Suddenly receiving error 21002 from verifyReceipt endpoint for sandbox receipt

Question

w_grand OP

Created Feb ’23

Replies 28

Boosts 7

Views 6.9k

Participants 30

We started getting error code 21002 from the verifyReceipt endpoint today for any receipt passed to it:

{
    "status": 21002
}

I have created a new sandbox tester, and cleared and reinstalled the application before attempting the purchase. I'm seeing this response through RevenueCat's receipt validation tool (https://www.revenuecat.com/app-store-receipt-validation/) and from a direct cURL command:

curl --location --request POST 'https://sandbox.itunes.apple.com/verifyReceipt' \

--header 'content-type: application/json' \

--data-raw '{

    "receipt-data":"{RECEIPT_DATA}",

    "password":"{SECRET}",

    "exclude-old-transactions":"false"

}'

This was working as of yesterday, but seems to be failing for anyone who has tried today. Has anyone else run into issues with this?

Answered by DTS Engineer in 744422022

There was an outage with the App Store receipt verification that is now resolved. See the status page for details. File a Feedback report if the issue still occurs.

Boost

Answer 1

nlaw9009 OP

Feb ’23

I am also running into the same issue and it started occurring sometime this morning.

1

Answer 2

rparrett OP

Feb ’23

Yes, we are seeing the same symptoms over here.

Everything was fine a few days ago.
We didn't change anything
Same error (21002) from RevenueCat's tool
Painstakingly bypassed any of our server-side or javascript code that is in any way involved.

1

Answer 3

w_grand OP

Feb ’23

The status page now shows an outage for Receipt Verification - https://developer.apple.com/system-status/. Hopefully this will be resolved soon.

0

Answer 4

eliaszaghrini OP

Feb ’23

Yes I am also facing the same issue since multiple hours now, should be an Apple problem, hope they will fix it soon

1

Answer 5

ryan-dailyburn OP

Feb ’23

My team is hitting the exact same problem sandbox receipts as of today are returning as malformed data - worked fine in testing yesterday it seems like there must be some issue with the IAP system?

0

Answer 6

Jonh Snav OP

Feb ’23

Running into the same issue as well using both curl and our server receipt verification we get the 21002 response from https://sandbox.itunes.apple.com/verifyReceipt

0

Answer 7

kushsolitary OP

Feb ’23

Yeah we are facing the same issue as well. It works in the App Store build but TestFlight and sandbox are failing

0

Answer 8

eggapple1220 OP

Feb ’23

me too , env = sandbox , 21002

0

Answer 9

sailip OP

Feb ’23

+1. I hope Apple's official developers can answer this problem.

0

Answer 10

eliaszaghrini OP

Feb ’23

Facing the same issue, Apple is aware of it and is reporting it as an outage in the System Statuses for developers

Screenshot 2023-02-08 at 9.29.50 AM.png

1

Answer 11

KarymovDN OP

Feb ’23

It is probably connected to Upcoming changes to the App Store receipt signing certificate

1

Answer 12

KarymovDN OP

Feb ’23

Ok, I took a receipt from Sandbox environment and extracted the certificates used to sign it. The last cert was Apple Root certificate, but the first 2 were the already expired intermediate certificates. Anything signed with those MUST fail after February 7. The part with "Not After : Feb 7 21:48:47 2023 GMT"

Certificate:
  Signature Algorithm: sha1WithRSAEncryption
    Issuer: C=US, O=Apple Inc., OU=Apple Worldwide Developer Relations, CN=Apple Worldwide Developer Relations Certification Authority
    Validity
      Not Before: Nov 13 02:15:09 2015 GMT
      Not After : Feb 7 21:48:47 2023 GMT
    Subject: CN=Mac App Store and iTunes Store Receipt Signing, OU=Apple Worldwide Developer Relations, O=Apple Inc., C=US

____________________

Certificate:
  Signature Algorithm: sha1WithRSAEncryption
    Issuer: C=US, O=Apple Inc., OU=Apple Certification Authority, CN=Apple Root CA
    Validity
      Not Before: Feb 7 21:48:47 2013 GMT
      Not After : Feb 7 21:48:47 2023 GMT
    Subject: C=US, O=Apple Inc., OU=Apple Worldwide Developer Relations, CN=Apple Worldwide Developer Relations Certification Authority

____________________

Certificate:
  Signature Algorithm: sha1WithRSAEncryption
    Issuer: C=US, O=Apple Inc., OU=Apple Certification Authority, CN=Apple Root CA
    Validity
      Not Before: Apr 25 21:40:36 2006 GMT
      Not After : Feb 9 21:40:36 2035 GMT
    Subject: C=US, O=Apple Inc., OU=Apple Certification Authority, CN=Apple Root CA

1

Answer 13

moschous_manos OP

Feb ’23

+1 we face the same issue starting from yesterday. all receipts verified against sandbox return error 21002

0

Answer 14

zhangc OP

Feb ’23

只有沙盒环境 21002

0

Answer 15

Roman34 OP

Feb ’23

Today I discovered that purchases were broken in one application: Response from appstore for transactionId '2000000***' : {"status":21002}

In other app purchases still work. Is this an Apple problem?

0

Answer 16

atom1959 OP

Feb ’23

Can you explain the process of taking a receipt from the sandbox and extracting the cert?

0

Answer 17

KarymovDN OP

Feb ’23

Ok, I tried using Restore Purchase item and it looks like the problem gets resolved (at least in sandbox!) with the help of certificate which is valid until Nov 17 20:40:52 2023 GMT. Looks like we'll have fun right before Thanksgiving day this time.

If someone is willing to check with production, I can provide 1 line of code and a couple terminal commands. Then those of us who had issues with production builds will have a way out... At least for the users who contacted us.

0

Answer 18

tjohnson_bf OP

Feb ’23

Within the last half hour or so, Apple updated their status page to show the issue as resolved. We're showing purchases that were started yesterday in sandbox as being able to be restored now.

1

Answer 19

ryanking OP

Feb ’23

I tried 100 times with the same receipt. It stills shows 21002 (Sandbox) and normal back and forth. tried 100 times but only a few get responses. Any idea?

receipt 21002 and Valid.jpg

0

Answer 20

Skyler_S OP

Feb ’23

We're still experiencing this issue in Sandbox. We're POSTing to https://sandbox.itunes.apple.com/verifyReceipt and we consistently get 21002. Production seems okay.

2

Answer 21

1istbesser OP

Feb ’23

Still getting 21002 even if the status shows the outage was solved. We dont have the app published cause we thought is an error on our side. Go figure. Should I have any hopes the sandbox will work tomorrow? or rather go publish the app and consider the validation is working and they they wil really work after its in production

0

Answer 22

rparrett OP

Feb ’23

We are also still seeing this in the sandbox and in testflight builds. However, roughly 10% of purchase+verification attempts are succeeding.

0

Answer 23

DTS Engineer OP

Apple

Feb ’23

Accepted Answer

Recommended

There was an outage with the App Store receipt verification that is now resolved. See the status page for details. File a Feedback report if the issue still occurs.

1

Answer 24

tromboneparrot OP

Feb ’23

Also still experiencing the issue. I have filed FB11983534.

2

Answer 25

Lynette7 OP

Feb ’23

Hi mate do you recommend using Revenuecat to support in-app subscriptions？I'm new in here, really appreciate it if you could offer some advices, thanks!!!!!

0