commit 5119cf507ed5294cc409c092980c7497ee5d6fd2
author Han-Wen Nienhuys <hanwen@google.com> Mon Jan 22 11:39:14 2018 +0100
committer Han-Wen Nienhuys <hanwen@google.com> Thu Feb 08 17:09:33 2018 +0000
tree 6da35c0b86ec1bfd3c76721b8f62de48b0331675
parent dea6ea37479c8308a28c4116b0916be2d7f1c10e

ssh: clarify how to parse out Certificates

Fixes golang/go#22046

Change-Id: I9a9aff37ba0fd0ca1f5fa1a212c66b812f6b9f70
Reviewed-on: https://go-review.googlesource.com/88895
Reviewed-by: Brad Fitzpatrick <bradfitz@golang.org>

ssh/certs.go

diff --git a/ssh/certs.go b/ssh/certs.go
index cfc8ead..42106f3 100644
--- a/ssh/certs.go
+++ b/ssh/certs.go
@@ -44,7 +44,9 @@
 const CertTimeInfinity = 1<<64 - 1
 
 // An Certificate represents an OpenSSH certificate as defined in
-// [PROTOCOL.certkeys]?rev=1.8.
+// [PROTOCOL.certkeys]?rev=1.8. The Certificate type implements the
+// PublicKey interface, so it can be unmarshaled using
+// ParsePublicKey.
 type Certificate struct {
 	Nonce           []byte
 	Key             PublicKey