Apple reminds developers on important deadlines for receipt certificate changes and notarization tools

Apple notifies developers on upcoming changes in purchase receipt signing certificate. Developers who use custom receipt validation should update their software accordingly.

If your app validates App Store receipts on device, make sure your app will support the SHA-256 version of this certificate. New apps and app updates that don’t support the SHA-256 version of this certificate will no longer be accepted by the App Store starting August 14, 2023.

Apple Developer

Apple also notifies developers that they should migrate to Xcode 14 or notarytool utility by November 1, 2023. Submissions from Xcode 13 and altool utilities will be no longer accepted then.

Important dates:

  • June 20, 2023. Receipts in the sandbox environment will be signed with the SHA‑256 version of this certificate for devices running a minimum of iOS 16.6, iPadOS 16.6, tvOS 16.6, watchOS 9.6, or macOS Ventura 13.5.
  • August 14, 2023. Receipts in new apps and app updates submitted to the App Store, as well as all apps in sandbox, will be signed with the SHA‑256 intermediate certificate.
  • November 1, 2023. Notarization requests will be only accepted by Xcode 14 and newer or notarytool.

Apple Developer:

Swift teams announces X509 certificate and ASN.1 libraries

Swift team announced availability of swift-certificates and swift-asn1 projects. These projects target operations with X509 certificates (which are commonly used in TSL connections) and ASN.1 data type definition language.

Swift ASN.1 provides routines for DER serialization and deserialization.

Swift Certificates provides routines for X509 parsing, chain building, validation and OCSP resolution.

GitHub:

Swift team: Introducing Swift Certificates and Swift ASN.1

Apple warns developer on updates for App Store receipt validation

Apple updates WWDR signing certificate for App Store receipt validation on January 18, 2023. Existing certificate will expire on February 7, 2023.

If apps or backend uses specific validation techniques that use specific certificates, this code needs to be updated.

Apple: Apple PKI

Apple Developer: Upcoming changes to the App Store receipt signing certificate

Developer ID and APNs certificates are updated

Apple regularly updates root certificates for its services. Now updated certificates are issued for Developer ID and Push Notification service.

Starting January 27, 2022, intermediate certificate updates will be available for the Apple Push Notification service (APNs) and Developer ID.

Apple Developer

No specific actions are required. Existing certificates will work until expiration or revocation.

Apple Developer: Upcoming Apple Developer certificate updates

Apple Developer Support: