Fix insecure-host-checking for repos with an explicit port

registry/client_factory.go

@@ -3,6 +3,7 @@ package registry
 import (
 	"context"
 	"crypto/tls"
+	"net"
 	"net/http"
 	"net/url"
 	"sync"
@@ -92,9 +93,14 @@ attemptChallenge:
 }
 
 func (f *RemoteClientFactory) ClientFor(repo image.CanonicalName, creds Credentials) (Client, error) {
+	repoHost, _, err := net.SplitHostPort(repo.Domain)
+	if err != nil {
+		return nil, err
+	}
 	insecure := false
 	for _, h := range f.InsecureHosts {
-		if repo.Domain == h {
+		if repoHost == h || repo.Domain == h {
+			// allow host with out without the port in the insecure hosts list
 			insecure = true
 			break
 		}