Corrected some data types and more documentation.

3 files changed, 9 insertions, 3 deletions

diff --git a/libextra/gnutls-extra.h b/libextra/gnutls-extra.h
index 2e58b047dc..22d27a0736 100644
--- a/libextra/gnutls-extra.h
+++ b/libextra/gnutls-extra.h
@@ -77,7 +77,7 @@ int gnutls_certificate_set_openpgp_trustdb(GNUTLS_CERTIFICATE_CREDENTIALS res,
 
 int gnutls_certificate_set_openpgp_keyring_mem(
     GNUTLS_CERTIFICATE_CREDENTIALS c,
-    const opaque *data, size_t dlen );
+    const unsigned char *data, size_t dlen );
 
 int gnutls_certificate_set_openpgp_keyring_file( GNUTLS_CERTIFICATE_CREDENTIALS res, const char *name);
 
diff --git a/libextra/gnutls_openpgp.c b/libextra/gnutls_openpgp.c
index 2b02484d47..d8842d3391 100644
--- a/libextra/gnutls_openpgp.c
+++ b/libextra/gnutls_openpgp.c
@@ -1070,6 +1070,12 @@ leave:
  *
  * Verify all signatures in the certificate list. When the key
  * is not available, the signature is skipped.
+ *
+ * When the trustdb parameter is used, the function checks the
+ * ownertrust of the key before the signatures are checked. It
+ * is possible that the key was disabled or the owner is not trusted
+ * at all. Then we don't check the signatures because it makes no sense.
+ *
  * The return value is one of the CertificateStatus entries.
  **/
 int
@@ -1259,7 +1265,7 @@ gnutls_openpgp_add_keyring_file(gnutls_datum *keyring, const char *name)
  -*/
 int
 gnutls_openpgp_add_keyring_mem(gnutls_datum *keyring,
-                               const char *data, size_t len)
+                               const opaque *data, size_t len)
 {
     uint8 *blob;
     size_t nbytes = 0;
diff --git a/libextra/gnutls_openpgp.h b/libextra/gnutls_openpgp.h
index 4a0e42aa9e..314f862219 100644
--- a/libextra/gnutls_openpgp.h
+++ b/libextra/gnutls_openpgp.h
@@ -54,7 +54,7 @@ int gnutls_openpgp_keyid(
 
 int gnutls_openpgp_add_keyring_mem(
     gnutls_datum *keyring,
-    const char *data,
+    const opaque *data,
     size_t len );
 
 int gnutls_openpgp_add_keyring_file(