set path to ca-bundle.crt file and flag as a config file so the admin can override it

curl/curl.spec

@@ -103,6 +103,7 @@ AutoReqProv:  no
         --prefix=%{l_prefix} \
 %if "%{with_ssl}" == "yes"
         --with-ssl=%{l_prefix} \
+        --with-ca-bundle=%{l_prefix}/etc/curl/ca-bundle.crt \
 %else
         --without-ssl \
 %endif
@@ -123,7 +124,13 @@ AutoReqProv:  no
     rm -rf $RPM_BUILD_ROOT
     %{l_make} %{l_mflags} install AM_MAKEFLAGS="DESTDIR=$RPM_BUILD_ROOT"
     strip $RPM_BUILD_ROOT%{l_prefix}/bin/* >/dev/null 2>&1 || true
-    %{l_rpmtool} files -v -ofiles -r$RPM_BUILD_ROOT %{l_files_std}
+    %{l_rpmtool} files -v -ofiles -r$RPM_BUILD_ROOT \
+%if "%{with_ssl}" == "yes"
+        %{l_files_std} \
+        '%config %{l_prefix}/etc/curl/*'
+%else
+        %{l_files_std}
+%endif
 
 %files -f files