xcodeopensslnextcloudboringsslprivacy-manifest

ITMS-91065: Missing Signature in Privacy Impacting SDK


I submitted my app to the App Review and got the following message.

ITMS-91065: Missing signature - Your app includes “Frameworks/OpenSSL.framework/OpenSSL”, which includes BoringSSL / openssl_grpc, an SDK that was identified in the documentation as a privacy-impacting third-party SDK. If a new app includes a privacy-impacting SDK, or an app update adds a new privacy-impacting SDK, the SDK must include a signature file. Please contact the provider of the SDK that includes this file to get an updated SDK version with a signature.

Context

From what I have searched, it seems like an issue with the OpenSSL version - source, which may not include the privacy manifest yet.


Solution

  • The cause of problem was the older OpenSSL version (1.1.22.00), which didn't include the Privacy Manifest file.

    I upgraded it to 3.1.5004 as per the repo, which resolved the issue.

    Project -> Package Dependencies

    enter image description here

    Note: I'm not sure if upgrading the version can lead to other issues in the app functionality.