Apple Pay for web ciphers

[maciej1]

I’m trying to set up Apple Pay for web for a website behind Cloudflare. According to the Apple docs the TLS on the server has to support one of the cipher suits they recognise (https://developer.apple.com/documentation/apple_pay_on_the_web/setting_up_your_server). The docs I’ve found on Cloudflare unfortunately don’t support any of those (https://developers.cloudflare.com/ssl/ssl-tls/cipher-suites/). Indeed when I try to verify the website with Apple it complains that the cipher suits aren’t right.

Is there a way around it somehow, or do I have to move the website away from Cloudflare?

[cloonan]

Hi @maciej1, are you still having issues? On our free plan we issue one certificate that requires the client browser to support SNI (Server Name indication). On our Pro plan we issue 3 certificates for your domain and client browsers do not need to support SNI. This makes our pro plan more compatible with a wider range of clients.

Based on https://support.cloudflare.com/hc/en-us/articles/200933580-What-cipher-suites-does-Cloudflare-use-for-SSL-, there’s overlap with the ciphers apple needs, https://developer.apple.com/documentation/apple_pay_on_the_web and the ones we provide for customers on the pro plan.