Concatenate your root and intermediates and use those. Beware of using a cert dir and the CA path as if done incorrectly then someone could authenticate just by having a cert signed with the same root CA as your RADIUS server
alan
--
Sent from my Android device with K-9 Mail. Please excuse my brevity.