From Bugzilla Helper:
User-Agent: Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.7.8) Gecko/20050513 Fedora/1.0.4-1.3.1 Firefox/1.0.4

Description of problem:
ca-bundle.pem is not listed as a configuration file, causing it to be replaced during upgrades of the openssl package.

Version-Release number of selected component (if applicable):
openssl-0.9.7a-42.1

How reproducible:
Always

Steps to Reproduce:
1. customize /usr/share/ssl/certs/ca-bundle.pem
2. install new version of openssl
3.
  

Actual Results:  ca-bundle.pem is replaced

Expected Results:  ca-bundle.pem should be untouched during an upgrade

Additional info:

Added this line to openssl.spec; it works the way I want it to now:

%config(noreplace) %{_datadir}/ssl/certs/ca-bundle.crt