Problems with Citrix Client on Linux?
Updated March 25th
Everytime I install the Linux Citrix Client it seems like I run into problems with SSL-Certificates. The message usually sounds like this:
You have not chosen to trust “Thawte Server CA”, the issuer of the server’s security cerfiticate (SSL error 61).
You might have another company listet as issuer on your server.
Anyway, let’s fix it.
Run the following command as a superuser, also known as root:
cp /usr/share/ca-certificates/mozilla/* /usr/lib/ICAClient/keystore/cacerts/
That’s it!
This assumes that the ICA Client is installed in the default directory. Also you need to have Mozilla Firefox a package called ca-certificates installed since we are using its certificats.
Please leave a comment if you found this useful.
If you enjoyed this post, please consider to leave a comment or subscribe to the feed and get future articles delivered to your feed reader.
Comments
Im using debian 2.6.24-1-amd64, installed the ca-certificates and copied the line, but same error message still.
I assume the ca-certificates are missing something, any idee
David: Strange, never seen that one. But I have only testet this on Ubuntu though. What distribution did you use?
Thanks for the great tip…. after a day search on the internet to get my Citrix ICA working, I have put in the command as discribed and gues what… it works!!!!
You have not chosen to trust “equifax secure global ebusiness ac-1″ ssl error 61.
This is what I had all the time and without any luck I added certificates (entrust_ssl_ac.cer) but didn’t work eather… very frustrating but luckely found your website….
Thanks again for a this….great job !!!!!
Richard
(Linux mint 4.0)
Firefox 2.0.0.13
I have been dealing with this same issue for about a month. I got to the point of giving up, but this article fixed my problem completely. I can now use Citrix on Ubuntu 8.04. Thanks.
I tried your tip here on a Ubuntu 8.04, but did not work, I received a message:
“You have not chosen to trust “UTN-USERFirst-Hardware”, the issuer of the server’s security certificate (SSL error 61)”
More tips anyone?
I have also followed the instructions on this site about installing the certificates etc. This has fixed my initial problem but now I get the SOCKS 5 handshake failed (SSL error 29) problem described by David Wright.
Does anyone else anywhere on the internet get this issue ????
I am running Ubuntu 7.04 and trying to connect to Citrix Presentation Server 4.5 via Secure Gateway using the Linux ICA client.
@Andy:
This is probably because UTN-USERFirst-Hardware isn’t a big and trusted supplier of certificates. However you can visit this site http://www.usertrust.com/cacerts/ and download the appropriate certificate file and save it in the directory mentioned earlier. No guarantee though :)
Thank you torh!
I downloaded the crt-file and saved it into the ICAClient/linuxx86/keystore/cacerts/ folder, now everything works! Thank you!
[...] Problems with Citrix on Linux: http://blog.torh.net/2008/02/29/problems-with-citrix-client-on-linux/ [...]
I have done all of the above, but when I click on the icon for the Citrix Application I get:
Client Error: The SOCKS 5 handshake failed (SSL error 29).
Any suggestions?