Use newer Boost version and verify hash.

Use a specific OpenVPN version (2.3.5) so the build is normalized.

This closes #6296 and #6297.