Visit https://sandbox.itunes.apple.com/verifyReceipt failed

Question

neuswcjr OP

Created Mar ’24

Replies 2

Boosts 0

Participants 3

Hi

When we add IAP for our app a few years ago, we setup our server to visit https://sandbox.itunes.apple.com/verifyReceipt, to verify our customer's receipt after the purchase the IAP. Everything goes well for the past few years.

But since March 22, 2024, our server cannot visit the URL above any more, and the returned failure is "SSLException: Received fatal alert: protocol_version"(from JAVA). From this we guess that Apple have made some changes about the SSL/TLS protocol requirement of your server api.

Could you guys tell us which SSL/TLS is required to visit this URL? We need these information to make a plan of our server code upgrade or something like that, and continue the receipt verification.

Thank you. Hope to hear from you soon.

Boost

Answer 1

wuhaowinner OP

Mar ’24

Hello, I have the same problem, and I resolve this issue by upgrading the TLS protocol version of your .Net service to 1.2.

1

Answer 2

Meegan OP

Mar ’24

Below is the code snippet to fix the issue within my legacy JAVA (1.7) server, using raw HttpsURLConnection object


        SSLContext ssl = SSLContext.getInstance("TLSv1.2");
        ssl.init(null, null, new SecureRandom());
        sslSocketFactory = ssl.getSocketFactory();

        HttpsURLConnection con = (HttpsURLConnection) dataUrl.openConnection();
        con.setSSLSocketFactory(sslSocketFactory);
        con.setRequestMethod("POST");
        con.setRequestProperty("content-type", "text/json");
        con.setRequestProperty("Proxy-Connection", "Keep-Alive");

0