diff --git a/package/wpa_supplicant/files/wpa_supplicant.sh b/package/wpa_supplicant/files/wpa_supplicant.sh
index 192c90354085567bfdf6aaa43fa3703f5f9308f3..37ebef7a4b4a44f53f817f25cf1f9d37899a6875 100644
--- a/package/wpa_supplicant/files/wpa_supplicant.sh
+++ b/package/wpa_supplicant/files/wpa_supplicant.sh
@@ -32,6 +32,7 @@ wpa_supplicant_setup_vif() {
 			proto='WPA2'
 			key_mgmt='WPA-EAP'
 			config_get ca_cert "$vif" ca_cert
+			ca_cert="ca_cert=\"$ca_cert\""
 			case "$eap_type" in
 				tls|TLS)
 					pairwise='pairwise=CCMP'
@@ -50,12 +51,12 @@ wpa_supplicant_setup_vif() {
 					password="password=\"$password\""
 				;;
 			esac
+			eap_type="eap_type=$(echo $eap_type | tr 'a-z' 'A-Z')"
 		;;
 	esac
 	config_get ifname "$vif" ifname
 	config_get bridge "$vif" bridge
 	config_get ssid "$vif" ssid
-	eap_type=$(echo $eap_type | tr 'a-z' 'A-Z')
 	cat > /var/run/wpa_supplicant-$ifname.conf <<EOF
 network={
 	scan_ssid=1
@@ -65,8 +66,8 @@ network={
 	$passphrase
 	$pairwise
 	$group
-	eap=$eap_type
-	ca_cert="$ca_cert"
+	$eap_type
+	$ca_cert
 	$priv_key
 	$priv_key_pwd
 	$phase2