From Bugzilla Helper: User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.6) Gecko/20040113 Description of problem: I have set up my own CA for internal use and need to add my CA key to ca-bundle.crt so our clients can connect properly. However, upgrading openssl will wipe out or CA key from ca-bundle.crt because it is not a config file. I suggest either making ca-bundle.crt a config file or providing some other way to include local CA certs. Version-Release number of selected component (if applicable): openssl-0.9.7a-34 How reproducible: Always Steps to Reproduce: 1.Add a cert to ca-bundle.crt 2.Upgrade (rpm -U) openssl 3. Additional info: