Update postfix to 2.9.8.

Changes:

2.9.8

* TLS Interoperability workaround: turn on SHA-2 digests by force.
  This improves interoperability with clients and servers that
  deploy SHA-2 digests without the required support for TLSv1.2-style
  digest negotiation.

* TLS Performance workaround: the Postfix SMTP server TLS session
  cache had become ineffective because recent OpenSSL versions
  enable session tickets by default, resulting in a different
  ticket encryption key for each smtpd(8) process. The workaround
  turns off session tickets. Postfix 2.11 will enable session
  tickets properly.

* TLS Interoperability workaround: Debian Exim versions before
  4.80-3 may fail to communicate with Postfix and possibly other
  MTAs, with the following Exim SMTP client error message:

      TLS error on connection to server-name [server-address]
      (gnutls_handshake): The Diffie-Hellman prime sent by the
      server is not acceptable (not long enough)

  See the RELEASE_NOTES file for a Postfix SMTP server configuration
  workaround.

* Bugfix (defect introduced: 1997): memory leak while forwarding
  mail with the local(8) delivery agent, in code that handles a
  cleanup(8) server error.

2.9.7

* Bugfix (introduced: Postfix 2.0): when myhostname is not listed in
  mydestination, the trivial-rewrite resolver may log "do not list in both
  mydestination and ". The fix is to re-resolve a domain-less address after
  adding $myhostname as the surrogate domain, so that it pops out with the
  right address-class label. Reported by Quanah Gibson-Mount.

* Bugfix (introduced: Postfix 2.3): don't reuse TCP connections when
  smtp_tls_policy_maps is specified. TLS policies may depend on the remote
  destination, but the Postfix <2.11 SMTP connection cache client does not
  distinguish between different destinations that resolve to the same IP
  address. Victor Duchovni. Found during Postfix 2.11 code maintenance.

* Bugfix (introduced: Postfix 2.2): don't reuse TCP connections when SASL
  authentication is enabled. SASL passwords may depend on the remote SMTP
  server hostname, but the Postfix <2.11 SMTP connection cache client does not
  distinguish between different hostnames that resolve to the same IP
  address. Found during Postfix 2.11 code maintenance.

4 files changed, 19 insertions, 18 deletions

diff --git a/mail/postfix/Makefile b/mail/postfix/Makefile
index ebbfbdd3bfa..a37791fc1e5 100644
--- a/mail/postfix/Makefile
+++ b/mail/postfix/Makefile
@@ -1,7 +1,6 @@
-# $NetBSD: Makefile,v 1.265 2013/06/07 16:30:25 jperkin Exp $
+# $NetBSD: Makefile,v 1.266 2013/09/06 14:08:18 taca Exp $
 
-DISTNAME=	postfix-2.9.6
-PKGREVISION=	4
+DISTNAME=	postfix-2.9.8
 CATEGORIES=	mail
 MASTER_SITES=	ftp://ftp.porcupine.org/mirrors/postfix-release/official/
 MASTER_SITES+=	http://postfix.it-austria.net/releases/official/
diff --git a/mail/postfix/distinfo b/mail/postfix/distinfo
index 4b07da34b18..7cf5128feaa 100644
--- a/mail/postfix/distinfo
+++ b/mail/postfix/distinfo
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.149 2013/02/26 19:56:18 garbled Exp $
+$NetBSD: distinfo,v 1.150 2013/09/06 14:08:18 taca Exp $
 
-SHA1 (postfix-2.9.6.tar.gz) = 9d7af8670fd13fd5e5290ff2e3f00d724178f0fb
-RMD160 (postfix-2.9.6.tar.gz) = e3148a42f246c4f54c82cf387b7467805edcd2cd
-Size (postfix-2.9.6.tar.gz) = 3767309 bytes
+SHA1 (postfix-2.9.8.tar.gz) = 392f09ecaf6ccb5e7e40d96d26f37f2602f6198f
+RMD160 (postfix-2.9.8.tar.gz) = a907383209f00210217b13e9eefc841666371e68
+Size (postfix-2.9.8.tar.gz) = 3769844 bytes
 SHA1 (patch-aa) = 2115fd7af5776a14fdbfc88a5ad3bc668a6762db
 SHA1 (patch-ag) = 60d752b6c8db971d92ca0017c63329ad446209c5
-SHA1 (patch-ai) = 1bd3682b74de11e5d420e453f3df088d965452d6
-SHA1 (patch-src_dns_dns__lookup.c) = 70147b43a683aa6fd99317d7bae36dfe9beb2d8d
+SHA1 (patch-ai) = 619bab1c9f5a30929086ff2414dca8cff6c4c37e
+SHA1 (patch-src_dns_dns__lookup.c) = 1e4e94f0929d351c5cdb606ac2f61c1e07224ca5
diff --git a/mail/postfix/patches/patch-ai b/mail/postfix/patches/patch-ai
index f1e50b0e785..4d3ce333fd8 100644
--- a/mail/postfix/patches/patch-ai
+++ b/mail/postfix/patches/patch-ai
@@ -1,11 +1,11 @@
-$NetBSD: patch-ai,v 1.28 2012/12/13 16:23:14 taca Exp $
+$NetBSD: patch-ai,v 1.29 2013/09/06 14:08:18 taca Exp $
 
 Make this pkgsrc friendly.
 Add support for NetBSD 5.x, NetBSD 6.x and DragonFly BSD.
 
---- makedefs.orig	2012-12-12 22:49:32.000000000 +0000
+--- makedefs.orig	2012-11-29 23:53:34.000000000 +0000
 +++ makedefs
-@@ -148,6 +148,8 @@ case "$SYSTEM.$RELEASE" in
+@@ -155,6 +155,8 @@ case "$SYSTEM.$RELEASE" in
  		;;
    FreeBSD.9*)	SYSTYPE=FREEBSD9
  		;;
@@ -14,7 +14,7 @@ Add support for NetBSD 5.x, NetBSD 6.x and DragonFly BSD.
    OpenBSD.2*)	SYSTYPE=OPENBSD2
  		;;
    OpenBSD.3*)	SYSTYPE=OPENBSD3
-@@ -166,6 +168,10 @@ case "$SYSTEM.$RELEASE" in
+@@ -173,6 +175,10 @@ case "$SYSTEM.$RELEASE" in
  		;;
     NetBSD.4*)	SYSTYPE=NETBSD4
  		;;
@@ -25,7 +25,7 @@ Add support for NetBSD 5.x, NetBSD 6.x and DragonFly BSD.
     BSD/OS.2*)	SYSTYPE=BSDI2
  		;;
     BSD/OS.3*)	SYSTYPE=BSDI3
-@@ -218,13 +224,6 @@ case "$SYSTEM.$RELEASE" in
+@@ -225,13 +231,6 @@ case "$SYSTEM.$RELEASE" in
  		esac
  		;;
     ULTRIX.4*)	SYSTYPE=ULTRIX4
@@ -39,7 +39,7 @@ Add support for NetBSD 5.x, NetBSD 6.x and DragonFly BSD.
  		for l in syslog resolv; do
  		    if [ -f /usr/local/lib/lib$l.a ]; then
  			SYSLIBS="$SYSLIBS -l$l"
-@@ -262,25 +261,8 @@ case "$SYSTEM.$RELEASE" in
+@@ -269,25 +268,8 @@ case "$SYSTEM.$RELEASE" in
  		esac;;
  		# Tested with RedHat 3.03 on 20020729.
      Linux.1*)	SYSTYPE=LINUX1
@@ -65,7 +65,7 @@ Add support for NetBSD 5.x, NetBSD 6.x and DragonFly BSD.
  		# GDBM locks the DBM .pag file after open. This breaks postmap.
  		# if [ -f /usr/include/gdbm-ndbm.h ]
  		# then
-@@ -291,7 +273,6 @@ case "$SYSTEM.$RELEASE" in
+@@ -298,7 +280,6 @@ case "$SYSTEM.$RELEASE" in
  		#     CCARGS="$CCARGS -DHAS_DBM -DPATH_NDBM_H='<gdbm/ndbm.h>'"
  		#     GDBM_LIBS=gdbm
  		# fi
@@ -73,7 +73,7 @@ Add support for NetBSD 5.x, NetBSD 6.x and DragonFly BSD.
  		for name in nsl resolv $GDBM_LIBS
  		do
  		    for lib in /usr/lib64 /lib64 /usr/lib /lib
-@@ -420,25 +401,13 @@ EOF
+@@ -427,25 +408,13 @@ EOF
  HP-UX.A.09.*)	SYSTYPE=HPUX9
  		SYSLIBS=-ldbm
  		CCARGS="$CCARGS -DMISSING_USLEEP"
diff --git a/mail/postfix/patches/patch-src_dns_dns__lookup.c b/mail/postfix/patches/patch-src_dns_dns__lookup.c
index 4949cde55f2..027ed3889e8 100644
--- a/mail/postfix/patches/patch-src_dns_dns__lookup.c
+++ b/mail/postfix/patches/patch-src_dns_dns__lookup.c
@@ -1,4 +1,6 @@
-$NetBSD: patch-src_dns_dns__lookup.c,v 1.1 2013/02/26 19:56:18 garbled Exp $
+$NetBSD: patch-src_dns_dns__lookup.c,v 1.2 2013/09/06 14:08:18 taca Exp $
+
+Fix runtime problem when mysql PKG_OPTIONS is enabled.
 
 --- src/dns/dns_lookup.c.orig	2013-02-26 19:34:50.000000000 +0000
 +++ src/dns/dns_lookup.c