I managed to set up OpenSSH 9.6 to use host key certificates using the FQHN in an intranet.
However the typical use in intranet is to use the short hostnames (without the domain part).
When I use just the short name, the host certificate isn’t accepted any more, and I get the “Are you sure you want to continue connecting” prompt.
So I tried to change the principals in the certificate from “host.domain.org” to “host.domain.org,host,1.2.3.4” (i.e.: added short name and IP), but that didn’t change anything.
I did verify that the server returned the current certificate to the client.
Is this possible, and what is wrong in my config?
