diff --git a/source/applepay-test-certificate-chain.tar b/source/applepay-test-certificate-chain.tar new file mode 100644 index 00000000..0547bb00 Binary files /dev/null and b/source/applepay-test-certificate-chain.tar differ diff --git a/source/index.html.md b/source/index.html.md index 2130e58e..e3b0527b 100644 --- a/source/index.html.md +++ b/source/index.html.md @@ -846,6 +846,11 @@ a payment token: Notice: An authorization made with applepay cannot be a subsequent-in-series authorization.
+ Notice: In production, the Apple Pay token's signature is checked + against Apple's certificate chain. For the test system, we use + a self-generated certificate + chain (includes a client certificate and key for your convenience). +
Notice: Clients using applepay[raw] are responsible for verifying the payment token's signature, decrypting the token's payment data, validating the format of the fields in the payment data, etc. The procedure