From: Filippo Valsorda <filippo@golang.org>
Date: Thu, 29 Oct 2020 23:04:00 +0000 (+0100)
Subject: doc/go1.16: pre-announce GODEBUG=x509ignoreCN=0 removal in Go 1.17
X-Git-Tag: go1.16beta1~91
X-Git-Url: http://www.git.cypherpunks.su/?a=commitdiff_plain;h=2c2980aa0cde1a44789103981774e34a4c8a0f2d;p=gostls13.git

doc/go1.16: pre-announce GODEBUG=x509ignoreCN=0 removal in Go 1.17

For #40700
Updates #24151

Change-Id: Id63dcaad238f7534bfce8902b8cb3efd8db5942d
Reviewed-on: https://go-review.googlesource.com/c/go/+/266539
Trust: Filippo Valsorda <filippo@golang.org>
Trust: Katie Hockman <katie@golang.org>
Reviewed-by: Katie Hockman <katie@golang.org>
---

diff --git a/doc/go1.16.html b/doc/go1.16.html
index 462f86fe09..e644ad0575 100644
--- a/doc/go1.16.html
+++ b/doc/go1.16.html
@@ -501,6 +501,13 @@ Do not send CLs removing the interior tags from such phrases.
 
 <dl id="crypto/x509"><dt><a href="/pkg/crypto/x509/">crypto/x509</a></dt>
   <dd>
+    <p>
+      The <code>GODEBUG=x509ignoreCN=0</code> flag will be removed in Go 1.17.
+      It enables the legacy behavior of treating the <code>CommonName</code>
+      field on X.509 certificates as a host name when no Subject Alternative
+      Names are present.
+    </p>
+
     <p><!-- CL 235078 -->
       <a href="/pkg/crypto/x509/#ParseCertificate">ParseCertificate</a> and
       <a href="/pkg/crypto/x509/#CreateCertificate">CreateCertificate</a> both