From 2c2980aa0cde1a44789103981774e34a4c8a0f2d Mon Sep 17 00:00:00 2001
From: Filippo Valsorda <filippo@golang.org>
Date: Fri, 30 Oct 2020 00:04:00 +0100
Subject: [PATCH] doc/go1.16: pre-announce GODEBUG=x509ignoreCN=0 removal in Go
 1.17

For #40700
Updates #24151

Change-Id: Id63dcaad238f7534bfce8902b8cb3efd8db5942d
Reviewed-on: https://go-review.googlesource.com/c/go/+/266539
Trust: Filippo Valsorda <filippo@golang.org>
Trust: Katie Hockman <katie@golang.org>
Reviewed-by: Katie Hockman <katie@golang.org>
---
 doc/go1.16.html | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/doc/go1.16.html b/doc/go1.16.html
index 462f86fe09334..e644ad057591a 100644
--- a/doc/go1.16.html
+++ b/doc/go1.16.html
@@ -501,6 +501,13 @@ <h3 id="minor_library_changes">Minor changes to the library</h3>
 
 <dl id="crypto/x509"><dt><a href="/pkg/crypto/x509/">crypto/x509</a></dt>
   <dd>
+    <p>
+      The <code>GODEBUG=x509ignoreCN=0</code> flag will be removed in Go 1.17.
+      It enables the legacy behavior of treating the <code>CommonName</code>
+      field on X.509 certificates as a host name when no Subject Alternative
+      Names are present.
+    </p>
+
     <p><!-- CL 235078 -->
       <a href="/pkg/crypto/x509/#ParseCertificate">ParseCertificate</a> and
       <a href="/pkg/crypto/x509/#CreateCertificate">CreateCertificate</a> both