Apple Pay merchant domain verification fails despite valid TLS configuration

We are unable to verify our Apple Pay merchant domains.

Apple Developer Portal returns:

“Domain verification failed. Review your TLS Certificate configuration to confirm that the certificate is accessible and a supported TLS Cipher Suite is used.”

We have confirmed that the verification endpoints are publicly accessible, return HTTP 200, and support TLS 1.2/1.3 with valid certificates and supported cipher suites.

The domains are behind Cloudflare. However, when verification is triggered, we do not see an HTTP request from Apple in our Cloudflare request logs.

Has anyone experienced a similar issue with Apple Pay merchant domain verification, especially with domains behind Cloudflare?

We have also submitted a report through Feedback Assistant.

Answered by DTS Engineer in 913729022

Hi @beyza-ince,

You wrote:

The domains are behind Cloudflare. However, when verification is triggered, we do not see an HTTP request from Apple in our Cloudflare request logs. [...] Has anyone experienced a similar issue with Apple Pay merchant domain verification, especially with domains behind Cloudflare?

Your domain is behind a proxy. The documentation below lists the Apple IP ranges to allow:

Setting Up Your Server

https://developer.apple.com/documentation/applepayontheweb/setting-up-your-server

After updating your implementation, you continue to have issue, please see the following technote:

TN3173: Troubleshooting issues with your Apple Pay merchant identifier configuration

https://developer.apple.com/documentation/technotes/tn3173-troubleshooting-issues-with-your-apple-pay-merchant-id-configuration

Cheers,

Paris X Pinkney |  WWDR | DTS Engineer

Hi @beyza-ince,

You wrote:

The domains are behind Cloudflare. However, when verification is triggered, we do not see an HTTP request from Apple in our Cloudflare request logs. [...] Has anyone experienced a similar issue with Apple Pay merchant domain verification, especially with domains behind Cloudflare?

Your domain is behind a proxy. The documentation below lists the Apple IP ranges to allow:

Setting Up Your Server

https://developer.apple.com/documentation/applepayontheweb/setting-up-your-server

After updating your implementation, you continue to have issue, please see the following technote:

TN3173: Troubleshooting issues with your Apple Pay merchant identifier configuration

https://developer.apple.com/documentation/technotes/tn3173-troubleshooting-issues-with-your-apple-pay-merchant-id-configuration

Cheers,

Paris X Pinkney |  WWDR | DTS Engineer