doc/go1.16: pre-announce GODEBUG=x509ignoreCN=0 removal in Go 1.17

For #40700
Updates #24151

Change-Id: Id63dcaad238f7534bfce8902b8cb3efd8db5942d
Reviewed-on: https://go-review.googlesource.com/c/go/+/266539
Trust: Filippo Valsorda <filippo@golang.org>
Trust: Katie Hockman <katie@golang.org>
Reviewed-by: Katie Hockman <katie@golang.org>

diff --git a/doc/go1.16.html b/doc/go1.16.html
index 462f86fe093341d007f44d2e73e9942ee7e9d724..e644ad057591a6a0da7003f212d1e7ebddc15440 100644 (file)
--- a/doc/go1.16.html
+++ b/doc/go1.16.html
@@ -501,6 +501,13 @@ Do not send CLs removing the interior tags from such phrases.
 
 <dl id="crypto/x509"><dt><a href="/pkg/crypto/x509/">crypto/x509</a></dt>
   <dd>
+    <p>
+      The <code>GODEBUG=x509ignoreCN=0</code> flag will be removed in Go 1.17.
+      It enables the legacy behavior of treating the <code>CommonName</code>
+      field on X.509 certificates as a host name when no Subject Alternative
+      Names are present.
+    </p>
+
     <p><!-- CL 235078 -->
       <a href="/pkg/crypto/x509/#ParseCertificate">ParseCertificate</a> and
       <a href="/pkg/crypto/x509/#CreateCertificate">CreateCertificate</a> both