{"id":133962,"date":"2023-05-26T17:58:30","date_gmt":"2023-05-26T17:58:30","guid":{"rendered":"https:\/\/developer.apple.com\/news\/?id=smofnyhj"},"modified":"2023-05-26T17:58:30","modified_gmt":"2023-05-26T17:58:30","slug":"upcoming-changes-to-the-app-store-receipt-signing-intermediate-certificate","status":"publish","type":"post","link":"https:\/\/sickgaming.net\/blog\/2023\/05\/26\/upcoming-changes-to-the-app-store-receipt-signing-intermediate-certificate\/","title":{"rendered":"Upcoming changes to the App\u00a0Store receipt signing intermediate certificate"},"content":{"rendered":"<div><img decoding=\"async\" src=\"https:\/\/www.sickgaming.net\/blog\/wp-content\/uploads\/2023\/05\/upcoming-changes-to-the-app-store-receipt-signing-intermediate-certificate.png\" class=\"ff-og-image-inserted\"><\/div>\n<p>As part of ongoing efforts to improve security and privacy on Apple platforms, the App&nbsp;Store receipt signing intermediate certificate that\u2019s used to verify the sale of apps and associated in\u2011app purchases is being updated to use the SHA\u2011256 cryptographic algorithm. This update will be completed in multiple phases and new apps and app updates may be impacted, depending on how they verify receipts.<\/p>\n<h3>What to expect<\/h3>\n<p>If your app verifies App&nbsp;Store transactions using the <a href=\"https:\/\/developer.apple.com\/documentation\/storekit\/apptransaction\">AppTransaction<\/a> and <a href=\"https:\/\/developer.apple.com\/documentation\/storekit\/transaction\">Transaction<\/a> APIs, or the <a href=\"https:\/\/developer.apple.com\/documentation\/appstorereceipts\/verifyreceipt\">verifyReceipt<\/a> web service endpoint, no action is required.<\/p>\n<p>If your app validates App&nbsp;Store <a href=\"https:\/\/developer.apple.com\/documentation\/appstorereceipts\/validating_receipts_on_the_device\">receipts on device<\/a>, make sure your app will support the SHA-256 version of this certificate. New apps and app updates that don\u2019t support the SHA-256 version of this certificate will no longer be accepted by the App Store starting August 14, 2023.<\/p>\n<h3>Important dates<\/h3>\n<ul>\n<li>June 20, 2023. Receipts in the sandbox environment will be signed with the SHA\u2011256 version of this certificate for devices running a minimum of iOS&nbsp;16.6, iPadOS&nbsp;16.6, tvOS&nbsp;16.6, watchOS&nbsp;9.6, or&nbsp;macOS&nbsp;Ventura&nbsp;13.5.<\/li>\n<li>August 14, 2023. Receipts in new apps and app updates submitted to the App&nbsp;Store, as well as all apps in sandbox, will be signed with the SHA\u2011256 intermediate certificate.<\/li>\n<\/ul>\n<p>For more details, view TN3138: <a href=\"https:\/\/developer.apple.com\/documentation\/technotes\/tn3138-handling-app-store-receipt-signing-certificate-changes\">Handling App Store receipt signing certificate change<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>As part of ongoing efforts to improve security and privacy on Apple platforms, the App&nbsp;Store receipt signing intermediate certificate that\u2019s used to verify the sale of apps and associated in\u2011app purchases is being updated to use the SHA\u2011256 cryptographic algorithm. This update will be completed in multiple phases and new apps and app updates may [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[55],"tags":[],"class_list":["post-133962","post","type-post","status-publish","format-standard","hentry","category-apple-developer-news"],"_links":{"self":[{"href":"https:\/\/sickgaming.net\/blog\/wp-json\/wp\/v2\/posts\/133962","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/sickgaming.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/sickgaming.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/sickgaming.net\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/sickgaming.net\/blog\/wp-json\/wp\/v2\/comments?post=133962"}],"version-history":[{"count":0,"href":"https:\/\/sickgaming.net\/blog\/wp-json\/wp\/v2\/posts\/133962\/revisions"}],"wp:attachment":[{"href":"https:\/\/sickgaming.net\/blog\/wp-json\/wp\/v2\/media?parent=133962"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/sickgaming.net\/blog\/wp-json\/wp\/v2\/categories?post=133962"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/sickgaming.net\/blog\/wp-json\/wp\/v2\/tags?post=133962"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}