use gnutls_certificate_verify_peers2 instead of gnutls_certificate_verify_peers