DANE: fix TA-mode verify under GnuTLS. Bug 2311