fix: Include requested format when refusing to export keys

Author: gnarea

src/lib/aws/AwsKmsRsaPssProvider.spec.ts

@@ -249,7 +249,7 @@ describe('AwsKmsRsaPssProvider', () => {
 
         await expect(provider.onExportKey(format, PRIVATE_KEY)).rejects.toThrowWithMessage(
           KmsError,
-          'Private key cannot be exported',
+          `Private key cannot be exported as ${format}`,
         );
       },
     );

src/lib/aws/AwsKmsRsaPssProvider.ts

@@ -67,7 +67,7 @@ export class AwsKmsRsaPssProvider extends KmsRsaPssProvider {
     } else if (format === 'spki') {
       keySerialised = await this.retrievePublicKey(key);
     } else {
-      throw new KmsError('Private key cannot be exported');
+      throw new KmsError(`Private key cannot be exported as ${format}`);
     }
 
     return keySerialised;

src/lib/gcp/GcpKmsRsaPssProvider.spec.ts

@@ -388,7 +388,7 @@ describe('onExportKey', () => {
 
       await expect(provider.onExportKey(format, PRIVATE_KEY)).rejects.toThrowWithMessage(
         KmsError,
-        'Private key cannot be exported',
+        `Private key cannot be exported as ${format}`,
       );
     },
   );

src/lib/gcp/GcpKmsRsaPssProvider.ts

@@ -93,7 +93,7 @@ export class GcpKmsRsaPssProvider extends KmsRsaPssProvider {
       const pathEncoded = Buffer.from(key.kmsKeyVersionPath);
       keySerialised = bufferToArrayBuffer(pathEncoded);
     } else {
-      throw new KmsError('Private key cannot be exported');
+      throw new KmsError(`Private key cannot be exported as ${format}`);
     }
     return keySerialised;
   }