wpa_supplicant can't find hidden SSID

[planetf1]

I' running wpa supplicant 6.8.1 within Fedora rawhide.I'm struggling to 
connect to a Cisco AP
  - serving multiple SSIDs
  - with the one I want to connect to hidden (Grrr.. I so hate that but 
can't control it)
  - running LEAP & WPA2 EAP-TLS with digital certs
  - with multiple AP's

Under both iwl3945 (Intel 3945abg) drivers & ath5k (ar5004x I think.. 
.card now broken :-( ) this fails to associate. I'm using iwl3945 right 
now with no extra parms in modprobe.d. Did add some debug but either got 
info that didn't seem helpful, or data for every single packet...

INitially using NM, but fails under wpa-supplicant standalone also

Error is basically that I cannot associate with errors like:
: 00:1b:90:74:34:40 ssid='' wpa_ie_len=24 rsn_ie_len=20 caps=0x11
    skip - SSID mismatch
1: 00:1b:90:75:db:60 ssid='' wpa_ie_len=24 rsn_ie_len=20 caps=0x11
    skip - SSID mismatch
2: 00:1b:90:74:35:c0 ssid='' wpa_ie_len=24 rsn_ie_len=20 caps=0x11
    skip - SSID mismatch
Try to find non-WPA AP
0: 00:1b:90:74:34:40 ssid='' wpa_ie_len=24 rsn_ie_len=20 caps=0x11
    skip - SSID mismatch
1: 00:1b:90:75:db:60 ssid='' wpa_ie_len=24 rsn_ie_len=20 caps=0x11
    skip - SSID mismatch
2: 00:1b:90:74:35:c0 ssid='' wpa_ie_len=24 rsn_ie_len=20 caps=0x11
    skip - SSID mismatch

scan results are similar to this (one out of four I can see right now)
          Cell 02 - Address: 00:1B:90:74:34:40
                     ESSID:""
                     Mode:Master
                     Channel:11
                     Frequency:2.462 GHz (Channel 11)
                     Quality=74/100  Signal level:-60 dBm  Noise 
level=-127 dBm
                     Encryption key:on
                     IE: Unknown: 000100
                     IE: Unknown: 010882848B0C12961824
                     IE: Unknown: 03010B
                     IE: Unknown: 050401020000
                     IE: Unknown: 0706474249010D17
                     IE: Unknown: 2A0100
                     IE: IEEE 802.11i/WPA2 Version 1
                         Group Cipher : WEP-104
                         Pairwise Ciphers (1) : CCMP
                         Authentication Suites (1) : 802.1x
                     IE: Unknown: 32043048606C
                     IE: Unknown: 
851E030089001F00FF0319006875722D61702D61346C36300000000001000027
                     IE: WPA Version 1
                         Group Cipher : WEP-104
                         Pairwise Ciphers (1) : TKIP
                         Authentication Suites (1) : 802.1x
                     IE: Unknown: DD06004096010100
                     IE: Unknown: DD050040960305
                     IE: Unknown: DD050040960B09
                     IE: Unknown: DD050040961401
                     IE: Unknown: 
DD180050F2020101810003A5000027A500004254BC0062436600
                     Bit Rates:1 Mb/s; 2 Mb/s; 5.5 Mb/s; 6 Mb/s; 9 Mb/s
                               11 Mb/s; 12 Mb/s; 18 Mb/s; 24 Mb/s; 36 Mb/s
                               48 Mb/s; 54 Mb/s
                     Extra:tsf=000000bd8f08518c
                     Extra: Last beacon: 133ms ago

config file is

ctrl_interface=/var/run/wpa_supplicant
ap_scan=1
eapol_version=1
fast_reauth=1
network={
         ssid="MYSSID"
         scan_ssid=1
         key_mgmt=WPA-EAP
         pairwise=CCMP TKIP
         group=WEP104
         eap=TLS
         identity="MY EMAIL"
         ca_cert="CACERT.pem"
         client_cert="MYCERT.cer"
         private_key="MYKEY.pem"
         private_key_passwd="MYPASSWORD"
         eapol_flags=3
         priority=100
}

I'm guessing there is some issue here with the IE parsing and the 
complexity of multiple SSIDs with hiding involved combined with 
security. Eeek.

This *used* to work at least some of the time under F10 & earlier wpa 
supplicant version, but don't have exact numbers. Also the APs could 
have changed configuration.

WPA2-PSK AES is working just nice.

ap_scan 0, 2 don't help either.


Note -- previously raised on fedora bugzilla at 
https://bugzilla.redhat.com/show_bug.cgi?id=489701 as an NM issue

Thanks for any ideas...
Nigel.