doc: add note about x509sha1 removal in 1.24

Updates #62048

Change-Id: I17f462841a80db2216806147f0a0548f95c5e21a
Reviewed-on: https://go-review.googlesource.com/c/go/+/586718
Auto-Submit: Roland Shoemaker <roland@golang.org>
Reviewed-by: Filippo Valsorda <filippo@golang.org>
LUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>
Reviewed-by: Dmitri Shuralyov <dmitshur@google.com>

diff --git a/doc/next/6-stdlib/99-minor/crypto/x509/62048.md b/doc/next/6-stdlib/99-minor/crypto/x509/62048.md
new file mode 100644 (file)
index 0000000..aaa8c5e
--- /dev/null
+++ b/doc/next/6-stdlib/99-minor/crypto/x509/62048.md
@@ -0,0 +1,4 @@
+The [`x509sha1` GODEBUG setting](/pkg/crypto/x509#InsecureAlgorithmError) will
+be removed in the next Go major release (Go 1.24). This will mean that crypto/x509
+will no longer support verifying signatures on certificates that use SHA-1 based
+signature algorithms.
\ No newline at end of file