mirror of
https://github.com/prowler-cloud/prowler.git
synced 2026-11-09 12:49:27 +00:00
Lydia Vilchez
5317c589b3
`cryptography.hazmat.primitives.serialization.load_pem_private_key` raises TypeError, not ValueError, when the caller passes password=None against an encrypted key. Add TypeError to verify_client's except tuple so that path becomes AzureNotValidCertificateContentError or AzureNotValidCertificatePathError instead of leaking. Assert the leaf- first ordering explicitly in the bundle test so a regression that returns the input unchanged cannot silently pass.