fixup! CA-404640 XSI-1781 accept in PEM key/cert in any order

Signed-off-by: Christian Lindig <[email protected]>

Author: Christian Lindig

ocaml/gencert/pem.ml

@@ -85,6 +85,8 @@ let pem =
   match List.partition (function Key _ -> true | Cert _ -> false) bs with
   | [Key k], Cert c :: xs ->
       return {private_key= k; host_cert= c; other_certs= List.map strip xs}
+  | [_], [] ->
+      fail "PEM is lacking a certificate"
   | [], _ ->
       fail "PEM is missing a private key"
   | _ :: _, _ ->