Allow startTLS during client setup

CHANGES.md

@@ -29,6 +29,7 @@
   - Removed `spaced()` and `rndSpaced` from DN API
   - Fix parent/child rules regarding empty DNs
 - #254 Allow simple client bind with empty credentials
+- Add StartTLS support to client
 
 ## 0.7.1
 

lib/client/client.js

@@ -1119,7 +1119,7 @@ Client.prototype.connect = function connect() {
     // socket before signalling successful connection.
     // This setup needs to bypass the request queue since all other activity is
     // blocked until the connection is considered fully established post-setup.
-    // Only allow bind/search for now.
+    // Only allow bind/search/starttls for now.
     var basicClient = {
       bind: function bindBypass(name, credentials, controls, callback) {
         return self.bind(name, credentials, controls, callback, true);
@@ -1127,6 +1127,9 @@ Client.prototype.connect = function connect() {
       search: function searchBypass(base, options, controls, callback) {
         return self.search(base, options, controls, callback, true);
       },
+      starttls: function starttlsBypass(options, controls, callback) {
+        return self.starttls(options, controls, callback, true);
+      },
       unbind: self.unbind.bind(self)
     };
     vasync.forEachPipeline({