Prereq: "3.3.10"
diff -ur --new-file /var/tmp/postfix-3.3.10/src/global/mail_version.h ./src/global/mail_version.h
--- /var/tmp/postfix-3.3.10/src/global/mail_version.h	2020-05-16 12:11:23.000000000 -0400
+++ ./src/global/mail_version.h	2020-06-14 16:42:58.000000000 -0400
@@ -20,8 +20,8 @@
   * Patches change both the patchlevel and the release date. Snapshots have no
   * patchlevel; they change the release date only.
   */
-#define MAIL_RELEASE_DATE	"20200516"
-#define MAIL_VERSION_NUMBER	"3.3.10"
+#define MAIL_RELEASE_DATE	"20200614"
+#define MAIL_VERSION_NUMBER	"3.3.11"
 
 #ifdef SNAPSHOT
 #define MAIL_VERSION_DATE	"-" MAIL_RELEASE_DATE
diff -ur --new-file /var/tmp/postfix-3.3.10/HISTORY ./HISTORY
--- /var/tmp/postfix-3.3.10/HISTORY	2020-05-16 16:25:00.000000000 -0400
+++ ./HISTORY	2020-05-31 15:47:35.000000000 -0400
@@ -23610,3 +23610,9 @@
 	session may cause a false 'lost connection' error for a
 	concurrent TLS session in the same tlsproxy process. File:
 	tlsproxy/tlsproxy.c.
+
+20200530
+
+	Bugfix (introduced: Postfix 3.1): "postfix tls deploy-server-cert"
+	did not handle a missing optional argument. File:
+	conf/postfix-tls-script
diff -ur --new-file /var/tmp/postfix-3.3.10/conf/postfix-tls-script ./conf/postfix-tls-script
--- /var/tmp/postfix-3.3.10/conf/postfix-tls-script	2017-02-18 20:58:20.000000000 -0500
+++ ./conf/postfix-tls-script	2020-05-30 10:37:04.000000000 -0400
@@ -777,7 +777,7 @@
 deploy_server_cert() {
     certfile=$1; shift
     keyfile=$1; shift
-    deploy=$1; shift
+    case $# in 0) deploy=;; *) deploy=$1; shift;; esac
 
     # Sets key_algo, key_param and cert_param
     check_key "$keyfile" || return 1