mail/postfix-current 3.12.20260925_3,6

- fix build on FreeBSD 13-CURRENT

PR:		232502
Submitted by:	Kai

- update to 3.4-20180904

- update to 3.4-20180819.

- update to 3.4-20180708

- update to 3.4-20180707

- update to 20180701

devel/icu: update to 62.1

Changes:	http://site.icu-project.org/download/62
ABI:		https://abi-laboratory.pro/tracker/timeline/icu4c/
PR:		229359
Exp-run by:	antoine (only 10.4)

- update to 3.4-20180624

- update to 3.4-20180620

Drop always true (and tautologic) OSVERSION conditions

Approved by:	portmgr blanket

- update to 3.4-20180520

devel/icu: update to 61.1

Changes:	http://site.icu-project.org/download/61
ABI:		https://abi-laboratory.pro/tracker/timeline/icu4c/
PR:		227042
Exp-run by:	antoine
MFH:		2018Q2 (required by Firefox 61)

- update to 3.4-20180401

Changelog:
20180224
  Workaround: postconf build did not abort if the m4 command
  is not installed (on a system that does have the make command,
  the awk command, the perl command, and the C compiler?!).
  File: postconf/extract_cfg.sh.

20180303
  Portability: slight differences between MySQL and MariaDB.
  Olli Hauer. File: global/dict_mysql.c.

20180306
  Bugfix (introduced: 19990302): when luser_relay specifies
  a non-existent local address, the luser_relay feature becomes
  a black hole. Reported by Juergen Thomsen. File: local/unknown.c.

  Portability: FreeBSD 11 is supported. Files: makedefs,
  util/sys_defs.h.

- fix build agains maraidb100 [1]

Firt definition of MARIADB_VERSION_ID can be found in mariadb102
therefore we have to use MARIADB_BASE_VERSION which is defined in
mariadb55 and mariadb10x

PR:             226266 [1], 220224
Reported by:    Zilon [1]

- update to 3.4-20180222 - add patch for MySQL 8.x [1} - add blacklistd support [2]

additional:
 regenerate patch for src/util/sys_defs.h

PR:           220224 [1], 225664 [2]
Submitted by: Klaus Mayr [1], Koichiro IWAO [2]

- update to 3.4-20180218

- update to 3.4.20180203 - license is now dual (see Changelog 20180203) - make EAI optional but on by default [1]

20180128
  Documentation: the tcp_table(5) manpage now documents the
  absence of substring lookups. File: proto/tcp_table.

20180203
  Licence: in addition to the historical IBM Public License
  1.0, this software is now also distributed with the more
  recent Eclipse Public License 2.0. Recipients can choose
  to take the software under the license of their choice.
  Those who are more comfortable with the IPL can continue
  with that license. File: LICENSE.

PR:             ports/221619 [1]
Submitted by:   Kubilay Kocak (koobs@)

- update to 3.3-20180121

- update to 3.3-20180113

- update to 3.3-20180107

Incompatible changes with snapshot 201800107
--------------------------------------------
 This release changes the format of 'full name' information in
 Postfix-generated From: headers, when a local program such as
 /bin/mail submits a message without From: header.

 Postfix-generated From: headers with 'full name' information are
 now formatted as "From: name <address>" by default. Specify
 "header_from_format = obsolete" to get the earlier form "From:
 address (name)". See the postconf(5) manpage for more details.

- update to 3.3-20171229 - s/ECHO/ECHO_CMD  [1]

PR:		222988 [1]
Submitted by:	Franco Fichtner [1]

devel/icu: update to 60.1

Changes:	http://site.icu-project.org/download/60
ABI:		https://abi-laboratory.pro/tracker/timeline/icu4c/
PR:		223373
Exp-run by:	antoine

- update to 3.3-20170924

Changelog:
20170923
  Bugfix (introduced: Postfix 3.2): panic in the postqueue
  command after output write error while listing the queue.
  This change restores a write error check that was lost with
  the Postfix 3.2.2 rewrite of the vbuf_print formatter.
  Problem reported by Andreas Schulze. File: util/vbuf_print.c.

devel/icu: update to 59.1

- Temporarily keep C++98 working in consumers for Clang's default -std=

Changes:	http://site.icu-project.org/download/59
PR:		218788
Submitted by:	takefu@airport.fm, dcarmich@dcarmichael.net (early version)
Exp-run by:	antoine

- update to 3.3-20170910

20170827
  Safety: in vstream_buf_space(), add a sanity check to reject
  negative request sizes, instead of letting the program fail
  later. File: util/vstream.c

  Bugfix: in tests that enable the VSTRING_FLAG_EXACT flag,
  vstring_buf_put_ready() could fail to extend the buffer,
  causing infinite recursion in VBUF_PUT(). File: util/vstring.c.

20170830
  Bugfix: in vbuf_print(), save the parser-produced format
  string before calling msg_panic(), so that the panic message
  will not display its own format string. File: util/vbuf_print.c.

20170831
  Portability (introduced Postfix 1.0): possible cause for
  panic in postqueue when listing the deferred queue. This
  assigned the result from unsigned integer subtraction to a
  signed integer, followed by a safety check to ensure that
  the result was non-negative. This assignment relied on
  undefined behavior, meaning that a compiler may eliminate
  the safety check, causing the program to fail later. File:
  postqueue/showq_compat.c.

20170910
  Safety: restore sanity checks for dynamically-specified
  width and precision in format strings (%*, %.*, and %*.*).
  These checks were lost with the Postfix 3.2.2 rewrite of
  the vbuf_print formatter. File: vbuf_print.c.

- update to 3.3-20170730

- update to 3.3-20170613

Changelog:
20170505
  Workaround for a current problem where some destination
  announces primarily IPv6 MX addresses, the smtp_address_limit
  eliminates most or all IPv4 addresses, and the destination
  is not reachable over IPv6. This workaround is enabled with
  "smtp_balance_mx_inet_protocols = yes", which is the default.
  Files: smtp/smtp.c, smtp/smtp_params.c, smtp/smtp_addr.c,
  global/mail_params.h, proto/postconf.proto.

20170506
  A last-minute cosmetic fix had introduced a bug in
  smtp/smtp_addr.c.

20170512
  Bugfix (introduced: Postfix 2.0): the MIME nesting level
  counter was not initialized (i.e. left at the memory fill
  pattern 0xffffffff which equals -1). This broke unit tests
  with a different memory allocator. Changing the value to
  zero would break backwards compatibility (reject mail that
  was previously not rejected). Files: global/mime_state.c.

20170531
  Bugfix (introduced: Postfix 3.2): after the table lookup
  overhaul, the check_sender_access and check_recipient_access
  features ignored the parent_domain_matches_subdomains
  setting. Reported by Henrik Larsson. File: smtpd/smtpd_check.c.

  Workaround (introduced: Postfix 3.2): mail_addr_find() logs
  a warning that it does not support both parent-domain and
  dot-parent-domain style lookups in the same call.  File:
  global/mail_addr_find.c

20170610
  Workaround (introduced: Postfix 3.0 20140718): prevent MIME
  downgrade of Postfix-generated message/delivery-status.
  It's supposed to be 7bit, therefore quoted-printable encoding
  is not expected. Problem reported by Griff. File:
  bounce/bounce_notify_util.c.

  Documentation: indicate that the transport_mumble parameters
  are implemented by the queue manager, not by delivery agents.
  Files: mantools/postlink, local/local.c, pipe/pipe.c,
  *qmgr/qmgr.c, smtp/smtp.c, virtual/virtual.c.

20170611
  Security: Berkeley DB 2 and later try to read settings from
  a file DB_CONFIG in the current directory.  This undocumented
  feature may introduce undisclosed vulnerabilities resulting in
  privilege escalation with Postfix set-gid programs (postdrop,
  postqueue) before they chdir to the Postfix queue directory,
  and with the postmap and postalias commands depending on whether
  the user's current directory is writable by other users. This
  fix does not change Postfix behavior for Berkeley DB < 3.
  File: util/dict_db.c.

mail/postfix-current: Fix x25519 kex with LibreSSL

- Add patches for LibreSSL

PR:		216790
Obtained from:	OpenBSD ports
Approved by:	ohauer (maintainer)

mail/postfix-current: update 3.2.0-RC1 -> 3.3-20170502

PR:		218696
Changes:	https://de.postfix.org/ftpmirror/experimental/postfix-3.3-20170502.HISTORY
Submitted by:	pi
Approved by:	ohauer (maintainer timeout)

Bump PORTEPOCH after last update (r434402)

pkg version -t 3.2.20170129,4 3.2.0.r1,4
>
pkg version -t 3.2.20170129,4 3.2.0.r1,5
<

Reported by:	Gerard Seibert <carmel_ny@outlook.com> (via freebsd-ports ml)
Approved by:	portmgr (just-fix-it blanket)

- update to 3.2.0-RC1

Release Notes:
 ftp://ftp.porcupine.org/mirrors/postfix-release/official/postfix-3.2.0-RC1.RELEASE_NOTES

- update to 20170129 - fix build with libressl < 2.5.x

Release Notes:
ftp://ftp.porcupine.org/mirrors/postfix-release/experimental/postfix-3.2-20170129.RELEASE_NOTES

PR:		216732
Submitted by:	Bernard Spil
Reported by:	Piotr Kubaj
Obtained from:	OpenBSD

- update to 3.2-20161224

20161205
   Cleanup: log the sender address when rejecting a too large
   message size in a "MAIL FROM:<sender> SIZE=nnn" command.
   File: smtpd/smtpd.c.

20161206
   Bugfix (introduced: Postfix 3.0): when receiving a MAIL
   FROM...SMTPUTF8 command while smtpd_delay_reject=no, enable
   SMTPUTF8 support before processing smtpd_sender_restrictions.
   Problem reported by Viktor Dukhovni. File: smtpd/smtpd.c.

   Bugfix (introduced: Postfix 3.0): when receiving a
   VRFY...SMTPUTF8 command, enable SMTPUTF8 support while
   processing smtpd_recipient_restrictions. File: smtpd/smtpd.c.

20161220
   Bugfix (introduced: Postfix 2.1.0): the Postfix SMTP daemon
   did not query sender_canonical_maps when rejecting unknown
   senders with "smtpd_reject_unlisted_recipient = yes" or
   with reject_unlisted_sender.  Stephen R. van den Berg (Mr.
   procmail). Files: smtpd/smtpd.c, smtpd/smtpd_check.c.

20161223
   Bugfix (introduced: Postfix 3.2 snapshots): the makedefs
   script produced a garbled CCARGS setting when no suitable
   ICU library was found. File: makedefs.

- update to 3.2-20161204

Incompatible changes with snapshot 20161204
===========================================

Postfix 3.2 removes tentative features that were implemented
before the DANE spec was finalized:

- Support for certificate usage PKIX-EE(1),

- The ability to disable digest agility. Postfix 3.2 always behaves
  as if "tls_dane_digest_agility = on.

- The ability to disable support for "TLSA 2 [01] [12]" records
  that specify the digest of a trust anchor. Postfix 3.2 always
  behaves as if "tls_dane_trust_anchor_digest_enable = yes".

Do not use post-stage.  Use post-install instead.

The only reason to use post-stage is because the port needs to do
"things" at a later time, like some plist manipulation.
While there, fold post-install in do-install targets when they are
defined.

PR:		214780
Submitted by:	mat
Exp-run by:	antoine
Sponsored by:	Absolight

devel/icu: update to 58.1

Changes:	http://site.icu-project.org/download/58
PR:		214384
Exp-run by:	antoine
Approved by:	office (bapt)

- update to 3.2-20161106

20161105
 Bugfix (introduced: Postfix 1.1): the postsuper command did
 not count a successful rename operation after error recovery.
 Problem reported by Markus Sch_nhaber. File: postsuper/postsuper.c.

 Cleanup: error reporting for IDNA (non-ASCII domain name)
 conversion errors, and enable_idna2003_compatibility
 configuration. File: util/midna_domain.c.

Incompatible changes with snapshot 20161103
===========================================

Postfix 3.2 by default disables the 'transitional' compatibility
between IDNA2003 and IDNA2008, when converting UTF-8 domain names
to/from the ASCII form that is used in DNS lookups.  This makes
Postfix behavior consistent with current versions of the Firefox
and Chrome web browsers. Specify "enable_idna2003_compatibility =
yes" for historical behavior.

This affects the conversion of, for example, the German sz and the
Greek zeta. See http://unicode.org/cldr/utility/idna.jsp for more
examples.

- update to 3.2-20161101

Major changes with snapshot 20161031
====================================
The smtpd_milter_maps feature supports per-client Milter configuration.
This overrides the global smtpd_milters setting and has the same syntax.
A lookup result of "DISABLE" turns off Milter support.

- update to 3.2-20161008

Changelog:

20161007
  Bitrot: API for the ersatz inet_ntop() function, when
  compiling with -DNO_IPV6 (which exists only for debugging).
  Files: util/sys_defs.h, util/sys_compat.c.

20161008
  Feature: smtp_tcp_port, similar to the existing lmtp_tcp_port.
  Files: mantools/postlink, proto/postconf.proto,
  global/mail_params.h, smtp/smtp.c, smtp/smtp_connect.c,
  smtp/smtp_params.c.

  Feature: "PASS" and "STRIP" actions in header/body_checks.
  "STRIP" is similar to "IGNORE" but also logs the action,
  and "PASS" disables header, body, and Milter inspection for
  the remainder of the message content.  Contributed by Hobbit.
  Files: cleanup/cleanup_message.c, global/header_body_checks.c.

- update to 3.2-20160925

Changelog:
==========
20160925
  Bugfix (introduced: Postfix 2.11): changed the default MySQL
  option_group value to "client" to enable the reading of
  "client" option group settings in the MySQL option file.
  Specify an empty option_group value to get backwards-compatible
  behavior.  This fixes a "not found" problem with Postfix
  queries that contain UTF8-encoded non-ASCII text.  Based
  on a fix by John Fawcett.  Files: global/dict_mysql.c,
  proto/mysql_table.

Incompatible changes with snapshot 20160925
===========================================
In the Postfix MySQL database client, the default option_group value
has changed to "client", to enable reading of "client" option group
settings in the MySQL options file. This fixes a "not found" problem
with Postfix queries that contain UTF8-encoded non-ASCII text.
Specify an empty option_group value (option_group =) to get
backwards-compatible behavior.

- update to 3.2-20160924

Changelog:
20160918
 after rejected SMTP commands.  As before, the SMTP server
 does not forward SASL login information to other Postfix
 subsystems, and it does not receive SASL login information
 in XFORWARD commands. File/smtpd/smtpd.c.

- Update devel/icu to 57.1. - Clean up the Makefile. - Follow some upstream recommendations (--with-data-packaging=archive,   --disable-renaming, -DICU_NO_USER_DATA_OVERRIDE). - Patch makefiles to install static libraries with INSTALL_DATA so they   aren't stripped. - Patch config/mh-bsd-gcc to sync with config/mh-linux-gcc. - Fix endianness detection in ICU.  The code wanted to use BYTE_ORDER   d

PR:		205120
Exp-run by:	antoine
Approved by:	portmgr (antoine)

- update to 3.2-20160917

Changelog:
20160908
        Documentation: add a pointer to hosts(5) and services(5)
        for symbolic host and port syntax. File: proto/master.

20160911
        Bugfix (introduced: Postfix 3.0): the SMTP daemon did not
        reset a previous session's command counts before rejecting
        a client that exceeds request or concurrency rates. File:
        smtpd/smtpd.c.

20160912
        Feature: preserve the new file mtimes when installing
        Postfix.  Ond_ej Lyson_k. Wietse made this conditional on
        the presence of a new -keep-new-mtime flag. File: postfix-install.

20160917
        Bugfix: unionmap did not propagate table lookup errors.
        Based on patch by Roel van Meer. Files: util/dict_union.c,
        util/dict_union_test.*.

        Cleanup: added unit test for pipemap. Files: util/dict_pipe.c,
        util/dict_pipe_test.*.

        Documentation: added a note about the order of search
        patterns and table lookup order. Files: proto/canonical,
        proto/generic, proto/virtual.

mail/postfix-current: Fix runtime TLS failure with LibreSSL

- Add LibreSSL checks to <> 1.1.0 OpenSSL checks
   - Bump portrevision

PR:		212223
Submitted by:	Markus Kohlmeier <rootservice@gmail.com>
Reported by:	Markus Kohlmeier <rootservice@gmail.com>
Approved by:	ohauer (via mail)
MFH:		2016Q3

- update to 3.2.20160828

20160808
       Cleanup: preserve the new file mtimes when installing Postfix.
       Ond[m~Yej Lyson[m~[k. File: postfix-install.                                                                                                                                      REVERTED 20160828.

20160819
       Bugfix (introduced: Postfix 3.0): the makedefs script ignored
       readme_directory=pathname overrides. Fix by Todd C. Olson.
       File: makedefs.

20160821
       Bugfix (introduced: Postfix 3.0): the tls_session_ticket_cipher
       documentation says aes-256-cbc, but the implementation was
       using aes-128-cbc (note that Postfix SMTP server and client
       processes have a limited life time).

20160828
       Bitrot: fixes for incompatible OpenSSL 1.1.0 API changes.
       Viktor Dukhovni. Files: posttls-finger/posttls-finger.c,
       tls/tls.h, tls/tls_dane.c, tls/tls_verify.c, tls/tls_server.c,
       tls/tls_client.c.

       Cleanup: disable reuse of ECDH ephemeral keys. Viktor
       Dukhovni.  File: tls/tls_misc.h.

MFH:		2016Q3

USE_BDB cleanup.

- USE_BDB=4x+ -> USES=bdb.
- USE_BDB=yes -> USES=bdb.
- USE_BDB=xx  -> USES=bdb:xx.

Other modernisations when I see them.

PR:		209183
Sponsored by:	Absolight

- update to 20160730

20160728
  Bugfix (introduced: 20090614): with concurrent connections
  from the same client IP address, and after-220 tests enabled,
  postscreen could overwrite the cached "all tests completed"
  result of one connection that completed the after-220 tests,
  with the "some tests not completed" result of a concurrent
  connection where the client hung up before completing the
  after-220 tests.  Files: postscreen_misc.c, postscreen_state.c,
  postscreen.h, postscreen_tests.c, postscreen.c, postscreen_smtpd.c,
  postscreen_early.c.

20160730
  Cleanup: don't try to optimize away postscreen cache updates.
  File: postscreen_misc.c.

  Cleanup: removed compatibility crutches that emulated a
  historical data organization from four years ago. Files:
  postscreen/postscreen.[hc], postscreen/postscreen_early.c,
  postscreen/postscreen_smtpd.c, postscreen/postscreen_tests.c.

- fix build on FreeBSD 12 - s/USE_OPENSSL=yes/USES=ssl/

Bump PORTREVISION for the icu revert.

This time not bumping lang/php70, but devel/php70-intl which is the one
really depending on icu.

PR:		205120
With hat:	portmgr
Sponsored by:	Absolight

devel/icu: bump PORTREVISION on dependent ports