Arch Linux

Description:
I tried to establish a new WPA-EAP connection with networkmanager 0.9.8.0-2, but the connection failed with the following messages:

Mar 21 14:14:29 localhost kernel: [ 284.375574] wlan0: authenticate with 00:de:ad:be:ef:42
Mar 21 14:14:29 localhost kernel: [ 284.384404] wlan0: capabilities/regulatory prevented using AP HT/VHT configuration, downgraded
Mar 21 14:14:29 localhost kernel: [ 284.385442] wlan0: send auth to 00:de:ad:be:ef:42 (try 1/3)
Mar 21 14:14:29 localhost NetworkManager[914]: <info> (wlan0): supplicant interface state: scanning -> authenticating
Mar 21 14:14:29 localhost kernel: [ 284.387369] wlan0: authenticated
Mar 21 14:14:29 localhost kernel: [ 284.390019] wlan0: associate with 00:de:ad:be:ef:42 (try 1/3)
Mar 21 14:14:29 localhost kernel: [ 284.392749] wlan0: RX AssocResp from 00:de:ad:be:ef:42 (capab=0x431 status=0 aid=10)
Mar 21 14:14:29 localhost NetworkManager[914]: <info> (wlan0): supplicant interface state: authenticating -> associating
Mar 21 14:14:29 localhost kernel: [ 284.395292] wlan0: associated
Mar 21 14:14:29 localhost NetworkManager[914]: <info> (wlan0): supplicant interface state: associating -> associated
Mar 21 14:14:29 localhost wpa_supplicant[1036]: Successfully initialized wpa_supplicant
Mar 21 14:14:29 localhost wpa_supplicant[1036]: wlan0: SME: Trying to authenticate with 00:de:ad:be:ef:42 (SSID='HAWHof' freq=2462 MHz)
Mar 21 14:14:29 localhost wpa_supplicant[1036]: wlan0: Trying to associate with 00:de:ad:be:ef:42 (SSID='HAWHof' freq=2462 MHz)
Mar 21 14:14:29 localhost wpa_supplicant[1036]: wlan0: Associated with 00:de:ad:be:ef:42
Mar 21 14:14:29 localhost wpa_supplicant[1036]: wlan0: CTRL-EVENT-EAP-STARTED EAP authentication started
Mar 21 14:14:29 localhost wpa_supplicant[1036]: wlan0: CTRL-EVENT-EAP-PROPOSED-METHOD vendor=0 method=25
Mar 21 14:14:29 localhost wpa_supplicant[1036]: wlan0: CTRL-EVENT-EAP-METHOD EAP vendor 0 method 25 (PEAP) selected
Mar 21 14:14:29 localhost wpa_supplicant[1036]: TLS: Certificate verification failed, error 20 (unable to get local issuer certificate) depth 0 for '/CN=ad11.hof-university.de'
Mar 21 14:14:29 localhost wpa_supplicant[1036]: wlan0: CTRL-EVENT-EAP-TLS-CERT-ERROR reason=1 depth=0 subject='/CN=ad11.hof-university.de' err='unable to get local issuer certificate'
Mar 21 14:14:29 localhost wpa_supplicant[1036]: SSL: SSL3 alert: write (local SSL3 detected an error):fatal:unknown CA
Mar 21 14:14:29 localhost wpa_supplicant[1036]: OpenSSL: openssl_handshake - SSL_connect error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
Mar 21 14:14:29 localhost wpa_supplicant[1036]: wlan0: CTRL-EVENT-EAP-FAILURE EAP authentication failed
Mar 21 14:14:29 localhost wpa_supplicant[1036]: wlan0: Authentication with 00:de:ad:be:ef:42 timed out.
Mar 21 14:14:29 localhost wpa_supplicant[1036]: wlan0: CTRL-EVENT-DISCONNECTED bssid=00:de:ad:be:ef:42 reason=3 locally_generated=1
Mar 21 14:14:29 localhost wpa_supplicant[1036]: wlan0: CTRL-EVENT-SSID-TEMP-DISABLED id=0 ssid="HAWHof" auth_failures=1 duration=10

NetworkManager wrote the following config:

[ipv6]
method=link-local

[connection]
id=HAWHof
uuid=6e59a859-7cf1-43ed-b332-8d8b8c42c3d0
type=802-11-wireless

[802-11-wireless-security]
key-mgmt=wpa-eap

[802-11-wireless]
ssid=HAWHof
mode=infrastructure
mac-address=00:26:C7:35:78:E6
security=802-11-wireless-security

[802-1x]
eap=peap;
identity=ttomasini
anonymous-identity=ttomasini
phase2-auth=mschapv2
password-flags=1
system-ca-certs=true

[ipv4]
method=auto


When I changed system-ca-certs to false, it works like a charm.

Additional info:
* networkmanager 0.9.8.0-2
* config and log see above


Steps to reproduce:
* try to connect to an user authentification based WPA-EAP without certificates