diff options
| author | Dmitry Savintsev <dsavints@gmail.com> | 2017-08-03 16:51:32 +0200 |
|---|---|---|
| committer | Ian Lance Taylor <iant@golang.org> | 2017-08-03 18:22:36 +0000 |
| commit | ac0ccf3cd2464c6df3193ad8aec8d6053000cdb5 (patch) | |
| tree | c15fe36de4811e463bc52ad5bdb6fb1cd220960f | |
| parent | cc402c2c4dd835e98b274aa7d80504cca76b2370 (diff) | |
| download | go-ac0ccf3cd2464c6df3193ad8aec8d6053000cdb5.tar.gz go-ac0ccf3cd2464c6df3193ad8aec8d6053000cdb5.zip | |
doc/1.9: add CL 36696 for crypto/x509 to the release notes
add https://go-review.googlesource.com/c/36696
"crypto/x509: ignore CN if SAN extension present"
to the release notes.
Fixes #21289
Change-Id: Ifa184d3816806a8da3c67b68476c923329acf13e
Reviewed-on: https://go-review.googlesource.com/53030
Reviewed-by: Ian Lance Taylor <iant@golang.org>
| -rw-r--r-- | doc/go1.9.html | 9 |
1 files changed, 9 insertions, 0 deletions
diff --git a/doc/go1.9.html b/doc/go1.9.html index be0ceefcd5..16d26386c1 100644 --- a/doc/go1.9.html +++ b/doc/go1.9.html @@ -473,6 +473,15 @@ version of gccgo. populated. </p> + <p><!-- CL 36696 --> + + If any SAN extension, including with no DSN names, is present + in the certificate, then the Common Name from + <a href="#pkg/crypto/x509/#Certificate.Subject"><code>Subject</code>code></a> is ignored. + In previous releases, the code tested only whether DNS-name SANs were + present in a certificate. + </p> + </dl><!-- crypto/x509 --> <dl id="database/sql"><dt><a href="/pkg/database/sql/">database/sql</a></dt> |