diff --git a/curl.spec b/curl.spec
index 6825312..f42ff5b 100644
--- a/curl.spec
+++ b/curl.spec
@@ -240,7 +240,7 @@ export common_configure_opts="          \
     --with-gssapi                       \
     --with-libidn2                      \
     --with-nghttp2                      \
-    --with-ssl --with-ca-bundle=%{_sysconfdir}/pki/tls/certs/ca-bundle.crt \
+    --with-ssl --with-ca-bundle=%{_sysconfdir}/pki/ca-trust/extracted/pem/tls-ca-bundle.pem \
     --with-zsh-functions-dir"
 
 %global _configure ../configure
@@ -401,6 +401,9 @@ rm -f ${RPM_BUILD_ROOT}%{_mandir}/man1/mk-ca-bundle.1*
 %{_libdir}/libcurl.so.4.[0-9].[0-9].minimal
 
 %changelog
+* Tue Nov 05 2024 Jacek Migacz <jmigacz@redhat.com> - 8.9.1-6
+- use tls-ca-bundle.pem instead of ca-bundle.crt (RHEL-56966)
+
 * Tue Oct 29 2024 Troy Dawson <tdawson@redhat.com> - 8.9.1-5
 - Bump release for October 2024 mass rebuild:
   Resolves: RHEL-64018