Tag: Certificate

Apple notifies developers on upcoming changes in purchase receipt signing certificate. Developers who use custom receipt validation should update their software accordingly.

If your app validates App Store receipts on device, make sure your app will support the SHA-256 version of this certificate. New apps and app updates that don’t support the SHA-256 version of this certificate will no longer be accepted by the App Store starting August 14, 2023.

Apple Developer

Apple also notifies developers that they should migrate to Xcode 14 or notarytool utility by November 1, 2023. Submissions from Xcode 13 and altool utilities will be no longer accepted then.

Important dates:

• June 20, 2023. Receipts in the sandbox environment will be signed with the SHA‑256 version of this certificate for devices running a minimum of iOS 16.6, iPadOS 16.6, tvOS 16.6, watchOS 9.6, or macOS Ventura 13.5.
• August 14, 2023. Receipts in new apps and app updates submitted to the App Store, as well as all apps in sandbox, will be signed with the SHA‑256 intermediate certificate.
• November 1, 2023. Notarization requests will be only accepted by Xcode 14 and newer or notarytool.

Apple Developer:

• Upcoming changes to the App Store receipt signing intermediate certificate
• Handling App Store receipt signing certificate change
• Apple notary service update

Swift team announced availability of swift-certificates and swift-asn1 projects. These projects target operations with X509 certificates (which are commonly used in TSL connections) and ASN.1 data type definition language.

Swift ASN.1 provides routines for DER serialization and deserialization.

Swift Certificates provides routines for X509 parsing, chain building, validation and OCSP resolution.

GitHub:

• swift-certificates
• swift-asn1

Swift team: Introducing Swift Certificates and Swift ASN.1

Recent certificate update still caused recent issues with receipt validation for developers. Old certificate expired February 7, 2023. And some apps still got receipts signed by expired certificate.

This caused in-app purchase validation issues. Issue is now resolved.

Reference: New WWDR Intermediate Certificate and Receipt Verification

Apple updates WWDR signing certificate for App Store receipt validation on January 18, 2023. Existing certificate will expire on February 7, 2023.

If apps or backend uses specific validation techniques that use specific certificates, this code needs to be updated.

Apple: Apple PKI

Apple Developer: Upcoming changes to the App Store receipt signing certificate

Apple issued updated certificates for Apple Push Notification service (APNs) and Developer ID intermediate certificate.

Download certificates: Apple PKI

Apple Developer: Updated Apple Developer certificates now available

Apple regularly updates root certificates for its services. Now updated certificates are issued for Developer ID and Push Notification service.

Starting January 27, 2022, intermediate certificate updates will be available for the Apple Push Notification service (APNs) and Developer ID.

Apple Developer

No specific actions are required. Existing certificates will work until expiration or revocation.

Apple Developer: Upcoming Apple Developer certificate updates

Apple Developer Support:

• Developer ID Intermediate Certificate Updates
• Apple Worldwide Developer Relations Intermediate Certificate Expiration

Starting August 4 new certificate will be available via publicKeyUrl. Previous certificate will be no longer available. Apps should always request certificate via this property. Caching this certificate will result in an error.