li-bingjun_unexpected

[tight iris]

👋 Welcome to your new thread!

⏲️ We'll be here soon! Typically we respond in a few minutes, but sometimes we might take a bit longer if the server is busy or if you have a particularly tricky question.

⏱️ We close idle threads, which makes them read-only. Once a thread is closed it won't be reopened, but you can always start a new thread if you have another question.

🔗 This thread will always be available, even after it's closed. You can find it again using Discord's search, or you can save this link: https://discord.com/channels/841573134531821608/1215337659745173534

📝 Have more to share? Add more details, code, screenshots, videos, etc. below.

[eternal grove]

what's your domain

[pliant pawn]

Hi here is my domain http://esgx.com.hk/.well-known/apple-developer-merchantid-domain-as…

forget https. here is the one: https://esgx.com.hk/.well-known/apple-developer-merchantid-domain-association

[short obsidian]

I am not seeing the correct file when I use the curl command that simulates how apple reaches out to your server

      -H "Accept;" -H "Accept:" \
      -H "Via: https/1.1 usatl4-edge-bx-014.ts.apple.com[11FD071B] (ApacheTrafficServer/6.1.2)" \
      -H "User-Agent: oslopartner Client 1.0" -H "Accept-Encoding: gzip" | shasum```

the correct sha sum should be 66e294f14f03165bb73637f562179d3d9c6e0da9

But whatever your server is sending me back as a checksum of 24bfee717de6df85ff8dc129b9012d2259a1ea63

Sometimes servers will serve different things to a web browser vs a request like this. If you test with that command it should help you debug why your server is sending something different

[eternal grove]

Also seeing some certificate chain issues with your domain so it could also be an SSL cert verification issue (per the error we gave you): https://www.ssllabs.com/ssltest/analyze.html?d=esgx.com.hk

So looks like there's more than 1 problem