[CentOS] ca-bundle questions

Wed Sep 12 00:38:07 UTC 2018
Chuck Campbell <campbell at accelinc.com>

Sometime in Feb, yum updated something to do with ca-bundle. I didn't 
notice at the time, but it put these two files on my machine:

/etc/pki/tls/certs/ca-bundle.trust.crt.rpmnew and

/etc/pki/tls/certs/ca-bundle.crt.rpmnew

Both of those on the existing system are symbolic links

ca-bundle.trust.crt -> 
/etc/pki/ca-trust/extracted/openssl/ca-bundle-trust.crt and

ca-bundle.crt -> /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem

I'm not sure how exactly I'm supposed to use thes files to update those 
locations. one points to a .pem file, which the .rpmnew file is not, and 
there is no file of the corresponding name in the direstory pointed to 
by the link.

Shouldn't the rpm have "done the right thing", and put them where they 
belong?

-chuck

--