Switch from NSS to GnuTLS

Using libcurl with NSS means that server certificates fail to get
verified due to Debian bug 726073.
Close ITP bug