Nice work - this solves a common problem. You might consider adding a recommended ssh_config to ensure that host names are canonicalised. This allows FQDNs in

Nice work - this solves a common problem. You might consider adding a recommended ssh_config to ensure that host names are canonicalised. This allows FQDNs in certificates to match successfully when users only supply a hostname. More details at http://blog.djm.net.au/2014/01/hostname-canonicalisation-in-openssh.html http://blog.djm.net.au/2014/01/hostname-canonicalisation-in-...