From ac0ccf3cd2464c6df3193ad8aec8d6053000cdb5 Mon Sep 17 00:00:00 2001
From: Dmitry Savintsev <dsavints@gmail.com>
Date: Thu, 3 Aug 2017 16:51:32 +0200
Subject: [PATCH] doc/1.9: add CL 36696 for crypto/x509 to the release notes

add https://go-review.googlesource.com/c/36696
"crypto/x509: ignore CN if SAN extension present"
to the release notes.

Fixes #21289

Change-Id: Ifa184d3816806a8da3c67b68476c923329acf13e
Reviewed-on: https://go-review.googlesource.com/53030
Reviewed-by: Ian Lance Taylor <iant@golang.org>
---
 doc/go1.9.html | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/doc/go1.9.html b/doc/go1.9.html
index be0ceefcd5..16d26386c1 100644
--- a/doc/go1.9.html
+++ b/doc/go1.9.html
@@ -473,6 +473,15 @@ version of gccgo.
       populated.
     </p>
 
+    <p><!-- CL 36696 -->
+
+    If any SAN extension, including with no DSN names, is present
+    in the certificate, then the Common Name from
+    <a href="#pkg/crypto/x509/#Certificate.Subject"><code>Subject</code>code></a> is ignored.
+    In previous releases, the code tested only whether DNS-name SANs were
+    present in a certificate.
+    </p>
+
 </dl><!-- crypto/x509 -->
 
 <dl id="database/sql"><dt><a href="/pkg/database/sql/">database/sql</a></dt>
-- 
2.50.0