
+					return (serial == "0410646FFC828B3257DE825939C6E7ED" && fingerprint == "EDA2F6D31216851A0E6F456F9C1D239D44059744"); // Expires 5/31/2023 7:59:59 PM
 				default:
 					return false;
 				}
@@ -527,7 +498,7 @@ internal static bool IsKnownMailServerCertificate (X509Certificate2 certificate)
 			case "smtp.mail.yahoo.com":
 				switch (issuer) {
 				case YahooCertificateIssuer:
-					return (serial == "0309A5B44971EF157E41ADB25B550C17" && fingerprint == "04AB2B10C8D26133F770B881773F7CFB8EC065F7"); // Expires 2/1/2023 6:59:59 PM
+					return (serial == "04C87D818C1CAD2E374FC789134103CE" && fingerprint == "96E18C7CC02A206D01315368C24569BD2322A4DA"); // Expires 6/28/2023 7:59:59 PM
 				default:
 					return false;
 				}