git: 204f26850888 - main - mail/postfix: Update to 3.11.1

The branch main has been updated by otis:

URL: https://cgit.FreeBSD.org/ports/commit/?id=204f26850888b24af69424ad111f144cd8573c21

commit 204f26850888b24af69424ad111f144cd8573c21
Author:     Juraj Lutter <otis@FreeBSD.org>
AuthorDate: 2026-03-11 09:31:28 +0000
Commit:     Juraj Lutter <otis@FreeBSD.org>
CommitDate: 2026-03-11 09:41:51 +0000

    mail/postfix: Update to 3.11.1
    
    This update brings some possibly breaking changes:
    
    - Postfix 3.11.0:
    
      - TLS
        - smtp_tls_security_level now defaults to "may" when Postfix is built with
          TLS support and compatibility_level >= 3.11
        - RFC 8689 REQUIRETLS support added: requires strong authentication
          (DANE/STS) from all servers in the forward path that announce REQUIRETLS
        - TLS logging now includes desired vs. actual security level enforcement
          status and REQUIRETLS policy enforcement details
        - New smtp_tls_enforce_sts_mx_patterns parameter (default: yes) ensures
          MX hostname matching for MTA-STS
        - OpenSSL 3.5+ changes the tls_eecdh_auto_curves default to avoid
          protocol ossification (post-quantum cryptography prep)
    
      - Other
        - milter_default_action default changed from "tempfail" to "shutdown"
        - JSON output support added to postconf, postalias, postmap, postmulti
        - Deprecation warnings now logged for obsolete parameters (DEPRECATION_README)
    
    - Postfix 3.11.1 (bug fixes only):
    
      - Fix alias_maps error when default_database_type is not set in main.cf
      - Fix buffer over-read when enhanced status codes lack trailing text
        (e.g. "5.7.2" with no subsequent text) in access tables, header/body
        checks, rbl_reply_maps, and default_rbl_reply; present since 3.0
      - Fix null pointer dereference in nbdb_reindexd(8) due to service_name
        not being propagated (regression since 3.3)
      - Fix spurious startup error from nbdb_reindexd(8) when
        non_bdb_migration_level disables automatic re-indexing
---
 mail/postfix/Makefile  | 6 +++---
 mail/postfix/distinfo  | 6 +++---
 mail/postfix/pkg-plist | 4 ++++
 3 files changed, 10 insertions(+), 6 deletions(-)

diff --git a/mail/postfix/Makefile b/mail/postfix/Makefile
index 2f0fd1b9bbd1..c4759813643e 100644
--- a/mail/postfix/Makefile
+++ b/mail/postfix/Makefile
@@ -1,5 +1,5 @@
 PORTNAME=	postfix
-DISTVERSION=	3.10.6
+DISTVERSION=	3.11.1
 PORTREVISION?=	0
 PORTEPOCH=	1
 CATEGORIES=	mail
@@ -154,8 +154,8 @@ HTML1=		body_checks.5.html bounce.5.html postfix-power.png \
 		scache.8.html tlsmgr.8.html
 
 STRIP_LIBEXEC=	anvil bounce cleanup discard dnsblog error flush lmtp local \
-		master nqmgr oqmgr pickup pipe postlogd postscreen proxymap \
-		qmgr qmqpd scache showq smtp smtpd spawn tlsmgr tlsproxy \
+		master nbdb_reindexd nqmgr oqmgr pickup pipe postlogd postscreen \
+		proxymap qmgr qmqpd scache showq smtp smtpd spawn tlsmgr tlsproxy \
 		trivial-rewrite verify virtual
 
 .if !defined(DEBUG)
diff --git a/mail/postfix/distinfo b/mail/postfix/distinfo
index f612cf5cf132..b37043d0fcfc 100644
--- a/mail/postfix/distinfo
+++ b/mail/postfix/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1764276925
-SHA256 (postfix/postfix-3.10.6.tar.gz) = 71b383f57d4cb363201be8a301bcbafe304aadbe7f38ebde41cd5b952248465b
-SIZE (postfix/postfix-3.10.6.tar.gz) = 5039838
+TIMESTAMP = 1773217639
+SHA256 (postfix/postfix-3.11.1.tar.gz) = 659265606ed9b6242964b6d44a2aaf5e607d8fb9ad2541027a4a320ddfb89dc1
+SIZE (postfix/postfix-3.11.1.tar.gz) = 5280696
diff --git a/mail/postfix/pkg-plist b/mail/postfix/pkg-plist
index 22ea5418c8ab..551087d5be6c 100644
--- a/mail/postfix/pkg-plist
+++ b/mail/postfix/pkg-plist
@@ -53,12 +53,14 @@ libexec/postfix/main.cf.proto
 libexec/postfix/makedefs.out
 libexec/postfix/master
 libexec/postfix/master.cf.proto
+libexec/postfix/nbdb_reindexd
 libexec/postfix/nqmgr
 libexec/postfix/oqmgr
 libexec/postfix/pickup
 libexec/postfix/pipe
 libexec/postfix/post-install
 libexec/postfix/postfix-files
+libexec/postfix/postfix-non-bdb-script
 %%CDB%%libexec/postfix/postfix-files.d/cdb-files
 %%LDAP%%libexec/postfix/postfix-files.d/ldap-files
 %%LMDB%%libexec/postfix/postfix-files.d/lmdb-files
@@ -91,6 +93,7 @@ share/man/man1/postalias.1.gz
 share/man/man1/postcat.1.gz
 share/man/man1/postconf.1.gz
 share/man/man1/postdrop.1.gz
+share/man/man1/postfix-non-bdb.1.gz
 share/man/man1/postfix-tls.1.gz
 share/man/man1/postfix.1.gz
 share/man/man1/postkick.1.gz
@@ -144,6 +147,7 @@ share/man/man8/flush.8.gz
 share/man/man8/lmtp.8.gz
 share/man/man8/local.8.gz
 share/man/man8/master.8.gz
+share/man/man8/nbdb_reindexd.8.gz
 share/man/man8/oqmgr.8.gz
 share/man/man8/pickup.8.gz
 share/man/man8/pipe.8.gz