crypto/x509: VerifyHostname treats zone-scoped IPv6 literals as DNS names

[rolandshoemaker]

We use net.ParseIP, which doesn't handle zone IDs properly, so we fall back to treating the names as DNS names. We should be using netip instead.

[sravanibhamidipaty]

I've submitted a fix at https://go-review.googlesource.com/c/go/+/785280 (https://go-review.googlesource.com/c/go/+/785280) — it switches VerifyHostname from net.ParseIP to netip.ParseAddr to correctly handle zone-scoped IPv6 addresses.

[gopherbot]

Change https://go.dev/cl/785280 mentions this issue: crypto/x509: use netip.ParseAddr in VerifyHostname to handle zone-scoped IPv6