ITMS-91065: Missing Signature in Privacy Impacting SDK

I submitted my app to the App Review and got the following message.

ITMS-91065: Missing signature - Your app includes “Frameworks/OpenSSL.framework/OpenSSL”, which includes BoringSSL / openssl_grpc, an SDK that was identified in the documentation as a privacy-impacting third-party SDK. If a new app includes a privacy-impacting SDK, or an app update adds a new privacy-impacting SDK, the SDK must include a signature file. Please contact the provider of the SDK that includes this file to get an updated SDK version with a signature.

Context

• I used the nextcloud/ios

• OpenSSL version used 1.1.2200

From what I have searched, it seems like an issue with the OpenSSL version - source, which may not include the privacy manifest yet.

The cause of problem was the older OpenSSL version (1.1.22.00), which didn't include the Privacy Manifest file.

I upgraded it to 3.1.5004 as per the repo, which resolved the issue.

Project -> Package Dependencies

Note: I'm not sure if upgrading the version can lead to other issues in the app functionality.