From: Brad Fitzpatrick <bradfitz@golang.org>
Date: Wed, 7 Feb 2018 16:07:34 +0000 (+0000)
Subject: doc: note that x509 cert parsing rejects some more certs now
X-Git-Tag: go1.10~10^2
X-Git-Url: http://www.git.cypherpunks.su/?a=commitdiff_plain;h=74b56022a1f834b3edce5c3eca0570323ac90cd7;p=gostls13.git

doc: note that x509 cert parsing rejects some more certs now

Fixes #23711
---

diff --git a/doc/go1.10.html b/doc/go1.10.html
index 5885176f46..569e420d51 100644
--- a/doc/go1.10.html
+++ b/doc/go1.10.html
@@ -785,7 +785,8 @@ Parsed certificates also now report URI names and IP, email, and URI constraints
 <a href="/pkg/crypto/x509/#Certificate"><code>Certificate</code></a> fields
 <code>URIs</code>, <code>PermittedIPRanges</code>, <code>ExcludedIPRanges</code>,
 <code>PermittedEmailAddresses</code>, <code>ExcludedEmailAddresses</code>,
-<code>PermittedURIDomains</code>, and <code>ExcludedURIDomains</code>.
+<code>PermittedURIDomains</code>, and <code>ExcludedURIDomains</code>. Certificates with
+invalid values for those fields are now rejected.
 </p>
 
 <p>