I am doing a similar implementation. I send the post, but I'm uncertain what is expected for the cert? I'm using python requests on the server side and if I try to just send the .cer file the library chokes.
The closest I got to a real response was when I exported the cert from my mac as .p12, converted it to .pem and uploaded it to the server.
response = requests.post(validationURL, data=data,
cert='merchant_id_20180904.pem')
However, that yeilds me this:
Starting new HTTPS connection (1): apple-pay-gateway-cert.apple.com
POST /paymentservices/startSession HTTP/1.1" 500 73
{
"statusMessage": "Error processing request.",
"statusCode": "500"
}
How should I be exporting my cert and attaching it to the request? A 500 sounds like a problem at Apple.