Error generating domain certificate

Thank you for your post. I must clarify that I am not entirely certain of your intended purpose. Are you referring to a SSL certificate? However, the question mentions the /.well-known directory, which suggests that you may be attempting to host an AASA file. To provide a more accurate response.

Since you mentioned being able to access the URL within the .well-known directory via Apple's validation tool, it indicates that your web server setup is likely correct from an external perspective.

I would appreciate it if you could elaborate on your specific requirements.

Albert Pascual
  Worldwide Developer Relations.

I’m trying to integrate Apple Pay on the web into a demo I’m building. In order to charge with Apple Pay, I need a Merchant ID, which must have the following set up: the Apple Pay Payment Processing Certificate, the Apple Pay Merchant Identity Certificate, and Merchant Domains. The one that’s giving me the error is Merchant Domains.

The web environment/server is already configured and has no restrictions, and for Merchant Domain validation it requires a URL like this: https://domain/.well-known/apple-developer-merchantid-domain-association.txt. This URL is already configured with my demo domain, and when I access it I can see the contents of the apple-developer-merchantid-domain-association.txt file, which is what Apple uses to verify the domain. However, on Apple’s page, when I try to verify it, I get the error “Domain verification failed.” That seems strange to me because when I access the URL Apple uses, it does show the file contents.

Could you help me with this? Also, just to mention it, I’m hosting the page on Azure App Service. Thanks.

Hi @appleAccount@fttecnologias.com,

Please see the following technote for more information about troubleshooting your merchant domain verification failures, which includes verifying these issues below:

• your server's TLS implementation, cypher suites, or certificates
• your domain is not behind a proxy or hosted within a private network
• the domain verification file is served without a redirect, hasn't expired, and is associated with the correct merchant ID

TN3173: Troubleshooting issues with your Apple Pay merchant identifier configuration

https://developer.apple.com/documentation/technotes/tn3173-troubleshooting-issues-with-your-apple-pay-merchant-id-configuration

Cheers,

Paris X Pinkney |  WWDR | DTS Engineer