Use newer Boost version and verify hash.

Use a specific OpenVPN version (2.3.5) so the build is normalized.

This closes #6296 and #6297.
http://openvpn.net/index.php/open-source/documentation/sig.html
Actually, I would prefer if we can check the signatures.
I'm not sure if the zips in github match the stuff in the download area.