From: Filippo Valsorda <filippo@golang.org>
Date: Fri, 18 Jan 2019 22:32:30 +0000 (-0500)
Subject: doc/go1.12: mention small RSA keys will cause some TLS handshakes to fail
X-Git-Tag: go1.12rc1~55
X-Git-Url: http://www.git.cypherpunks.su/?a=commitdiff_plain;h=5538a9a34fc4e395967c0233aab5bdde0cebbf9b;p=gostls13.git

doc/go1.12: mention small RSA keys will cause some TLS handshakes to fail

Updates #29779

Change-Id: I9becaba41ab4cd0bac25b4bedf3f8b19761d8158
Reviewed-on: https://go-review.googlesource.com/c/158638
Reviewed-by: Brad Fitzpatrick <bradfitz@golang.org>
---

diff --git a/doc/go1.12.html b/doc/go1.12.html
index d3cbeb4525..0a998c06e0 100644
--- a/doc/go1.12.html
+++ b/doc/go1.12.html
@@ -443,7 +443,9 @@ for {
   <dd>
     <p><!-- CL 146258 -->
       TLS 1.2 clients and servers will now advertise and accept RSA-PSS
-      signature algorithms for use with regular RSA public keys.
+      signature algorithms for use with regular RSA public keys. Certain
+      insecure certificate keys (including 512-bit RSA keys) will
+      now cause a handshake failure if RSA-PSS is selected.
     </p>
 
     <p><!-- CL 143177 -->