This includes the folder as well as the C header files. It’s compiled as static libraries to make modification more difficult. The starter project includes OpenSSL 1.1.1, the newest version, in the OpenSSL folder.

You can find scripts and instructions on GitHub if you want to do it yourself.

OpenSSL isn’t very Swift-friendly, so you’ll be creating a Swift wrapper during this tutorial.Ĭompiling OpenSSL for the iPhone isn’t a simple process. This tutorial uses OpenSSL libraries to do much of the work of verifying the cryptography and decoding the ASN.1 data provided in the receipt. It’s better to use a known and validated library instead of trying to write your own. The starter app implements requesting a refreshed certificate if one doesn’t exist.Ĭryptographic code is complex and it’s easy to make mistakes. When testing an app through XCode, the app won’t have a receipt by default. You’ll need a Development Certificate and a sandbox account. To test receipt validation, you must run the app on a real device, as it won’t work in the simulator. See In-App Purchase Tutorial: Getting Started if you need a primer on StoreKit. The starter project is an iPhone application that supports StoreKit and in-app purchases. Getting Startedĭownload the materials for this tutorial using the Download Materials button at either the top or bottom of this page. Your app uses these attributes to both determine the receipt is valid for the device and what the user purchased. Together, these represent the contents of the receipt. Each of these attributes consists of a type, version and value. The payload consists of a set of receipt attributes in a cross-platform format called ASN.1. You use the certificate chain and digital signature to validate that Apple produced the receipt. The container contains a payload, a chain of certificates and a digital signature. This is a standard format for data with cryptography applied to it. The receipt consists of a single file in the app bundle. You will need an iOS developer account, a real device for testing, access to the iOS Developer Center and App Store Connect.

For this tutorial, you should be familiar with in-App Purchases and StoreKit. In this tutorial, you’ll learn how these receipts work and how they’re validated on a device. The App Store generates a receipt in the app bundle any time a user purchases your app, makes an in-app purchase or updates the app. They accomplish this by providing a record of sale. Receipts provide a tool to confirm those purchases. Paid software has always presented a problem where some users try to use the software without buying it or to fraudulently access in-app purchases.

Android to apple read receipts