mail/postfix: Update to 3.9.1

Reported by:	portscout

mail/postfix: Make the rc script service jails ready

mail/postfix: Update to 3.9.0

- Update to 3.9.0
- Add MongoDB maps support
- regen patches.

Release notes:
https://postfix-mirror.horus-it.com/postfix-release/official/postfix-3.9.0.RELEASE_NOTES

mail/postfix: Fix manpages location with INST_BASE

PR:		276844

mail/postfix: Update to 3.8.5

mail/postfix: Sanitize MANPREFIX

Approved by:    portmgr (blanket)

mail/postfix: Update to 3.8.4

This release adds support to defend against an email spoofing attack
(SMTP smuggling) on recipients at a Postfix server. For background, see
https://www.postfix.org/smtp-smuggling.html.

mail/postfix: Update to 3.8.3

Release notes:
http://ftp.porcupine.org/mirrors/postfix-release/official/postfix-3.8.3.RELEASE_NOTES

devel/icu: update to 74.1

Changes:	https://github.com/unicode-org/icu/releases/tag/release-74-1
Reported by:	GitHub (watch releases)
PR:		274317
Exp-run by:	antoine (incomplete)
Approved by:	fluffy

mail/postfix: Update to 3.8.2

mail/postfix: temporary build fix for FreeBSD 15.

Reviewed by:	otis
Differential Revision:	https://reviews.freebsd.org/D41599

mail/postfix: Update to 3.8.1

Release notes: https://www.postfix.org/announcements/postfix-3.8.1.html

mail/postfix: Update to 3.8.0

The most notable change is that starting from 3.8.0, postfix
supports SRV DNS records lookups in SMTP and LMTP clients.

Release announcement:
https://www.postfix.org/announcements/postfix-3.8.0.html

devel/icu: update to 73.1

- Temporarily switch to GitHub auto archive (release artifacts are N/A atm)

Changes:	https://github.com/unicode-org/icu/releases/tag/release-73-1
Reported by:	GitHub (watch releases)
PR:		270422
Exp-run by:	antoine

Mk/**ldap.mk: Convert USE_LDAP to USES=ldap

Convert the USE_LDAP=yes to USES=ldap and adds the following features:

- Adds the argument USES=ldap:server to add openldap2{4|5|6}-server as
  RUN_DEPENDS
- Adds the argument USES=ldap<version> and replaces WANT_OPENLDAP_VER
- Adds OPENLDAP versions in bsd.default-versions.mk
- Adds USE_OPENLDAP/WANT_OPENLDAP_VER in Mk/bsd.sanity.mk
- Changes consumers to use the features

Reviewed by:	delphij
Approved by:	portmgr
Differential Revision: https://reviews.freebsd.org/D38233

mail/postfix: Update to 3.7.4

mail/postfix: Do not advertise Cyrus SASL support in LDAP flavor

PR:		260581

mail/postfix: Add FLAVORS (MySQL, PostgreSQL, SQLite)

Add databse flavors, based on [1]

PR:		267295

devel/icu: update to 72.1

Changes:	https://github.com/unicode-org/icu/releases/tag/release-72-1
Reported by:	GitHub (watch releases)
PR:		266582
Exp-run by:	antoine

mail/postfix: Update to 3.7.3

Reported by:	portscout

Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)

Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

mail/postfix: remove interractive part of the script

pkg does not allow interractive script

mail: remove 'Created by' lines

A big Thank You to the original contributors of these ports:

  *  <ashish@FreeBSD.org>
  *  Aaron Dalton <aaron@FreeBSD.org>
  *  Adam David <adam@FreeBSD.org>
  *  Adam McDougall <mcdouga9@egr.msu.edu>
  *  Adam Weinberger <adamw@FreeBSD.org>
  *  Ade Lovett <ade@FreeBSD.org>
  *  Akinori MUSHA aka knu <knu@idaemons.org>
  *  Alex Deiter <tiamat@komi.mts.ru>
  *  Alex Dupre <ale@FreeBSD.org>
  *  Alex Dupre <sysadmin@alexdupre.com>
  *  Alex Perel <veers@disturbed.net>

mail/postfix: Update to 3.7.2

mail/postfix: Update to 3.7.1

devel/icu: update to 71.1

Changes:	https://github.com/unicode-org/icu/releases/tag/release-71-1
Reported by:	GitHub (watch releases)
PR:		262654
Exp-run by:	antoine
Approved by:	fluffy

mail/postfix: Use proper PCRE

- bump portscout expression to monitor version postfix version 3.7
- adopt SASL description fix from postfix-current

mail/postfix: Apply correct config file patch

Apply proper config file patch in correct stage.

mail/postfix: Update to 3.7.0

- Update to 3.7.0
- Correct installation instructions [1]
- Listen on both IPv4 and IPv6 [2]
- Use system-wide CA path [3]
- Correct typo in pkg-message [4]
- Switch to PCRE2 [5]

PR:     261821 [1]
PR:     252872 [2]
PR:     239473 [3]
PR:     261824 [4]
PR:     262100 [5]

*/*: Remove redundant '-[0-9]*' from CONFLICTS_INSTALL

The conflict checks compare the patterns first against the package
names without version (as reported by "pkg query "%n"), then - if
there was no match - agsinst the full package names including the
version (as reported by "pkg query "%n-%v").

Approved by: portmgr (blanket)

mail/postfix: Update to 3.6.3

- Update to 3.6.3
- Cleanup Makefile a bit
- Release notes: http://www.postfix.org/announcements/postfix-3.6.3.html

mail/postfix: Fix multiple build issues

- Add ssl to USES
- Fix plist issues
- Install sample files properly

PR:		259530

devel/icu: update to 70.1

Changes:	https://github.com/unicode-org/icu/releases/tag/release-70-1
Reported by:	GitHub (watch releases)
PR:		258794
Exp-run by:	antoine

mail/postfix{,-ldap-sasl,-sasl}: Flavorize

* Add entries for slave ports to MOVED
* Pet portlint and portclippy
* Reformat Makefile with portfmt

PR:		255641
Approved by:	maintainer timeout (> 2 months)
Differential Revision:	https://reviews.freebsd.org/D32361

cleanup: drop support for EOL FreeBSD 11.X

Search criteria used:
- 11.4
- OSREL*
- OSVER*
- *_FreeBSD_11

Input from:
- adridg: devel/qca-legacy
- jbeich: _WITH_DPRINTF, _WITH_GETLINE, GNU bfd workarounds
- sunpoet: security/p5-*OpenSSL*

Reviewed by:	doceng, kde, multimedia, perl, python, ruby, rust
Differential Revision: https://reviews.freebsd.org/D32008
Test Plan: make index

net/openldap24-server: Make SASL permanent for OpenLDAP port.

PR:		ports/257374
Reviewed by:	obrien
Approved by:	portmgr (exp-run by antoine)
Differential Revision: https://reviews.freebsd.org/D31301

mail/postfix: Update to 3.6.2

mail/postfix: Check for supported OpenSSL version

- Check if OpenSSL at least 1.1.1a is being used
- LibreSSL is not supported as it dos not (yet) provide the
  TLSv1.3 API found in OpenSSL 1.1.1 API.

mail/postfix: Update to 3.6.1

Relnotes:	http://www.postfix.org/announcements/postfix-3.6.1.html
Reported by:	portscout

mail/postfix-*: Take maintainership

Take maintainership of postfix ports. No functional changes.

Approved by:	ohauer

mail/postfix mail/postfix-current: add back PKGPREFIX for sasl build

mail/postfix: update to 3.6.0

Postfix 3.6 requires minimum OpenSSL 1.1.1, so
mark broken for FreeBSD 11 with 'OpenSSL base'

mail/postfix

update to 3.5.10

devel/icu: update to 69.1

Changes:	https://github.com/unicode-org/icu/releases/tag/release-69-1
Reported by:	GitHub (watch releases)

all: Remove all other $FreeBSD keywords.

Remove # $FreeBSD$ from Makefiles.

mail/postfix{-current}: Fix build on 14.0-CURRENT

[...]
In file included from alldig.c:29:
./sys_defs.h:1259:2: error: "unsupported platform"
#error "unsupported platform"
 ^
[...]

Approved by:	portmgr (build fix blanket)

- update to 3.5.9

========

20210116
  Feature: when a Postfix program makes a DNS query that
  requests DNSSEC validation (usually for Postfix DANE support)
  but the DNS response is not DNSSEC validated, Postfix will
  send a DNS query configured with the "dnssec_probe" parameter
  to determine if DNSSEC support is available, and logs a
  warning if it is not. By default, the probe has type "ns"
  and domain name ".". The probe is sent once per process
  lifetime. Files: dns/dns.h, dns/dns_lookup.c, dns/dns_sec.c,
  test_dns_lookup.c, global/mail_params.[hc], mantools/postlink.

  The makedefs script no longer disables DNSSEC when Postfix
  is built with libc-musl. Instead Postfix will rely on the
  new dnssec_probe feature, and will log a warning when Postfix
  requests DNSSEC validation, but the infrastructure does not
  validate DNSSEC signatures. File: makedefs.

  The default "smtp_tls_dane_insecure_mx_policy = dane" was
  causing unnecessary dnssec_probe activity. The default is now
  "dane" when smtp_tls_security_level is "dane", otherwise it is
  "may". File: global/mail_params.h.

- update to 3.5.8
- shut up sed_checked.sh (it is not really helpful with RE replacements on 140+
files with 50% hit rate)

MFH:		2020Q4

devel/icu: update to 68.1

Changes:	http://site.icu-project.org/download/68
ABI:		https://abi-laboratory.pro/tracker/timeline/icu4c/
Reported by:	GitHub (watch releases)

- update to 3.5.7

MFH:		2020Q3

- update to 3.5.6

20200726
  Bugfix (introduced: Postfix 3.5.5): part of a memory leak
  fix was backported to the wrong place. File: tls/tls_misc.c.

  The Postfix 3.5.5 workaround did not explicitly override
  the system-wide OpenSSL configuration of allowed TLS protocol
  versions, for sessions where the remote SMTP client sends
  SNI. It's better to be safe than sorry. File: tls/tls_server.c.

PR:		248271
Reported by:	many

- update to 3.5.5

Fix easy typo.

Reported by:	V_PauAmma_V
Approved by:	portmgr ("obvious fix")

- update to 3.6-20200627

- update to 3.5.3

Changelog:
20200530
  Bugfix (introduced: Postfix 3.1): "postfix tls deploy-server-cert" did not
  handle a missing optional argument.

20200610
  Bugfix (introduced: Postfix 3.4): in the Postfix SMTP server, the SNI
  callback reported an error when it was called a second time. This happened
  after the server-side TLS engine sent a TLSv1.3 HelloRetryRequest (HRR) to
  a remote SMTP client.

MFH:		2020Q2

- update to 3.5.2

devel/icu: update to 67.1

Changes:	http://site.icu-project.org/download/67
ABI:		https://abi-laboratory.pro/tracker/timeline/icu4c/
Reported by:	GitHub (watch releases)

- update to 3.5.1

MFH:		2020Q2

- update to 3.5.0

- update to 3.4.10
- adjust PORTSCOUT to include 3.5.x
- remove deprecated ports from CONFLICTS_INSTALL
- add BLACKLISTD to OPTIONS_DEFAULT
- MYSQL_USES s/=/?=/ to allow testbuild without
  defining XX MYSQL dedicated make.conf's in poudriere

devel/icu: update to 66.1

Changes:	http://site.icu-project.org/download/66
ABI:		https://abi-laboratory.pro/tracker/timeline/icu4c/

Update Postfix to 3.4.9 (bugfix-only release)

While here, also strip libexec/postfix/postlogd.

Announcement: http://www.postfix.org/announcements/postfix-3.4.9.html
 Fixed in all supported stable releases:
    Bug (introduced: Postfix 3.1): smtp_dns_resolver_options were broken while
adding support for negative DNS response caching in postscreen. Postfix was
inadvertently changed to call res_query() instead of res_search(). Reported by
Jaroslav Skarvada.

    Bug (introduced: Postfix 2.5): Postfix ignored the CONNECT macro overrides
from a Milter application. Postfix now evaluates the Milter macros for an SMTP
CONNECT event after the Postfix-to-Milter connection is negotiated. Problem
reported by David Burgin.

    Bug (introduced: Postfix 3.0): sanitize (remote) server responses before
storing them in the verify database, to avoid Postfix warnings about malformed
UTF8. Found during code maintenance.

PR:		243879
Submitted by:	Juraj Lutter <juraj@lutter.sk>
Approved by:	maintainer timeout 15d (ohauer@)
MFH:		2020Q1 (patchlevel upgrade with only bugfixes)
Differential Revision:	https://reviews.freebsd.org/D23502

- update to 3.4.8

- fix PORTSCOUT version

Drop the ipv6 virtual category for m* category as it is not relevant anymore

devel/icu: update to 65.1

Changes:	http://site.icu-project.org/download/65
ABI:		https://abi-laboratory.pro/tracker/timeline/icu4c/

- update to  3.4.7

- update to 3.4.6

- convert pkg-message to UCL

- update to 3.4.5
- adopt libressl patches from OpenBSD

- update to postfix-3.3.4

Changelog:
20190312
  Bugfix (introduced: Postfix 2.2): reject_multi_recipient_bounce
  has been producing false rejects starting with the Postfix
  2.2 smtpd_end_of_data_restrictons, and for the same reasons,
  did the same with the Postfix 3.4 BDAT command. The latter
  was reported by Andreas Schulze. File: smtpd/smtpd_check.c.

20190328
  Bugfix (introduced: Postfix 3.0): LMTP connections over
  UNIX-domain sockets were cached but not reused, due to a
  cache lookup key mismatch. Therefore, idle cached connections
  could exhaust LMTP server resources, resulting in two-second
  pauses between email deliveries. This problem was investigated
  by Juliana Rodrigueiro. File: smtp/smtp_connect.c.

devel/icu: update to 64.1

Changes:	http://site.icu-project.org/download/64
ABI:		https://abi-laboratory.pro/tracker/timeline/icu4c/
PR:		236325
Exp-run by:	antoine
Differential Revision:	https://reviews.freebsd.org/D19479

- update to 3.3.3

Changelog:
20181202
  Bugfix (introduced: postfix-2.11): with posttls-finger,
  connections to unix-domain servers always resulted in "Failed
  to establish session" even after a connection was established.
  Jaroslav Skarva.  File: posttls-finger/posttls-finger.c.

20181227 (a forgotten bugfix from 20180707)
  Bugfix (introduced: Postfix 3.0): with smtputf8_enable=yes,
  table lookups could casefold the search string when searching
  a lookup table that does not use fixed-string keys (regexp,
  pcre, tcp, etc.). Historically, Postfix would not case-fold
  the search string with such tables. File: util/dict_utf8.c.

20190217
  Cleanup: when the master daemon runs with PID=1 (init mode),
  reap orhpan processes from non-Postfix code running in the
  same container, instead of terminating with a panic. File:
  master/master_spawn.c.

MFH:		2019Q1

- add ability to overwrite OPTIONS_DEFAULT for slave ports
  (s/=/?=/)

PR:		233608
Submitted by:	HEO SeonMeyong

- fix build with libressl 2.8.2

PR:             233517 233527
Submitted by:   Andrej Ebert
Reported by:	Herbert J. Skuhra

- update to 3.3.2

Changelog:
20180617
  Bugfix (introduced: Postfix 2.11): minor memory leak when
  minting issuer certs. This affects a tiny minority of use
  cases. Viktor Dukhovni, based on a fix by Juan Altmayer
  Pizzorno for the ssl_dane library.

20180817
  Workaround: postconf build did not abort if the m4 command
  is not installed (on a system that does have the make
  command, the awk command, the perl command, and the C
  compiler?!).

Remove compatibility code for FreeBSD < 11.2 from all ports.

Simplify some ports where DragonFlyBSD no longer needs to be special-cased.
Submitted by:	rene
Reviewed by:	bapt, jbeich
Differential Revision:	https://reviews.freebsd.org/D17724

devel/icu: update to 63.1

Changes:	http://site.icu-project.org/download/63
ABI:		https://abi-laboratory.pro/tracker/timeline/icu4c/
PR:		232300
Exp-run by:	antoine

- fix build on FreeBSD 13-CURRENT

PR:		232502
Submitted by:	Kai

devel/icu: update to 62.1

Changes:	http://site.icu-project.org/download/62
ABI:		https://abi-laboratory.pro/tracker/timeline/icu4c/
PR:		229359
Exp-run by:	antoine (only 10.4)

Drop always true (and tautologic) OSVERSION conditions

Approved by:	portmgr blanket

- update to 3.3.1
- rework MySQL patch

devel/icu: update to 61.1

Changes:	http://site.icu-project.org/download/61
ABI:		https://abi-laboratory.pro/tracker/timeline/icu4c/
PR:		227042
Exp-run by:	antoine
MFH:		2018Q2 (required by Firefox 61)

- fix build agains maraidb100 [1]

Firt definition of MARIADB_VERSION_ID can be found in mariadb102
therefore we have to use MARIADB_BASE_VERSION which is defined in
mariadb55 and mariadb10x

PR:		226266 [1], 220224
Reported by:	Zilon [1]

- update to 3.3.0
- add patch for MySQL 8.x [1}
- add blacklistd support [2]

additional:
- regenerate patch for src/util/sys_defs.h

Release Notes:
ftp://ftp.porcupine.org/mirrors/postfix-release/official/postfix-3.3.0.RELEASE_NOTES

PR:		220224 [1], 225664 [2]
Submitted by:	Klaus Mayr [1], Koichiro IWAO [2]

- update to 3.3.0-RC1

- fix licence error after last commit

Reported by:	Yasuhiro KIMURA
MFH:		2018Q1

- update to 3.2.5
- license is now dual (see Changelog 20180127)
- make EAI optional but on by default [1]

Changelog:
20171116
  Bugfix (introduced: Postfix 2.1): don't log warnings
  that some restriction returns OK, when the access map
  DISCARD feature is in effect. File: smtpd/smtpd_check.c.

20171215
  Bugfix (introduced: 20170611): the DB_CONFIG bugfix broke
  Berkeley DB configurations with a relative pathname.  File:
  util/dict_db.c.

Update to 3.2.4

Changelog:
* DANE interoperability. Postfix builds with OpenSSL 1.0.0 or 1.0.1
  failed to send email to some sites with "TLSA 2 X X" DNS records
  associated with an intermediate CA certificate. Problem report and
  initial fix by Erwan Legrand.
* Missing dynamicmaps support in the Postfix sendmail command. This
  broke authorized_submit_users settings that use a dynamically-loaded
  map type. Problem reported by Ulrich Zehl.

PR:		223804
Submitted by:	zeising
Approved by:	maintainer timeout

mail/postfix: use ECHO_CMD instead of ECHO

- When using "make -s install" the build can fail because the
  essential modifications to the port build are not made correctly.
  # make -s VECHO
  true
  # make -s VECHO_CMD
  echo

PR:		222988
Submitted by:	Franco Fichtner <franco@opnsense.org>
Approved by:	ohauer (maintainer timeout)

devel/icu: update to 60.1

Changes:	http://site.icu-project.org/download/60
ABI:		https://abi-laboratory.pro/tracker/timeline/icu4c/
PR:		223373
Exp-run by:	antoine

- update to 3.2.3

Changelog:
20170620
  Bugfix (introduced: Postfix 3.2) extension propagation was
  broken with "recipient_delimiter = .". This change reverts
  a change that was trying to be too clever. Files:
  global/mail_adr_crunch.c, global/mail_addr_crunch.ref.

20170910
  Safety: restore sanity checks for dynamically-specified
  width and precision in format strings (%*, %.*, and %*.*).
  These checks were lost with the Postfix 3.2.2 rewrite of
  the vbuf_print formatter. File: vbuf_print.c.

20170923
  Bugfix (introduced: Postfix 3.2): panic in the postqueue
  command after output write error while listing the queue.
  This change restores a write error check that was lost with
  the Postfix 3.2.2 rewrite of the vbuf_print formatter.
  Problem reported by Andreas Schulze. File: util/vbuf_print.c.

devel/icu: update to 59.1

- Temporarily keep C++98 working in consumers for Clang's default -std=

Changes:	http://site.icu-project.org/download/59
PR:		218788
Submitted by:	takefu@airport.fm, dcarmich@dcarmichael.net (early version)
Exp-run by:	antoine

- update to 3.2.2
- adjust PORTSCOUT

Changelog:
20170221
  Compatibility fix (introduced: Postfix 3.1): some Milter
  applications do not recognize macros sent as {name} when
  macros have single-character names. Postfix now sends such
  macros without {} as it has done historically. Viktor
  Dukhovni. File: milter/milter.c.

20170402
  Bugfix (introduced: Postfix 3.2): restore the SMTP server
  receive override options at the end of an SMTP session,
  after the options may have been modified by an smtpd_milter_maps

mail/postfix: Fix x25519 kex with LibreSSL

PR:		216790
Obtained from:	OpenBSD ports
Approved by:	ohauer (maintainer)

Update to 3.2.0.

This release ends support for legacy release Postfix 2.10.

The main changes in no particular order are:

* Elliptic curve negotiation with OpenSSL [?] 1.0.2. This changes the default
  smtpd_tls_eecdh_grade setting to "auto", and introduces a new parameter
  tls_eecdh_auto_curves with the names of curves that may be negotiated.
* Stored-procedure support for MySQL databases. Contributed by John Fawcett.
  See the mysql_table(5) manpage for details.
* Cidr: table support for if/endif and negation (by prepending ! to a pattern),
  just like regexp: and pcre: tables. See the cidr_table(5) manpage for details.
* The postmap command and the inline: and texthash: maps now support spaces in
  left-hand field of lookup table source text. Use double quotes (") around a

- update to 3.1.4

Changelog:
20161105
  Bugfix (introduced: Postfix 1.1): the postsuper command did not count a
  successful rename operation after error recovery.

20161204
  Bugfix (introduced: Postfix 3.1): cut-and-paste error in the "postfix
  tls deploy-server-cert" command, causing the wrong certfile and keyfile
  to be used.

  Robustness: create a new keyfile when "postfix tls new-server-cert" is
  invoked and main.cf specifies a non-existent keyfile.

Do not use post-stage.  Use post-install instead.

The only reason to use post-stage is because the port needs to do
"things" at a later time, like some plist manipulation.
While there, fold post-install in do-install targets when they are
defined.

PR:		214780
Submitted by:	mat
Exp-run by:	antoine
Sponsored by:	Absolight