Reapply "Use /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"

This reverts commit 7e690cc429.

Resolves: RHEL-56966

curl.spec

@@ -1,7 +1,7 @@
 Summary: A utility for getting files from remote servers (FTP, HTTP, and others)
 Name: curl
 Version: 8.12.1
-Release: 5%{?dist}
+Release: 6%{?dist}
 License: curl
 Source0: https://curl.se/download/%{name}-%{version}.tar.xz
 Source1: https://curl.se/download/%{name}-%{version}.tar.xz.asc
@@ -254,7 +254,7 @@ export common_configure_opts="          \
     --with-gssapi                       \
     --with-libidn2                      \
     --with-nghttp2                      \
-    --with-ssl --with-ca-bundle=%{_sysconfdir}/pki/tls/certs/ca-bundle.crt \
+    --with-ssl --with-ca-bundle=%{_sysconfdir}/pki/ca-trust/extracted/pem/tls-ca-bundle.pem \
     --with-zsh-functions-dir"
 
 %global _configure ../configure
@@ -404,6 +404,9 @@ rm -f ${RPM_BUILD_ROOT}%{_libdir}/libcurl.la
 %{_libdir}/libcurl.so.4.[0-9].[0-9].minimal
 
 %changelog
+* Mon May 18 2026 Jacek Migacz <jmigacz@redhat.com> - 8.12.1-6
+- use tls-ca-bundle.pem instead of ca-bundle.crt (RHEL-56966)
+
 * Mon Dec 15 2025 Jacek Migacz <jmigacz@redhat.com> - 8.12.1-5
 - openssl: fix channel binding for ML-DSA and PQC certificates (RHEL-150993)