Title: #3184: [Backport][ipa-4-6] NSSDatabase: fix get_trust_chain
This PR was opened automatically because PR #3157 was pushed to master and backport to
ipa-4-6 is required.
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/3184/head:pr3184
git checkout pr3184