See email titled 'Action Needed: Apple Pay Payment Processing Certificate Expires in 30 Days'
https://developer.apple.com//help/account/configure-app-capabilities/configure-apple-pay-on-the-web/
related: https://phabricator.wikimedia.org/T290108
upload pem: https://phabricator.wikimedia.org/T293721
Aug 16 10:37:25 payments1005 mediawiki[419698]: mediawiki[419698]: [ZNym5LZpU-3U_8Cv2VgvFwAAAAY] /api.php SmashPig\Core\ApiException: ApplePay token amount-mismatch
Aug 16 11:22:08 payments1007 adyen_gateway: 189997748:189997748.1 Displaying fail page for exception: Unknown Adyen error code 15_026
some error log, not sure it related, log here for reference, if not related, need a new ticket
I just found the previous ticket with instructions on how we did this last time T329723: Reverify payments.wikimedia.org for ApplePay (Production)
Sorry, I just realised they are the steps for validating the domain and not creating a payment processing certificate.
blocked:
1: my account wfan@wikimeia.org have no permission to edit the merchant identity from adyen live, missing developer section (got the permission on Aug 29, so created a new processing certificate for live account, will not activate it until have the Merchant Identity certificate created)
2: apple developer disabled the button to create a Apple Pay Merchant Identity, which is the final pem key needs to check for each apple pay transaction session, already emailed apple team, will update the response here, they response with general document, not helpful, send a follow up email to explain not document needed is the create certificate button been disabled
Unlocked the create certificate button by agree the policy, and now sandbox works fine with new processing certificate and the new merchant id certificate, please pull the latest private-config to test apple pay locally, and I will provide the new pem and password to Dallas for live
Created a ticket https://phabricator.wikimedia.org/T345307 to upload the pem key to server and then update the main.yaml with new certificate at local-config, then deploy both payments-wiki and SmashPig to enable the new certificate, then active the new processing certificate, and revoke the old merchant identity certificate. then both me and Dallas tested with iphone works fine, also moniter the log, seems other users also donate fine here.
Able to move this ticket to done