I have prepared two test versions (.001 and .002) - available via
http://download.aixtools.net/testPrepare for testinga) download the two test versions from
http://download.aixtools.net/testb) copy the .pem file (the original removes it's copy, the test versions do not contain one)
root@x064:[/data/prj/aixtools/curl-7.52.1]ls -l /var/ssl
total 544
-rw-r--r-- 1 bin bin 263596 Jan 18 07:37 cacert-2016-11-02.pem
lrwxrwxrwx 1 root system 30 Jan 18 07:31 cacert.pem -> /var/ssl/cacert-2016-11-02.pem
drwxr-xr-x 2 root system 256 Jan 06 08:42 misc
-rw-r--r-- 1 root system 11485 Jan 06 08:42 openssl.cnf
root@x064:[/data/prj/aixtools/curl-7.52.1]rm /var/ssl/cacert.pem
root@x064:[/data/prj/aixtools/curl-7.52.1]cp -p /var/ssl/cacert-2016-11-02.pem /var/ssl/cacert.pem
root@x064:[/data/prj/aixtools/curl-7.52.1]ls -li /var/ssl
total 1064
262 -rw-r--r-- 1 bin bin 263596 Jan 18 07:37 cacert-2016-11-02.pem
315 -rw-r--r-- 1 bin bin 263596 Jan 18 07:37 cacert.pem
221 drwxr-xr-x 2 root system 256 Jan 06 08:42 misc
232 -rw-r--r-- 1 root system 11485 Jan 06 08:42 openssl.cnf
Install one test version, e.g. 002 with:
!! Notice that the complete filename is used (so that installp does not make/read .toc)
root@x064:[/data/prj/aixtools/curl-7.52.1]installp -d /data/httpd/test/aixtools.curl.7.52.1.0.I.002 -aF aixtools.curl.rte
And the copy .pem is still there!
root@x064:[/data/prj/aixtools/curl-7.52.1]ls -li /var/ssl
total 544
315 -rw-r--r-- 1 bin bin 263596 Jan 18 07:37 cacert.pem
221 drwxr-xr-x 2 root system 256 Jan 06 08:42 misc
232 -rw-r--r-- 1 root system 11485 Jan 06 08:42 openssl.cnf
Perform your test.
Install the other (again, full pathname)
root@x064:[/data/prj/aixtools/curl-7.52.1]installp -d /data/httpd/test/aixtools.curl.7.52.1.0.I.001 -aF aixtools.curl.rte
root@x064:[/data/prj/aixtools/curl-7.52.1]ls -li /var/ssl
total 544
315 -rw-r--r-- 1 bin bin 263596 Jan 18 07:37 cacert.pem
221 drwxr-xr-x 2 root system 256 Jan 06 08:42 misc
232 -rw-r--r-- 1 root system 11485 Jan 06 08:42 openssl.cnf
Test again.
If one works, but the other does not - depending on your time - I will make different setups to test. If they both work - I'll still be scratching my head why the first version did not work (unless their key needs something in the new pem file) - or maybe a bug now fixed!
Note: the other key difference is the test versions are 32-bit while the 'regular' version is 64-bit.
Thanks for your feedback!