doc: add change log for custom_tls_certificate_selector. (envoyproxy#…

…35440)

Signed-off-by: doujiang24 <[email protected]>

changelogs/current.yaml

@@ -77,5 +77,11 @@ new_features:
     Added socket ``type`` field for specifying a socket type to apply the socket option to under :ref:`SocketOption
     <envoy_v3_api_msg_config.core.v3.SocketOption>`. If not specified, the socket option will be applied to all socket
     types.
+- area: tls
+  change: |
+    Added an extension point :ref:`custom_tls_certificate_selector
+    <envoy_v3_api_field_extensions.transport_sockets.tls.v3.CommonTlsContext.custom_tls_certificate_selector>`
+    to allow overriding TLS certificate selection behavior.
+    An extension can select certificate base on the incoming SNI, in both sync and async mode.
 
 deprecated: