#avneet-applepay-domainverification
uneven willowBOT
Hello! We'll be with you shortly. Below are links to other discussions we've had with you in the past week in case you want to review that information. If your question is related to one of these previous discussions, please provide a comprehensive summary of the current state and what you need help with now. We help many users simultaneously, so a summary allows us to resolve your issue as soon as possible.
- avneet-applepay-domain, 19 hours ago, 12 messages
- avneetsingh_11747, 1 day ago, 11 messages
- avneet-charge-legacy, 2 days ago, 4 messages
scenic ember
You won't be able to do this with a private server, i don't think
The actual verification request here comes from Apple, we don't control that and I don't know the origin IPs they use
Stripe makes a check first before we ask apple to verifying, to help you get things in place
But the real verification is directly from apple
scenic ember
Sure, you need to ensure your site passes SSL checks, you can use SSL labs to check that: https://www.ssllabs.com/ssltest/analyze.html
tulip sphinx
Checking
This is the report: https://www.ssllabs.com/ssltest/analyze.html?d=diy23-azure-dev-14.hrblock-npr.ca
scenic ember
It seems like that chain being incomplete might be interfering with things here, but I'm not sure how you can resolve that
tulip sphinx
But dont you think that the issue could be due to Stripe not whitelisted to get through our WAF
This is the documentation provided by Stripe for source IP Addresses: https://stripe.com/docs/ips
From this document, which IP address should we use to integrate with Apple Pay that is my question...
Once we get that we can ask our security team to sign off on access
scenic ember
Looking to see if I can get you that
scenic ember
Still looking
scenic ember
Ok, it's the same IPs as our webhook notifications documented here: https://stripe.com/docs/ips#webhook-notifications
And you'll also need to allow the IPs Apple specifies here: https://developer.apple.com/documentation/apple_pay_on_the_web/setting_up_your_server#3179116
tulip sphinx
Which IP address should we use out of the list?
tulip sphinx
ok
Meaning all of webhook IPs + Apple IPs need to be whitelisted by my application?
scenic ember
Correct
tulip sphinx
Thank you
uneven willowBOT