Wifi wpa2 enterprise EAP-TLS client

Hello
help me please
I need to connect to Wifi, wpa2 enterprise EAP-TLS client
wpad-mini I have already remove, and installed the wpad
Here is my config:

config wifi-device 'radio0'
        option type 'ralink'
        option variant 'mt7628'
        option country 'TW'
        option hwmode '11g'
        option htmode 'HT40'
        option channel 'auto'

config wifi-iface 'ap'
        option device 'radio0'
        option mode 'ap'
        option network 'lan'
        option ifname 'ra0'
        option encryption 'none'
        option seq '1'
        option ssid 'SPA_TEST'

config wifi-iface 'sta'
        option device 'radio0'
        option mode 'sta'
        option network 'wan'
        option ifname 'apcli0'
        option led 'mediatek:orange:wifi'
        option encryption 'wpa2'
        option ssid 'XXXXXX'
        option disabled '0'
        option eap_type 'tls'
        option identity 'krz-a-ech01'
        option ca_cert '/etc/config/krz_ca.crt'
        option client_cert '/etc/config/krz.crt'
        option priv_key='/etc/config/encrypted_krz.key'
        option priv_key_passwd='xxxxxxx'

My device: Linkit smart 7688
mylinkit | OpenWrt Chaos Calmer 15.05.1 r49203 | Load: 0.96 0.28 0.13
What am I doing wrong?

OpenWrt 15.05 is ancient and unsupported.
Please update to current 21.02 or 22.03-snapshot.

Unfortunately, I can not update the system, then the main program does not work.It works with I/O ports at a low level. And after the update it stops working.