Sadly the GnuTLS support in Squid-3 is quite limited. It is not enough to consider the current SSL bugs closed.
I am making some progress in Squid-4, but still not quite there and that version will probably not make it into Stretch. Maybe backports later next year. Amos
