gnutls: Try to find root certificates locally if not anchored

 * If a server erroneously sends us a root certificate, and it
   is not anchored, then try to lookup a certificate for the same
   issuer in the database.
 * Add a test for this case.

https://bugzilla.gnome.org/show_bug.cgi?id=681299