From: Roland Shoemaker <roland@golang.org>
Date: Tue, 26 Nov 2024 18:18:50 +0000 (-0800)
Subject: doc: add note about x509sha1 removal
X-Git-Tag: go1.24rc1~77
X-Git-Url: http://www.git.cypherpunks.su/?a=commitdiff_plain;h=cff2503b5ac32d3889eec8f131c43e98e4cc3485;p=gostls13.git

doc: add note about x509sha1 removal

Fixes #41682

Change-Id: I73aa4991a6df8dfb90720bd66f2a8a53c3ca3504
Reviewed-on: https://go-review.googlesource.com/c/go/+/631677
Reviewed-by: Dmitri Shuralyov <dmitshur@google.com>
Reviewed-by: Dmitri Shuralyov <dmitshur@golang.org>
Auto-Submit: Roland Shoemaker <roland@golang.org>
LUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>
---

diff --git a/doc/next/6-stdlib/99-minor/crypto/x509/41682.md b/doc/next/6-stdlib/99-minor/crypto/x509/41682.md
new file mode 100644
index 0000000000..5125886f82
--- /dev/null
+++ b/doc/next/6-stdlib/99-minor/crypto/x509/41682.md
@@ -0,0 +1,2 @@
+The `x509sha1` GODEBUG setting has been removed. [`Certificate.Verify`] will no
+longer consider SHA-1 based signatures valid when this GODEBUG setting is set.
\ No newline at end of file