Hi,
I’ve found my answer myself after some hours of debugging tonight.
If someone else get this problem, its the ca.pem file expantion that not work properly so that openssl verify cannot work.
I solved the problem by hardcoding the location of the ca.pem file in the eap.cfg file openssl verify command.
I also solved my tls version problem on windows 7 using this link
Windows 7 was using tls1.0 instead of the 1.2 version that is more secure. Doing those changes to the registry force it to use tls1.2 by disabling 1.0 and 1.1 .