[Shopify Payments App] Shopify self-signed certificates for mTLS

Retired Boards Appdev Customers Discounts And Orders
1

Regarding the mTLS requirements https://shopify.dev/apps/payments#mtls-configuration, what is the purpose of the “Shopify’s Payments Platform Secondary CA Production” certificate as we understand that only the root certificate needs to be registered in our server and we assume it is the “Shopify’s Payments Platform Root CA”?

Thank you.

3 Likes
2

Hey do you have an answer?

3

No I haven’t had any reply about this yet.

1 Like
4

HI,

have you managed it to work ?

I added root certificate to my nginx config:

ssl_verify_client on;
ssl_client_certificate /etc/nginx/certificates/mtls/Shopify_Payments_Platform_Root_CA.crt;
ssl_verify_depth  3;

but I’m getting error:

400 Bad Request
No required SSL certificate was sent

Do you have any thought why it doesn’t work ?

5

If anyone needs help, please check my comment here

https://community.shopify.com/c/customers-discounts-and-orders/mtls-question-payment-app/m-p/2375274/highlight/true#M4031

6

https://community.shopify.com/c/customers-discounts-and-orders/mtls-question-payment-app/m-p/2375274/highlight/true#M4031