Use /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem

- https://fedoraproject.org/wiki/Changes/dropingOfCertPemFile
- Fixes: rhbz#2337320

python-requests.spec

@@ -25,7 +25,7 @@ Patch:          system-certs.patch
 # This change is backported also into RHEL 9.4 (via CS)
 Patch:          support_IPv6_CIDR_in_no_proxy.patch
 
-# Fix crash on import if /etc/pki/tls/certs/ca-bundle.crt is missing
+# Fix crash on import if /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem is missing
 # https://bugzilla.redhat.com/show_bug.cgi?id=2297632
 # https://github.com/psf/requests/pull/6781
 # Note: this can be replaced by https://github.com/psf/requests/pull/6767

system-certs.patch

@@ -43,14 +43,14 @@ index be422c3..9aee713 100644
  environment, you can change the definition of where() to return a separately
  packaged CA bundle.
 +
-+This Fedora-patched package returns "/etc/pki/tls/certs/ca-bundle.crt" provided
++This Fedora-patched package returns "/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem" provided
 +by the ca-certificates RPM package.
  """
 -from certifi import where
 +
 +def where():
 +    """Return the absolute path to the system CA bundle."""
-+    return '/etc/pki/tls/certs/ca-bundle.crt'
++    return '/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem'
  
  if __name__ == "__main__":
      print(where())