commit 7e9105388ebff089b3f99f0ef676ea55a6da3a7e
author Adam Eijdenberg <adam@continusec.com> Tue May 16 13:11:29 2017 +1000
committer Han-Wen Nienhuys <hanwen@google.com> Tue May 23 10:10:29 2017 +0000
tree 3897b171620dad13e27364c6365e928a00d10b9b
parent 6c586e17d90a7d08bbbc4069984180dce3b04117

x/crypto/ssh: fix host certificate principal evaluation to check for hostname only

SSH host certificates are expected to contain hostnames only,
not "host:port" format.

This change allows Go clients to connect to OpenSSH servers that
use host certificates.

Note, this change will break any clients that use ssh.NewClientConn()
with an `addr` that is not in `host:port` format (they will see a
"missing port in address" error).

Fixes bug 20273.

Change-Id: I5a306c6b7b419a737e1f0f9c5ca8c585e21a45a4
Reviewed-on: https://go-review.googlesource.com/43475
Reviewed-by: Han-Wen Nienhuys <hanwen@google.com>
Run-TryBot: Han-Wen Nienhuys <hanwen@google.com>
TryBot-Result: Gobot Gobot <gobot@golang.org>