bug: Cannot connect to 802.1x PEAP MSCHAPv2 wireless network

[grisu68]

Issue type

Feature not working as intended

Device

Redmi Note 9S
build.device: curtana
build.product: lineage_miatoll

crDroid version

crDroid 11

Exact version / Build date

build.display: lineage_miatoll-userdebug 15 AP3A.241105.008 eng.nobody.20241116.090326 dev-keys
build.fingerprint: Redmi/curtana_global/curtana:12/RKQ1.211019.001/V14.0.4.0.SJWMIXM:user/release-keys

Bug description

no connection to 802.1x PEAP MSCHAPv2 wireless network because "Cannot set pending cert"

Steps to reproduce

received WLAN name, userID and password
choose offered WLAN in Internet
configure WLAN
EAP method: PEAP
phase-2 authentication: MS-Chap v2
CA certificate: trust certificate at first use
identity:
anonymous identity:
password:
save it
status of the network changes several time to connecting
popup with a certificate appears "is this network trusted"
choose yes
status of the network changes several time to connecting
and ends with the status network saved
When opening the config again
CA certificate: changed " trust certificate at first use" to "use system certificate"
and the following is added
minimum version of TLS; TLS v1.0
online status of certificate: do not check
Domain is now requested: (retrieved from the shown certificate in the log)
status of the network changes again several time to connecting
and ends with the status network saved

Relevant log (logcat/build log)

01-12 15:21:24.872 D/WifiClientModeImpl[262922402:wlan0]( 1812): User accepted TOFU provided certificate
01-12 15:21:58.727 I/wpa_supplicant( 1501): wlan0: CTRL-EVENT-EAP-PEER-CERT depth=2 subject='/C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert Global Root G2' hash=cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f
01-12 15:21:58.728 I/wpa_supplicant( 1501): wlan0: CTRL-EVENT-EAP-PEER-CERT depth=1 subject='/C=US/O=DigiCert Inc/OU=www.digicert.com/CN=RapidSSL TLS RSA CA G1' hash=4422e963ee53cd58cc9f85cd40bf5ffec0095fdf1a154535661c1c06bcadc69b
01-12 15:21:58.730 I/wpa_supplicant( 1501): wlan0: CTRL-EVENT-EAP-PEER-CERT depth=0 subject='/CN=radius1.pt.lu' hash=51026c0238da3ec0ac1f88bcee1adf7413472935d106d3217373b3e9932c9d8c
01-12 15:21:58.731 I/wpa_supplicant( 1501): wlan0: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:radius1.pt.lu
01-12 15:21:58.731 D/WifiClientModeImpl( 1812): Cannot set pending cert.
01-12 15:21:58.734 D/WifiClientModeImpl( 1812): Cannot set pending cert.
01-12 15:21:58.740 D/WifiClientModeImpl( 1812): Cannot set pending cert.
01-12 15:21:58.760 I/wpa_supplicant( 1501): EAP-TLV: TLV Result - Failure

Screenshots or videos

Solution

storing the certifcates as certficate RapidSSL TLS RSA CA G1 is not shown yet under certficates.
retrieve the right domain from certificates

Additional context

No response

Acknowledgements

• I've checked device is officially supported (for device specific reports and not source related).
• I'm running latest version available on crdroid.net for this device
• I have searched the existing issues and this is a new and no duplicate or related to another open issue.
• I have written a short but informative title.
• I filled out all of the requested information in this issue properly.

[gwolf2u]

at this time code base is 11.1
for now this device has a really old 11.0 BETA build and can't check code changes
so for now this will get closed
please open another issue if this device will get and updated build