modes: Add TLS umode (+Z)

CHANGELOG.md

 * Added ability to generate certificates from the command line.
 * We now advertise the [`RPL_ISUPPORT`](http://modern.ircdocs.horse/#rplisupport-005) numeric.
 * Parse new mode change syntax commonly used these days (i.e. `+h-ov dan dan dan`).
+* User mode for clients connected via TLS (`+Z`).
 
 ### Changed
 * Added channel Founder/Admin/Halfops (`qah`) privileges, and removed channel creator (`O`) privilege (from RFC2812, not used in the real world).

irc/client.go

 	isDestroyed    bool
 }
 
-func NewClient(server *Server, conn net.Conn) *Client {
+func NewClient(server *Server, conn net.Conn, isTLS bool) *Client {
 	now := time.Now()
 	socket := NewSocket(conn)
 	client := &Client{
 		socket:       &socket,
 		nickString:   "*", // * is used until actual nick is given
 	}
+	if isTLS {
+		client.flags[TLS] = true
+	}
 	client.Touch()
 	go client.run()
 

irc/modes.go

 	Operator      UserMode = 'o'
 	Restricted    UserMode = 'r'
 	ServerNotice  UserMode = 's' // deprecated
+	TLS           UserMode = 'Z'
 	WallOps       UserMode = 'w'
 )
 
 					applied = append(applied, change)
 				}
 			}
+
+			// can't do anything to TLS mode
 		}
 	}
 
-	if len(changes) > 0 {
-		client.Send(nil, client.nickMaskString, "MODE", target.nickString, changes.String())
+	if len(applied) > 0 {
+		client.Send(nil, client.nickMaskString, "MODE", target.nickString, applied.String())
 	} else if client == target {
 		client.Send(nil, target.nickMaskString, RPL_UMODEIS, target.nickString, target.ModeString())
 	}

irc/server.go

 	motdLines        []string
 	name             Name
 	nameString       string // cache for server name string since it's used with almost every reply
-	newConns         chan net.Conn
+	newConns         chan clientConn
 	operators        map[Name][]byte
 	password         []byte
 	signals          chan os.Signal
 		syscall.SIGTERM, syscall.SIGQUIT}
 )
 
+type clientConn struct {
+	Conn  net.Conn
+	IsTLS bool
+}
+
 func NewServer(config *Config) *Server {
 	server := &Server{
 		channels:         make(ChannelNameMap),
 		idle:             make(chan *Client),
 		name:             NewName(config.Server.Name),
 		nameString:       NewName(config.Server.Name).String(),
-		newConns:         make(chan net.Conn),
+		newConns:         make(chan clientConn),
 		operators:        config.Operators(),
 		signals:          make(chan os.Signal, len(SERVER_SIGNALS)),
 		proxyAllowedFrom: config.Server.ProxyAllowedFrom,
 			done = true
 
 		case conn := <-server.newConns:
-			NewClient(server, conn)
+			NewClient(server, conn.Conn, conn.IsTLS)
 
 		/*TODO(dan): LOOK AT THIS MORE CLOSELY
 		case cmd := <-server.commands:
 			}
 			Log.debug.Printf("%s accept: %s", s, conn.RemoteAddr())
 
-			s.newConns <- conn
+			newConn := clientConn{
+				Conn:  conn,
+				IsTLS: listenTLS,
+			}
+
+			s.newConns <- newConn
 		}
 	}()
 }
 			return
 		}
 
-		s.newConns <- WSContainer{ws}
+		newConn := clientConn{
+			Conn:  WSContainer{ws},
+			IsTLS: false, //TODO(dan): track TLS or not here properly
+		}
+		s.newConns <- newConn
 	})
 	go func() {
 		config, listenTLS := tlsMap[addr]
 	c.Send(nil, s.nameString, RPL_MYINFO, c.nickString, s.nameString, SEM_VER, supportedUserModesString, supportedChannelModesString)
 	c.RplISupport()
 	s.MOTD(c)
+	c.Send(nil, c.nickMaskString, RPL_UMODEIS, c.nickString, c.ModeString())
 }
 
 func (server *Server) MOTD(client *Client) {