1. Caddy version (caddy version): Caddy v1.0.5 (h1:5B1Hs0UF2x2tggr2X9jL2qOZtDXbIWQb9YLbmlxHSuM=) 2. How I run Caddy: [image] Loggie — Your personal activity memory Loggie quietly tracks what you work on and stores everything locally. Ask any AI about your day, find lost tabs, and never…

Adding loggie.app:443/.well-known { root /var/www/static/.well-known: tls { dns digitalocean cipher TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 } } To my caddy file gets me past the TSL suite issue and now apple gives an error of Domain verification failed. Unable to access verification …

Caddy v1 is no longer supported. Please upgrade to Caddy v2. https://caddyserver.com/docs/download#debian-ubuntu-raspbian [image] Caddy - The Ultimate Server with Automatic HTTPS Caddy is a powerful, enterprise-ready, open source web server with automatic HTTPS written in Go …

I’ve upgraded to caddy 2.2.1 and my new caddy file looks like loggie.app { root * /var/www/loggie/build/ file_server } loggie.app:443/api { reverse_proxy * 127.0.0.1:8000 } And my service file is [Unit] Description=Caddy Documentation=https://caddyserver.com/docs/ After=network.target netwo…

I recommend writing your config like this instead: loggie.app { handle /api* { reverse_proxy 127.0.0.1:8000 } handle { root * /var/www/loggie/build file_server } } I can’t really help with the issues with Apple though, frankly. In the past I’ve seen them have very strange requirements. …

[image] Jason_Inbody: from apple. I was able to see in the older version that the there was a TSL cipher suite miss match between my caddy server and apple’s server from the journalctl Can you paste that log here please?

This was from the caddy v1 Nov 28 20:10:52 Loggie caddy[1239]: http: TLS handshake error from 17.179.144.226:7765: tls: no cipher suite supported by both client and server This was from caddy v2. I’m not seeing any errors pop up in v2. Maybe I don’t the logging properly set in the service to c…

Thanks! That looks like Apple needs to fix something… surprised they don’t support modern cipher suites? In Caddy 2, more logs can be visible by enabling debug mode ( Global options (Caddyfile) — Caddy Documentation ).

Turning on debug shows the handshake error on 2.2.1 too now Nov 29 01:49:38 Loggie caddy[5186]: {“level”:“debug”,“ts”:1606614578.4891794,“logger”:“http.stdlib”,“msg”:“http: TLS handshake error from 17.179.144.226:2356: tls: no cipher suite supported by both client and server”} These are the list…

The list of default cipher suites Caddy uses is here: caddyserver/caddy/blob/master/modules/caddytls/values.go#L52 // SupportedCipherSuites returns a list of all the cipher suites // Caddy supports. The list is NOT ordered by security preferen…

I was never able to get apples servers to work properly. Everything looks fine on the Caddy side and I was out of things to debug on my side. I was using stripe to handle my payment processing and they actually ended up handling the apple merchant side of things for me. Stripe had me also place a…

Apple Pay TLS Cipher Suite Issues

Help

francislavoie (Francis Lavoie) November 28, 2020, 8:05pm 3

Caddy v1 is no longer supported. Please upgrade to Caddy v2.

https://caddyserver.com/docs/download#debian-ubuntu-raspbian