Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

ITMS-91065: Missing signature - OpenSSL.framework #224

Open
ecubo opened this issue May 27, 2024 · 8 comments
Open

ITMS-91065: Missing signature - OpenSSL.framework #224

ecubo opened this issue May 27, 2024 · 8 comments

Comments

@ecubo
Copy link

ecubo commented May 27, 2024

Hello! Congratulations on the work. I'm running some tests and encounter this problem with Apple:

TMS-91065: Missing signature - Your app includes “Frameworks/OpenSSL.framework/OpenSSL”, which includes BoringSSL / openssl_grpc, an SDK that was identified in the documentation as a privacy-impacting third-party SDK. If a new app includes a privacy-impacting SDK, or an app update adds a new privacy-impacting SDK, the SDK must include a signature file. Please contact the provider of the SDK that includes this file to get an updated SDK version with a signature. For details about verifying the code signature for a third-party SDK, visit: https://developer.apple.com/documentation/xcode/verifying-the-origin-of-your-xcframeworks.

@petersulaf
Copy link

+1

@AVGThor
Copy link

AVGThor commented May 30, 2024

you just need to update OpenSSL to new version (3.1.5001), rebuild your app and publish it again to test flight

@dcrespim
Copy link

When update OpenSSL to version 3.1.xx, fail PACE authentication

@AVGThor
Copy link

AVGThor commented May 30, 2024

authentication

Oh i use BAC so i don't know how to fix

@AVGThor
Copy link

AVGThor commented May 30, 2024

I failed on PACE can you show me how to fix it

@dcrespim
Copy link

I'm working on it

@hardeflo
Copy link

There is a new signed 1.1.X Release of OpenSSL. This should do for the moment, right? Upgrading to 3.X is probably tracked in #217.

New Signed Version of OpenSSL: https://github.com/krzyzanowskim/OpenSSL/releases/tag/1.1.2300

@AndyQ
Copy link
Owner

AndyQ commented Jul 3, 2024

This has been tested and implemented in current main branch (no release quite yet) - please test and report any issues

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

6 participants