Pullup ticket #4711 - requested by taca
www/squid3: security update

Revisions pulled up:
- www/squid3/Makefile                                          1.45
- www/squid3/distinfo                                          1.32
- www/squid3/options.mk                                        1.16
- www/squid3/patches/patch-configure                            1.6

---
  Module Name: pkgsrc
  Committed By: adam
  Date: Mon May  4 09:13:35 UTC 2015

  Modified Files:
  pkgsrc/www/squid3: Makefile distinfo options.mk
  pkgsrc/www/squid3/patches: patch-configure

  Log Message:
  Changes 3.5.4:
  * Fix X509 server certificate domain matching
  * Bug 3775: Disable HTTP/1.1 pipeline feature for pinned connections
  * Cleanup: Display correct error code in debugging output for IoCallback::finish
  * Cleanup: Fix spelling error in debug message in parseHttpRequest()
  * Cleanup: Add whitespace to make debug message in writeComplete() more readable
  * Add Kerberos support for MAC OS X 10.x
  * Bug 4234: comm_connect_addr uses errno incorrectly
  * Fix 'access_log none' to prevent following logs being used
  * Unexpected SQUID_X509_V_ERR_DOMAIN_MISMATCH errors while accessing sites with valid certificates
  * Docs: Update CONTRIBUTORS
  * Ensure class Lock counter remains within bounds
  * Portability: Add hacks to define C++11 explicit N-bit type limits
  * Fix SSL_get_peer_certificate memory leak
  * Bug 4231 pt2: comm_open_uds does not provide description for newly opened FD
  * Bug 4231 pt1: fd_open() not correctly handling empty descriptions
  * Negotiate Kerberos authentication request size exceeds output buffer size.
  * Do not increment an iterator invalidated by std::map::erase().
  * Fix require-proxy-header preventing HTTPS proxying and ssl-bump
  * Fix atomics check broken by C++11 #include added in v3.5 branch r13783
  * Support for resuming TLS sessions
  * Bug 4212: ssl_crtd crashes with corrupt database
  * Fix rev.13795 ServerName class
  * Add server_name ACL matching server name(s) obtained from various sources
  * Bug 4226: digest_edirectory_auth: found but cannot be built
  * Invalid request->clientConnectionManager object used by Ssl::PeerConnector::handleNegotiateError
  * Bug 4198: assertion failed: client_side.h:364: "sslServerBump == srvBump"
  * Fix cross-compile issues with SSL_get_certificate()
  * Docs: RFC 7238 obsoleted by RFC 7538
  * Boilerplate: reference Translator copyrights in CREDITS
  * Cleanup: Place explicit size on ref-count lock counter
  * Cleanup: extend SBuf debugging information
  * digest_edirectory_auth: Fix -lnettle dependency error

(tron)