I submitted my app to the App Review and got the following message.
ITMS-91065: Missing signature - Your app includes “Frameworks/OpenSSL.framework/OpenSSL”, which includes BoringSSL / openssl_grpc, an SDK that was identified in the documentation as a privacy-impacting third-party SDK. If a new app includes a privacy-impacting SDK, or an app update adds a new privacy-impacting SDK, the SDK must include a signature file. Please contact the provider of the SDK that includes this file to get an updated SDK version with a signature.
Context
I used the nextcloud/ios
OpenSSL version used 1.1.2200
From what I have searched, it seems like an issue with the OpenSSL
version - source, which may not include the privacy manifest yet.
The cause of problem was the older OpenSSL
version (1.1.22.00), which didn't include the Privacy Manifest
file.
I upgraded it to 3.1.5004
as per the repo, which resolved the issue.
Project -> Package Dependencies
Note: I'm not sure if upgrading the version can lead to other issues in the app functionality.