enable session restore and sync messages with sealed sender

SignalServiceKit/src/Messages/OWSMessageSender.m

@@ -932,7 +932,12 @@ NSString *const OWSMessageSenderRateLimitedException = @"RateLimitedException";
     message.skipSave = YES;
     SignalRecipient *recipient = [[SignalRecipient alloc] initWithUniqueId:hexEncodedPublicKey];
     NSString *userHexEncodedPublicKey = OWSIdentityManager.sharedManager.identityKeyPair.hexEncodedPublicKey;
-    return [[OWSMessageSend alloc] initWithMessage:message thread:thread recipient:recipient senderCertificate:nil udAccess:nil localNumber:userHexEncodedPublicKey success:^{ } failure:^(NSError *error) { }];
+    SMKSenderCertificate *senderCertificate = [self.udManager getSenderCertificate];
+    OWSUDAccess *theirUDAccess = nil;
+    if (senderCertificate != nil) {
+        theirUDAccess = [self.udManager udAccessForRecipientId:recipient.recipientId requireSyncAccess:YES];
+    }
+    return [[OWSMessageSend alloc] initWithMessage:message thread:thread recipient:recipient senderCertificate:senderCertificate udAccess:theirUDAccess localNumber:userHexEncodedPublicKey success:^{ } failure:^(NSError *error) { }];
 }
 
 - (OWSMessageSend *)getMultiDeviceFriendRequestMessageForHexEncodedPublicKey:(NSString *)hexEncodedPublicKey
@@ -950,7 +955,12 @@ NSString *const OWSMessageSenderRateLimitedException = @"RateLimitedException";
     message.skipSave = YES;
     SignalRecipient *recipient = [[SignalRecipient alloc] initWithUniqueId:hexEncodedPublicKey];
     NSString *userHexEncodedPublicKey = OWSIdentityManager.sharedManager.identityKeyPair.hexEncodedPublicKey;
-    return [[OWSMessageSend alloc] initWithMessage:message thread:thread recipient:recipient senderCertificate:nil udAccess:nil localNumber:userHexEncodedPublicKey success:^{ } failure:^(NSError *error) { }];
+    SMKSenderCertificate *senderCertificate = [self.udManager getSenderCertificate];
+    OWSUDAccess *theirUDAccess = nil;
+    if (senderCertificate != nil) {
+        theirUDAccess = [self.udManager udAccessForRecipientId:recipient.recipientId requireSyncAccess:YES];
+    }
+    return [[OWSMessageSend alloc] initWithMessage:message thread:thread recipient:recipient senderCertificate:senderCertificate udAccess:theirUDAccess localNumber:userHexEncodedPublicKey success:^{ } failure:^(NSError *error) { }];
 }
 
 - (void)sendMessageToDestinationAndLinkedDevices:(OWSMessageSend *)messageSend
@@ -1652,11 +1662,17 @@ NSString *const OWSMessageSenderRateLimitedException = @"RateLimitedException";
         recipient = [SignalRecipient markRecipientAsRegisteredAndGet:recipientId transaction:transaction];
     }];
     
+    SMKSenderCertificate *senderCertificate = [self.udManager getSenderCertificate];
+    OWSUDAccess *theirUDAccess = nil;
+    if (senderCertificate != nil) {
+        theirUDAccess = [self.udManager udAccessForRecipientId:recipient.recipientId requireSyncAccess:YES];
+    }
+
     OWSMessageSend *messageSend = [[OWSMessageSend alloc] initWithMessage:sentMessageTranscript
         thread:message.thread
         recipient:recipient
-        senderCertificate:nil
+        senderCertificate:senderCertificate
-        udAccess:nil
+        udAccess:theirUDAccess
         localNumber:self.tsAccountManager.localNumber
         success:^{
             OWSLogInfo(@"Successfully sent sync transcript.");

SignalServiceKit/src/Messages/UD/OWSUDManager.swift

@@ -100,6 +100,9 @@ public class OWSUDAccess: NSObject {
     func shouldAllowUnrestrictedAccessLocal() -> Bool
     @objc
     func setShouldAllowUnrestrictedAccessLocal(_ value: Bool)
+    
+    @objc
+    func getSenderCertificate() -> SMKSenderCertificate?
 }
 
 // MARK: -
@@ -433,6 +436,21 @@ public class OWSUDManagerImpl: NSObject, OWSUDManager {
         }
     }
     
+    @objc
+    public func getSenderCertificate() -> SMKSenderCertificate? {
+        do {
+            let sender = OWSIdentityManager.shared().identityKeyPair()?.hexEncodedPublicKey
+            let certificate = SMKSenderCertificate(senderDeviceId: OWSDevicePrimaryDeviceId, senderRecipientId: sender!)
+            guard self.isValidCertificate(certificate) else {
+                throw OWSUDError.invalidData(description: "Invalid sender certificate returned by server")
+            }
+            return certificate
+        } catch {
+            Logger.error("\(error)")
+            return nil
+        }
+    }
+
     private func requestSenderCertificate() -> Promise<(certificateData: Data, certificate: SMKSenderCertificate)> {
         return firstly {
             SignalServiceRestClient().requestUDSenderCertificate()