Make sure we build libev with -D_REENTRANT (DATASET-1068).

See https://github.com/phusion/passenger/issues/1102 too.
Remove -fomit-frame-pointer on SunOS, it kills debuggability and is the
only OS for which the flag is supplied.

Bump PKGREVISION.
Update to latest stable release, 1.4.25. Some changes to files/haproxy.sh:

* Don't hardcode PREFIX nor PKG_SYSCONFDIR;
* Add a configtest() function to test the configuration file before restart
  so lazy SysOps (me) don't have to remember command arguments;

From CHANGELOG:

    - DOC: typo: nosepoll self reference in config guide
    - BUG/MINOR: deinit: free fdinfo while doing cleanup
    - BUG/MEDIUM: server: set the macro for server's max weight SRV_UWGHT_MAX to SRV_UWGHT_RANGE
    - BUG/MINOR: use the same check condition for server as other algorithms
    - BUG/MINOR: stream-int: also consider ENOTCONN in addition to EAGAIN for recv()
    - BUG/MINOR: fix forcing fastinter in "on-error"
    - BUG/MEDIUM: http/auth: Sometimes the authentication credentials can be mix between two requests
    - BUG/MAJOR: http: don't emit the send-name-header when no server is available
    - BUG/MEDIUM: http: "option checkcache" fails with the no-cache header
    - MEDIUM: session: disable lingering on the server when the client aborts
    - MINOR: config: warn when a server with no specific port uses rdp-cookie
    - MEDIUM: increase chunk-size limit to 2GB-1
    - DOC: add a mention about the limited chunk size
    - MEDIUM: http: add "redirect scheme" to ease HTTP to HTTPS redirection
    - BUILD: proto_tcp: remove a harmless warning
    - BUG/MINOR: acl: remove patterns from the tree before freeing them
    - BUG/MEDIUM: checks: fix slow start regression after fix attempt
    - BUG/MAJOR: server: weight calculation fails for map-based algorithms
    - BUG/MINOR: backend: fix target address retrieval in transparent mode
    - BUG/MEDIUM: stick: completely remove the unused flag from the store entries
    - BUG/MEDIUM: stick-tables: complete the latest fix about store-responses
    - BUG/MEDIUM: checks: tracking servers must not inherit the MAINT flag
    - BUG/MINOR: stats: report correct throttling percentage for servers in slowstart
    - BUG/MINOR: stats: correctly report throttle rate of low weight servers
    - BUG/MINOR: checks: successful check completion must not re-enable MAINT servers
    - BUG/MEDIUM: stats: the web interface must check the tracked servers before enabling
    - BUG/MINOR: channel: initialize xfer_small/xfer_large on new buffers
    - BUG/MINOR: stream-int: also consider ENOTCONN in addition to EAGAIN
    - BUG/MEDIUM: http: don't start to forward request data before the connect
    - DOC: fix misleading information about SIGQUIT
    - BUILD: simplify the date and version retrieval in the makefile
    - BUILD: prepare the makefile to skip format lines in SUBVERS and VERDATE
    - BUILD: use format tags in VERDATE and SUBVERS files
Update haproxy to 1.5.2. Introduce support for OpenSSL, PCRE and Zlib.

1.5.2
-----
Two extra important issues were discovered since 1.5.1 which were fixed
in 1.5.2. The first one can cause some sample fetch combinations to fail
together in a same expression, and one artificial case (but totally
useless) may even crash the process. The second one is an incomplete
fix in 1.5-dev23 for the request body forwarding. Hash-based balancing
algorithms and http-send-name-header may fail if a request contains
a body which starts to be forwarded before the contents are used.
A few other bugs were fixed, and the max syslog line length is now
configurable per logger.

1.5.1
-----
Version 1.5.1 fixes a few bugs from 1.5.0 among which a really annoying
one which can cause some file descriptor leak when dealing with clients
which disappear from the net, resulting in the impossibility to accept
new connections after some time.

1.5.0
-----
1.5 expands 1.4 with many new features and performance improvements,
including native SSL support on both sides with SNI/NPN/ALPN and OCSP
stapling, IPv6 and UNIX sockets are supported everywhere, full HTTP
keep-alive for better support of NTLM and improved efficiency in
static farms, HTTP/1.1 compression (deflate, gzip) to save bandwidth,
PROXY protocol versions 1 and 2 on both sides, data sampling on
everything in request or response, including payload, ACLs can use
any matching method with any input sample maps and dynamic ACLs
updatable from the CLI stick-tables support counters to track
activity on any input sample custom format for logs, unique-id,
header rewriting, and redirects, improved health checks (SSL,
scripted TCP, check agent, ...), much more scalable configuration
supports hundreds of thousands of backends and certificates without
sweating.

Full changelog for the 1.5 branch:

http://www.haproxy.org/download/1.5/src/CHANGELOG