Suddenly receiving error 21002 from verifyReceipt endpoint for sandbox receipt

App & System Services StoreKit
w_grand OP
Created Feb ’23
Replies 28
Boosts 7
Views 8.2k
Participants 30

We started getting error code 21002 from the verifyReceipt endpoint today for any receipt passed to it:

{
    "status": 21002
}

I have created a new sandbox tester, and cleared and reinstalled the application before attempting the purchase. I'm seeing this response through RevenueCat's receipt validation tool (https://www.revenuecat.com/app-store-receipt-validation/) and from a direct cURL command:

curl --location --request POST 'https://sandbox.itunes.apple.com/verifyReceipt' \

--header 'content-type: application/json' \

--data-raw '{

    "receipt-data":"{RECEIPT_DATA}",

    "password":"{SECRET}",

    "exclude-old-transactions":"false"

}'

This was working as of yesterday, but seems to be failing for anyone who has tried today. Has anyone else run into issues with this?

Answered by DTS Engineer in 744422022

There was an outage with the App Store receipt verification that is now resolved. See the status page for details. File a Feedback report if the issue still occurs.

Replies  28
Boosts  7
Views  8.2k
Participants  30
nlaw9009 OP
Feb ’23

I am also running into the same issue and it started occurring sometime this morning.

1
rparrett OP
Feb ’23

Yes, we are seeing the same symptoms over here.

  • Everything was fine a few days ago.
  • We didn't change anything
  • Same error (21002) from RevenueCat's tool
  • Painstakingly bypassed any of our server-side or javascript code that is in any way involved.
1
w_grand OP
Feb ’23

The status page now shows an outage for Receipt Verification - https://developer.apple.com/system-status/. Hopefully this will be resolved soon.

0
eliaszaghrini OP
Feb ’23

Yes I am also facing the same issue since multiple hours now, should be an Apple problem, hope they will fix it soon

1
ryan-dailyburn OP
Feb ’23

My team is hitting the exact same problem sandbox receipts as of today are returning as malformed data - worked fine in testing yesterday it seems like there must be some issue with the IAP system?

0
Jonh Snav OP
Feb ’23

Running into the same issue as well using both curl and our server receipt verification we get the 21002 response from https://sandbox.itunes.apple.com/verifyReceipt

0
kushsolitary OP
Feb ’23

Yeah we are facing the same issue as well. It works in the App Store build but TestFlight and sandbox are failing

0
eggapple1220 OP
Feb ’23

me too , env = sandbox , 21002

0
sailip OP
Feb ’23

+1. I hope Apple's official developers can answer this problem.

0
eliaszaghrini OP
Feb ’23

Facing the same issue, Apple is aware of it and is reporting it as an outage in the System Statuses for developers

1
KarymovDN OP
Feb ’23

It is probably connected to Upcoming changes to the App Store receipt signing certificate

1
KarymovDN OP
Feb ’23

Ok, I took a receipt from Sandbox environment and extracted the certificates used to sign it. The last cert was Apple Root certificate, but the first 2 were the already expired intermediate certificates. Anything signed with those MUST fail after February 7. The part with "Not After : Feb 7 21:48:47 2023 GMT"

Certificate:
  Signature Algorithm: sha1WithRSAEncryption
    Issuer: C=US, O=Apple Inc., OU=Apple Worldwide Developer Relations, CN=Apple Worldwide Developer Relations Certification Authority
    Validity
      Not Before: Nov 13 02:15:09 2015 GMT
      Not After : Feb 7 21:48:47 2023 GMT
    Subject: CN=Mac App Store and iTunes Store Receipt Signing, OU=Apple Worldwide Developer Relations, O=Apple Inc., C=US

____________________

Certificate:
  Signature Algorithm: sha1WithRSAEncryption
    Issuer: C=US, O=Apple Inc., OU=Apple Certification Authority, CN=Apple Root CA
    Validity
      Not Before: Feb 7 21:48:47 2013 GMT
      Not After : Feb 7 21:48:47 2023 GMT
    Subject: C=US, O=Apple Inc., OU=Apple Worldwide Developer Relations, CN=Apple Worldwide Developer Relations Certification Authority

____________________

Certificate:
  Signature Algorithm: sha1WithRSAEncryption
    Issuer: C=US, O=Apple Inc., OU=Apple Certification Authority, CN=Apple Root CA
    Validity
      Not Before: Apr 25 21:40:36 2006 GMT
      Not After : Feb 9 21:40:36 2035 GMT
    Subject: C=US, O=Apple Inc., OU=Apple Certification Authority, CN=Apple Root CA
1
moschous_manos OP
Feb ’23

+1 we face the same issue starting from yesterday. all receipts verified against sandbox return error 21002

0
zhangc OP
Feb ’23

只有沙盒环境 21002

0
Roman34 OP
Feb ’23

Today I discovered that purchases were broken in one application: Response from appstore for transactionId '2000000***' : {"status":21002}

In other app purchases still work. Is this an Apple problem?

0
Suddenly receiving error 21002 from verifyReceipt endpoint for sandbox receipt
First post date Last post date
 
 
Q