- update to 3.6-20200515

- update to 3.6-20200511

- update to 3.6-20200509

- update to 3.6-20200504

- update to 3.6-20200419

devel/icu: update to 67.1

Changes:	http://site.icu-project.org/download/67
ABI:		https://abi-laboratory.pro/tracker/timeline/icu4c/
Reported by:	GitHub (watch releases)

- update to 3.6-20200416

- update to 3.6-20200316

- update to 3.5.0-RC2
- bump PORTEPOCH
- remove deprecated ports from CONFLICTS_INSTALL
- add BLACKLISTD to OPTIONS_DEFAULT
- MYSQL_USES s/=/?=/ to allow testbuild without
  defining XX MYSQL dedicated make.conf's in poudriere
- add postlogd to STRIP_LIBEXEC

devel/icu: update to 66.1

Changes:	http://site.icu-project.org/download/66
ABI:		https://abi-laboratory.pro/tracker/timeline/icu4c/

- update to 3.5-20200126

- update to 3.5-20200112

- update to 3.5-20200105

- update to 3.5-20191214

- update to 3.5-20191109

- update to 3.5-20191019

- update to 3.5-20191013

Drop the ipv6 virtual category for m* category as it is not relevant anymore

devel/icu: update to 65.1

Changes:	http://site.icu-project.org/download/65
ABI:		https://abi-laboratory.pro/tracker/timeline/icu4c/

- update to 3.5-20190922

- update to 3.5-20190724

- update to 3.5-20190621
- convert pkg-message to UCL

- update to 3.5-20190615


  Incompatibility with snapshot 20190615
  ====================================

  The Postfix TLS library by default no longer waits after sending a
  TLS 'close' notification. This should be safe with TLSv1.2 and
  later. Specify "tls_fast_shutdown_enable = no" to enable historical
  Postfix behavior.

  Major changes with snapshot 20190615
  ====================================

  After sending a TLS 'close' notification, the Postfix library by

- update to 3.5-20190518

- update to 3.5-20190517


20190516
  Initial search order support for check_ccert_access. The
  default behavior is backwards-compatible. This is work in
  progress; see the RELEASE_NOTES for examples.

20190517
  Bugfix: postconf mis-parsed text starting with "{" such as
  "check_ccert_access { inline:{a=b} { search_order=c,d } }".
  Fixed by adding another level of recursion.

- update to 3.5-20190427

Note:
----------------------------------------------------------------------
Incompatibility with snapshot 20190427
======================================
  Postfix now normalizes IP addresses received with XCLIENT, XFORWARD,
  or with the HaProxy protocol, for consistency with direct connections
  to Postfix. This may change the appearance of logging, and the way
  that check_client_access will match subnets of an IPv6 address.

Changelog:
----------------------------------------------------------------------
20190331
  Documentation: tlsext_padding is not a tls_ssl_options

- update to 3.5-20190330
- adopt libressl patches from OpenBSD

- update to 3.4-20190106

devel/icu: update to 64.1

Changes:	http://site.icu-project.org/download/64
ABI:		https://abi-laboratory.pro/tracker/timeline/icu4c/
PR:		236325
Exp-run by:	antoine
Differential Revision:	https://reviews.freebsd.org/D19479

- update to 3.4-20181202

 - update to 3.4-20181130

- add ability to overwrite OPTIONS_DEFAULT for slave ports
  (s/=/?=/)

PR:		233608
Submitted by:	HEO SeonMeyong

- fix build with libressl 2.8.2

PR:		233517
Submitted by:	Andrej Ebert

- update to 3.4-20181123

- update to 3.4-20181119

- update to 3.4-20181118

- update to 20181117

- update to 3.4-20181113

- update to 20181105

20181014
  Cleanup: figured out why vstring_get() did not return
  VSTREAM_EOF in APPEND mode.

20181104
  Multiple 'bit rot' fixes for OpenSSL API changes, including
  support to disable TLSv1.3, to avoid issuing multiple session
  tickets, and to allow OpenSSL >= 1.1.0 run-time micro version
  bumps without complaining about library version mismatches.

20181105
  Feature: "postmap -F" reads a source file with (key, filename)
  entries, and creates database records with (key, base64-encoded
  filecontent). This feature will be used for SNI lookup
  table support, where each key will be a domainname, and
  each value will contain a sequence of (private key, certificate
  hierarchy) for that domainname. The same 'value is filename'
  behavior is implemented in cidr:, inline:, pcre:, randmap:,
  regexp:, and static: maps if the application sets the flag
  DICT_FLAG_RHS_IS_FILE. In the forseeable future, this will

Remove compatibility code for FreeBSD < 11.2 from all ports.

Simplify some ports where DragonFlyBSD no longer needs to be special-cased.
Submitted by:	rene
Reviewed by:	bapt, jbeich
Differential Revision:	https://reviews.freebsd.org/D17724

devel/icu: update to 63.1

Changes:	http://site.icu-project.org/download/63
ABI:		https://abi-laboratory.pro/tracker/timeline/icu4c/
PR:		232300
Exp-run by:	antoine

- fix build on FreeBSD 13-CURRENT

PR:		232502
Submitted by:	Kai

- update to 3.4-20180904

 - update to 3.4-20180819.

- update to 3.4-20180708

- update to 3.4-20180707

- update to 20180701

devel/icu: update to 62.1

Changes:	http://site.icu-project.org/download/62
ABI:		https://abi-laboratory.pro/tracker/timeline/icu4c/
PR:		229359
Exp-run by:	antoine (only 10.4)

- update to 3.4-20180624

- update to 3.4-20180620

Drop always true (and tautologic) OSVERSION conditions

Approved by:	portmgr blanket

- update to 3.4-20180520

devel/icu: update to 61.1

Changes:	http://site.icu-project.org/download/61
ABI:		https://abi-laboratory.pro/tracker/timeline/icu4c/
PR:		227042
Exp-run by:	antoine
MFH:		2018Q2 (required by Firefox 61)

- update to 3.4-20180401

Changelog:
20180224
  Workaround: postconf build did not abort if the m4 command
  is not installed (on a system that does have the make command,
  the awk command, the perl command, and the C compiler?!).
  File: postconf/extract_cfg.sh.

20180303
  Portability: slight differences between MySQL and MariaDB.
  Olli Hauer. File: global/dict_mysql.c.

20180306
  Bugfix (introduced: 19990302): when luser_relay specifies
  a non-existent local address, the luser_relay feature becomes
  a black hole. Reported by Juergen Thomsen. File: local/unknown.c.

  Portability: FreeBSD 11 is supported. Files: makedefs,
  util/sys_defs.h.

- fix build agains maraidb100 [1]

Firt definition of MARIADB_VERSION_ID can be found in mariadb102
therefore we have to use MARIADB_BASE_VERSION which is defined in
mariadb55 and mariadb10x

PR:             226266 [1], 220224
Reported by:    Zilon [1]

- update to 3.4-20180222
- add patch for MySQL 8.x [1}
- add blacklistd support [2]

additional:
 regenerate patch for src/util/sys_defs.h

PR:           220224 [1], 225664 [2]
Submitted by: Klaus Mayr [1], Koichiro IWAO [2]

- update to 3.4-20180218

- update to 3.4.20180203
- license is now dual (see Changelog 20180203)
- make EAI optional but on by default [1]

20180128
  Documentation: the tcp_table(5) manpage now documents the
  absence of substring lookups. File: proto/tcp_table.

20180203
  Licence: in addition to the historical IBM Public License
  1.0, this software is now also distributed with the more
  recent Eclipse Public License 2.0. Recipients can choose
  to take the software under the license of their choice.
  Those who are more comfortable with the IPL can continue
  with that license. File: LICENSE.

PR:             ports/221619 [1]
Submitted by:   Kubilay Kocak (koobs@)

- update to 3.3-20180121

- update to 3.3-20180113

- update to 3.3-20180107

Incompatible changes with snapshot 201800107
--------------------------------------------
 This release changes the format of 'full name' information in
 Postfix-generated From: headers, when a local program such as
 /bin/mail submits a message without From: header.

 Postfix-generated From: headers with 'full name' information are
 now formatted as "From: name <address>" by default. Specify
 "header_from_format = obsolete" to get the earlier form "From:
 address (name)". See the postconf(5) manpage for more details.

- update to 3.3-20171229
- s/ECHO/ECHO_CMD  [1]

PR:		222988 [1]
Submitted by:	Franco Fichtner [1]

devel/icu: update to 60.1

Changes:	http://site.icu-project.org/download/60
ABI:		https://abi-laboratory.pro/tracker/timeline/icu4c/
PR:		223373
Exp-run by:	antoine

- update to 3.3-20170924

Changelog:
20170923
  Bugfix (introduced: Postfix 3.2): panic in the postqueue
  command after output write error while listing the queue.
  This change restores a write error check that was lost with
  the Postfix 3.2.2 rewrite of the vbuf_print formatter.
  Problem reported by Andreas Schulze. File: util/vbuf_print.c.

devel/icu: update to 59.1

- Temporarily keep C++98 working in consumers for Clang's default -std=

Changes:	http://site.icu-project.org/download/59
PR:		218788
Submitted by:	takefu@airport.fm, dcarmich@dcarmichael.net (early version)
Exp-run by:	antoine

- update to 3.3-20170910

20170827
  Safety: in vstream_buf_space(), add a sanity check to reject
  negative request sizes, instead of letting the program fail
  later. File: util/vstream.c

  Bugfix: in tests that enable the VSTRING_FLAG_EXACT flag,
  vstring_buf_put_ready() could fail to extend the buffer,
  causing infinite recursion in VBUF_PUT(). File: util/vstring.c.

20170830
  Bugfix: in vbuf_print(), save the parser-produced format
  string before calling msg_panic(), so that the panic message
  will not display its own format string. File: util/vbuf_print.c.

- update to 3.3-20170730

- update to 3.3-20170613

Changelog:
20170505
  Workaround for a current problem where some destination
  announces primarily IPv6 MX addresses, the smtp_address_limit
  eliminates most or all IPv4 addresses, and the destination
  is not reachable over IPv6. This workaround is enabled with
  "smtp_balance_mx_inet_protocols = yes", which is the default.
  Files: smtp/smtp.c, smtp/smtp_params.c, smtp/smtp_addr.c,
  global/mail_params.h, proto/postconf.proto.

20170506
  A last-minute cosmetic fix had introduced a bug in
  smtp/smtp_addr.c.

mail/postfix-current: Fix x25519 kex with LibreSSL

 - Add patches for LibreSSL

PR:		216790
Obtained from:	OpenBSD ports
Approved by:	ohauer (maintainer)

mail/postfix-current: update 3.2.0-RC1 -> 3.3-20170502

PR:		218696
Changes:	https://de.postfix.org/ftpmirror/experimental/postfix-3.3-20170502.HISTORY
Submitted by:	pi
Approved by:	ohauer (maintainer timeout)

Bump PORTEPOCH after last update (r434402)

pkg version -t 3.2.20170129,4 3.2.0.r1,4
>
pkg version -t 3.2.20170129,4 3.2.0.r1,5
<

Reported by:	Gerard Seibert <carmel_ny@outlook.com> (via freebsd-ports ml)
Approved by:	portmgr (just-fix-it blanket)

- update to 3.2.0-RC1

Release Notes:
 ftp://ftp.porcupine.org/mirrors/postfix-release/official/postfix-3.2.0-RC1.RELEASE_NOTES

- update to 20170129
- fix build with libressl < 2.5.x

Release Notes:
ftp://ftp.porcupine.org/mirrors/postfix-release/experimental/postfix-3.2-20170129.RELEASE_NOTES

PR:		216732
Submitted by:	Bernard Spil
Reported by:	Piotr Kubaj
Obtained from:	OpenBSD

- update to 3.2-20161224

20161205
   Cleanup: log the sender address when rejecting a too large
   message size in a "MAIL FROM:<sender> SIZE=nnn" command.
   File: smtpd/smtpd.c.

20161206
   Bugfix (introduced: Postfix 3.0): when receiving a MAIL
   FROM...SMTPUTF8 command while smtpd_delay_reject=no, enable
   SMTPUTF8 support before processing smtpd_sender_restrictions.
   Problem reported by Viktor Dukhovni. File: smtpd/smtpd.c.

   Bugfix (introduced: Postfix 3.0): when receiving a
   VRFY...SMTPUTF8 command, enable SMTPUTF8 support while

- update to 3.2-20161204

Incompatible changes with snapshot 20161204
===========================================

Postfix 3.2 removes tentative features that were implemented
before the DANE spec was finalized:

- Support for certificate usage PKIX-EE(1),

- The ability to disable digest agility. Postfix 3.2 always behaves
  as if "tls_dane_digest_agility = on.

- The ability to disable support for "TLSA 2 [01] [12]" records
  that specify the digest of a trust anchor. Postfix 3.2 always
  behaves as if "tls_dane_trust_anchor_digest_enable = yes".

Do not use post-stage.  Use post-install instead.

The only reason to use post-stage is because the port needs to do
"things" at a later time, like some plist manipulation.
While there, fold post-install in do-install targets when they are
defined.

PR:		214780
Submitted by:	mat
Exp-run by:	antoine
Sponsored by:	Absolight

devel/icu: update to 58.1

Changes:	http://site.icu-project.org/download/58
PR:		214384
Exp-run by:	antoine
Approved by:	office (bapt)

- update to 3.2-20161106

20161105
 Bugfix (introduced: Postfix 1.1): the postsuper command did
 not count a successful rename operation after error recovery.
 Problem reported by Markus Sch_nhaber. File: postsuper/postsuper.c.

 Cleanup: error reporting for IDNA (non-ASCII domain name)
 conversion errors, and enable_idna2003_compatibility
 configuration. File: util/midna_domain.c.

Incompatible changes with snapshot 20161103
===========================================

Postfix 3.2 by default disables the 'transitional' compatibility
between IDNA2003 and IDNA2008, when converting UTF-8 domain names
to/from the ASCII form that is used in DNS lookups.  This makes
Postfix behavior consistent with current versions of the Firefox
and Chrome web browsers. Specify "enable_idna2003_compatibility =
yes" for historical behavior.

This affects the conversion of, for example, the German sz and the
Greek zeta. See http://unicode.org/cldr/utility/idna.jsp for more
examples.

- update to 3.2-20161101

Major changes with snapshot 20161031
====================================
The smtpd_milter_maps feature supports per-client Milter configuration.
This overrides the global smtpd_milters setting and has the same syntax.
A lookup result of "DISABLE" turns off Milter support.

- update to 3.2-20161008

Changelog:

20161007
  Bitrot: API for the ersatz inet_ntop() function, when
  compiling with -DNO_IPV6 (which exists only for debugging).
  Files: util/sys_defs.h, util/sys_compat.c.

20161008
  Feature: smtp_tcp_port, similar to the existing lmtp_tcp_port.
  Files: mantools/postlink, proto/postconf.proto,
  global/mail_params.h, smtp/smtp.c, smtp/smtp_connect.c,
  smtp/smtp_params.c.

  Feature: "PASS" and "STRIP" actions in header/body_checks.
  "STRIP" is similar to "IGNORE" but also logs the action,
  and "PASS" disables header, body, and Milter inspection for
  the remainder of the message content.  Contributed by Hobbit.
  Files: cleanup/cleanup_message.c, global/header_body_checks.c.

- update to 3.2-20160925

Changelog:
==========
20160925
  Bugfix (introduced: Postfix 2.11): changed the default MySQL
  option_group value to "client" to enable the reading of
  "client" option group settings in the MySQL option file.
  Specify an empty option_group value to get backwards-compatible
  behavior.  This fixes a "not found" problem with Postfix
  queries that contain UTF8-encoded non-ASCII text.  Based
  on a fix by John Fawcett.  Files: global/dict_mysql.c,
  proto/mysql_table.

Incompatible changes with snapshot 20160925
===========================================
In the Postfix MySQL database client, the default option_group value
has changed to "client", to enable reading of "client" option group
settings in the MySQL options file. This fixes a "not found" problem
with Postfix queries that contain UTF8-encoded non-ASCII text.
Specify an empty option_group value (option_group =) to get
backwards-compatible behavior.

- update to 3.2-20160924

Changelog:
20160918
 after rejected SMTP commands.  As before, the SMTP server
 does not forward SASL login information to other Postfix
 subsystems, and it does not receive SASL login information
 in XFORWARD commands. File/smtpd/smtpd.c.

- Update devel/icu to 57.1.
- Clean up the Makefile.
- Follow some upstream recommendations (--with-data-packaging=archive,
  --disable-renaming, -DICU_NO_USER_DATA_OVERRIDE).
- Patch makefiles to install static libraries with INSTALL_DATA so they
  aren't stripped.
- Patch config/mh-bsd-gcc to sync with config/mh-linux-gcc.
- Fix endianness detection in ICU.  The code wanted to use BYTE_ORDER
  defined in machine/endian.h, but this isn't visible because ICU is
  compiled with _XOPEN_SOURCE.  Patch the code to use _BYTE_ORDER instead.
- Compile ICU with C++11 compiler to enable move constructors.
- Patch ICU to fix a problem with atomics in the case of a C++11 compiler
  without C++11 header <atomic> (like Clang on FreeBSD 9).
- Bump all ports that depend on it due to library version change.
- Add USES=compiler:c++0x to some ports that pick up -std=c++0x from ICU
  pkgconfig files.
- Add USES=compiler:c++11-lib to graphics/libcdr01 because it also needs
  a C++11 runtime library now.  Add this to all ports that depend on it
  so their executables load the right libstdc++.so on FreeBSD 9.

PR:		205120
Exp-run by:	antoine
Approved by:	portmgr (antoine)

- update to 3.2-20160917

Changelog:
20160908
        Documentation: add a pointer to hosts(5) and services(5)
        for symbolic host and port syntax. File: proto/master.

20160911
        Bugfix (introduced: Postfix 3.0): the SMTP daemon did not
        reset a previous session's command counts before rejecting
        a client that exceeds request or concurrency rates. File:
        smtpd/smtpd.c.

20160912
        Feature: preserve the new file mtimes when installing

mail/postfix-current: Fix runtime TLS failure with LibreSSL

   - Add LibreSSL checks to <> 1.1.0 OpenSSL checks
   - Bump portrevision

PR:		212223
Submitted by:	Markus Kohlmeier <rootservice@gmail.com>
Reported by:	Markus Kohlmeier <rootservice@gmail.com>
Approved by:	ohauer (via mail)
MFH:		2016Q3

- update to 3.2.20160828

20160808
       Cleanup: preserve the new file mtimes when installing Postfix.
       Ond[m~Yej Lyson[m~[k. File: postfix-install.                             
                                                                                
                       REVERTED 20160828.

20160819
       Bugfix (introduced: Postfix 3.0): the makedefs script ignored
       readme_directory=pathname overrides. Fix by Todd C. Olson.
       File: makedefs.

20160821
       Bugfix (introduced: Postfix 3.0): the tls_session_ticket_cipher
       documentation says aes-256-cbc, but the implementation was
       using aes-128-cbc (note that Postfix SMTP server and client

USE_BDB cleanup.

- USE_BDB=4x+ -> USES=bdb.
- USE_BDB=yes -> USES=bdb.
- USE_BDB=xx  -> USES=bdb:xx.

Other modernisations when I see them.

PR:		209183
Sponsored by:	Absolight

- update to 20160730


20160728
  Bugfix (introduced: 20090614): with concurrent connections
  from the same client IP address, and after-220 tests enabled,
  postscreen could overwrite the cached "all tests completed"
  result of one connection that completed the after-220 tests,
  with the "some tests not completed" result of a concurrent
  connection where the client hung up before completing the
  after-220 tests.  Files: postscreen_misc.c, postscreen_state.c,
  postscreen.h, postscreen_tests.c, postscreen.c, postscreen_smtpd.c,
  postscreen_early.c.

20160730
  Cleanup: don't try to optimize away postscreen cache updates.
  File: postscreen_misc.c.

  Cleanup: removed compatibility crutches that emulated a
  historical data organization from four years ago. Files:
  postscreen/postscreen.[hc], postscreen/postscreen_early.c,
  postscreen/postscreen_smtpd.c, postscreen/postscreen_tests.c.

- fix build on FreeBSD 12
- s/USE_OPENSSL=yes/USES=ssl/

Bump PORTREVISION for the icu revert.

This time not bumping lang/php70, but devel/php70-intl which is the one
really depending on icu.

PR:		205120
With hat:	portmgr
Sponsored by:	Absolight

devel/icu: bump PORTREVISION on dependent ports

- update to 2.3.20160625

20160618
       Bugfix(introduced: 20091121): with the introduction of
       sender_dependent_default_transport_maps, the SMTP daemon
       was not updated. This resulted in false rejects with
       sender-dependent "error" transports. Based on a fix by
       Russell Yanofsky.  Files: global/resolve_clnt.c,
       global/resolve_clnt.h, smtpd/smtpd_check.c, smtpd/smtpd_check.h,
       smtpd/smtpd_milter.c, smtpd/smtpd_resolve.c, smtpd/smtpd_resolve.h.

20160619
       Refinements to the 20160618 fix. For more consistent results
       with sender address validation, use the recipient address
       (if available) as the sender-dependent address resolver

- update to 3.2-20160612
- fix build with LibreSSL [1]

20160601
        Cleanup: moved parsing of '!' operators from cidr_match.c
        to dict_cidr.c. Files: util/cidr_match.[hc], util/dict_cidr.c,
        util/match_ops.c.

20160604
        Cleanup: made parsing of '!' operators in regexp and pcre
        tables consistent with cidr tables. Files: util/dict_regexp.c,
        util/dict_pcre.c.

20160605
        Cleanup: integer wrap-around detection in the MySQL and

- update to 3.2-20160527

20160526
       Feature: cidr tables now support if/endif and negation (by
       prepending "!" to a pattern), just like regexp and pcre
       tables. The primarily purpose is to improve readability of
       complex tables. Files: util/cidr_match.[hc], util/dict_cidr.c,
       proto/cidr_table.

       Cleanup: make regexp: and pcre: parser warning messages more
       similar.  Files: dict_regexp.c, dict_pcre.c.

- update to 3.2-20160522

20160521
 Bugfix (introduced: Postfix beta): the never-used function
 mvect_free() attempted to free memory that it has not
 allocated.  File: util/mvect.c.

 Cleanup: existing if/endif support for pcre and regexp
 tables, in preparation for new if/endif support for cidr
 tables. Files: util/dict_regexp.c, util/dict_pcre.c.

- update to 3.2-20160515

Changelog:

20160330
        The collate.pl script by Viktor Dukhovni for grouping Postfix
        logfile records into "sessions" based on queue ID and process
        ID information. Files: auxiliary/collate/*.

20160407
        Treat SASL_FAIL and SASL_NOMEM as temporary errors.
        Markus Benning. File: xsasl/xsasl_cyrus_server.c.

20160410
        Bugfix (introduced: Postfix 2.6): the "bad filetype"

- update to 3.2-20160327
- remove ${PORTSDIR} from dependency

- update to 3.2-20160314
- change comment to reflect this is a  Experimental version
- fix CONFLICTS

Changes:
20160227
	Cleanup: remember multiple BCC actions in access maps.
	Files: smtpd/smtpd.h, smtpd/smtpd.c, smtpd/smtpd_check.c,
	smtpd/smtpd_state.c, proto/access.

20160228
	Documentation: STRESS_README. File: proto/STRESS_README.html.

20160229
	Documentation: postmulti manpage. File: postmulti/postmulti.c.

- update to postfix 3.2 Snapshot 20160224

- s/always build in/always built in/