ca-bundle questions

Sometime in Feb, yum updated something to do with ca-bundle. I didn't
notice at the time, but it put these two files on my machine:

/etc/pki/tls/certs/ and


Both of those on the existing system are symbolic links ->
/etc/pki/ca-trust/extracted/openssl/ca-bundle-trust.crt and

ca-bundle.crt -> /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem

I'm not sure how exactly I'm supposed to use thes files to update those
locations. one points to a .pem file, which the .rpmnew file is not, and
there is no file of the corresponding name in the direstory pointed to
by the link.

Shouldn't the rpm have "done the right thing", and put them where they