readdle / app-store-receipt-verification Goto Github PK

composer require readdle/app-store-receipt-verification

As you can see in this documentation https://developer.apple.com/documentation/appstorereceipts/responsebody/receipt
A receipt can have preorder_date fields in case of a preorder

For now I'm using the verifyReceipt API call to get the information if the user has preordered my app
When comparing the response with your dev mode, I found that the field 32 contains the preorder_date

with your library

VS

with verifyReceipt API call

Trying to run \Readdle\AppStoreReceiptVerification\AppStoreReceiptVerification::verifyReceipt() on a receipt I have and it dies with this error. Reading up a bit I believe this is tied to not implementing the REAL type as per the 09 here https://www.oss.com/asn1/resources/asn1-made-simple/asn1-quick-reference.html

Any chance this could get fixed/added?

I am able to run AppStoreReceiptVerification::verifyReceipt() on my local development machine (MacOs brew php 8.1.24) but on my production server I get a "Verification failed" exception (Linux centos 9 php 8.1.25) using the exact same $receiptData.
What could be the difference between both envirionments? Are there openssl settings maybe?

$receiptData=... 
$appleIncRootCertificate=\Readdle\AppStoreReceiptVerification\Utils::DER2PEM(
   file_get_contents('https://www.apple.com/appleca/AppleIncRootCertificate.cer')
);
$response=\Readdle\AppStoreReceiptVerification\AppStoreReceiptVerification::verifyReceipt(
   $receiptData,
   $appleIncRootCertificate
);

testing a bit further and I found out that $this->verifyRootCertificate($trustedAppleRootCertificate) fails: openssl_x509_verify(..) returns 0