Apple Pay for web ciphers

Website, Application, Performance Security
1

I’m trying to set up Apple Pay for web for a website behind Cloudflare. According to the Apple docs the TLS on the server has to support one of the cipher suits they recognise (Setting Up Your Server | Apple Developer Documentation). The docs I’ve found on Cloudflare unfortunately don’t support any of those (Cipher suites · Cloudflare SSL/TLS docs). Indeed when I try to verify the website with Apple it complains that the cipher suits aren’t right.

Is there a way around it somehow, or do I have to move the website away from Cloudflare?

2

Hi @maciej1, are you still having issues? On our free plan we issue one certificate that requires the client browser to support SNI (Server Name indication). On our Pro plan we issue 3 certificates for your domain and client browsers do not need to support SNI. This makes our pro plan more compatible with a wider range of clients.

Based on https://support.cloudflare.com/hc/en-us/articles/200933580-What-cipher-suites-does-Cloudflare-use-for-SSL-, there’s overlap with the ciphers apple needs, Apple Pay on the Web | Apple Developer Documentation and the ones we provide for customers on the pro plan.

3

This topic was automatically closed after 30 days. New replies are no longer allowed.