mTLS handshake with Shopify server

Job ID: 34658905

Budget: $10 – $30 USD

I have a server with apache and lets encrypt, client authentication (shopify) on apache server
You need to set mTLS on that with shopify as Shopify Payments apps need to implement mTLS to handle all requests where the app acts as the server and Shopify acts as the client, such as when Shopify initiates sessions with payments apps for payment, refund, capture, and void requests. In these cases, Shopify uses its own client certificate. Payments apps need to use the provided self-signed CA to validate Shopify's certificate. Using mTLS in these scenarios allows payments apps to verify that the client initiating the request is Shopify and that the traffic between Shopify and the payments app is trusted and secure.

Because mTLS is mutual, the payments app also needs to provide a certificate that Shopify will validate. For this certificate, you need to use a Trusted CA Signed SSL Certificate, and not Shopify’s self-signed CA.

Given thing - https://shopify.dev/apps/payments#transaction-requirements
shopify root CA

Read the job carefully its very small
Related categories: Web Security Apache OpenSSL Shopify Development SSL