LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Software
User Name
Password
Linux - Software This forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum.

Notices


Reply
  Search this Thread
Old 01-27-2014, 06:50 PM   #1
exactiv
Member
 
Registered: Nov 2008
Location: Ireland
Distribution: *nix
Posts: 50

Rep: Reputation: 15
Lightbulb Citrix ICA Client Certificate Issue - solution


Hi,

Posting this for others to use. I was attempting to use the Citrix Receiver Client and was getting the below error when trying to lauch apps.

You have not chosen to trust "VeriSign Class 3 Public Primary Certification Authority - G5", the issuer of the server's security certificate (SSL error 61)



Mostly the same as the guide here, but the path changed and was missing a step.

Quote:
In Firefox open the Secure Gateway site and click on the lock icon. Then click on More Information..., View Certificate and the tab Details. In my case there were three entries under Certificate Hierarchy: CA, AAA and the site name. Select CA and click Export..., select AAA and click Export... and finally select the site name and click Export....
Follow the guide above to export your certs. Rename all files with the extension .crt (I had 3 files). I exported from firefox as PEM certs.

Copy to the path /opt/Citrix/ICAClient/keystore/cacerts (you'll need root) and chmod 444.

Login to secure gateway and you should be good.

I have Receiver for Linux 13.0 (http://www.citrix.com/downloads/citr...linux-130.html)
 
Old 10-23-2014, 08:33 PM   #2
dwhb
Member
 
Registered: Jul 2012
Location: Down Under
Distribution: Mint 19 Tara
Posts: 138

Rep: Reputation: Disabled
Thumbs up Citrix SSL61 error

Quote:
Originally Posted by exactiv View Post
Hi,

Posting this for others to use. I was attempting to use the Citrix Receiver Client and was getting the below error when trying to lauch apps.

You have not chosen to trust "VeriSign Class 3 Public Primary Certification Authority - G5", the issuer of the server's security certificate (SSL error 61)



Mostly the same as the guide here, but the path changed and was missing a step.



Follow the guide above to export your certs. Rename all files with the extension .crt (I had 3 files). I exported from firefox as PEM certs.

Copy to the path /opt/Citrix/ICAClient/keystore/cacerts (you'll need root) and chmod 444.

Login to secure gateway and you should be good.

I have Receiver for Linux 13.0 (http://www.citrix.com/downloads/citr...linux-130.html)
Hi
I have same problem. Citrix was working until a few days ago when I am logged in but cannot access the XanApp Desktop or any of the apps. Have exported and copied file as per instructions quoted, but not sure whether I've got the correct file and also do not know what to do with instruction re chmod 444. Attaching a screenshot herewith. I tried exporting and copying "adapt.adelaide.edu.au" as well but that gave me an different error message (SSL 82 or something).

Any help would be greatly appreciated.Thanks in advance
Attached Thumbnails
Click image for larger version

Name:	QuoVadisGlobalSSL_ICA_G2.png
Views:	139
Size:	186.6 KB
ID:	16734  
 
Old 10-24-2014, 02:34 AM   #3
exactiv
Member
 
Registered: Nov 2008
Location: Ireland
Distribution: *nix
Posts: 50

Original Poster
Rep: Reputation: 15
Hi there,

When you export the cert, the instruction to chmod 444 is to set permissions world readable (0444). From command line the command is chmod 444 /path/file

Try fixing the permission, if that fails post a few screen shots of the error message.
 
Old 10-24-2014, 06:05 AM   #4
dwhb
Member
 
Registered: Jul 2012
Location: Down Under
Distribution: Mint 19 Tara
Posts: 138

Rep: Reputation: Disabled
Hi, thanks so much for the quick res[onse.

chmod 444 the QuoVadisGlobalSSKICAG2.crt and was unable to log in to this site. Replacing it with one without chmod got me back in. I do no understand why.

Anyway, chmod did not make any difference to access to the uni's XenApp Desktop or any of the apps. I was logged in without problems, it does not let me access my drive or use any of the Apps.

Attached are 3 screenshots that i hope will help explain the problem.
Attached Thumbnails
Click image for larger version

Name:	citrix02.jpg
Views:	153
Size:	60.2 KB
ID:	16743   Click image for larger version

Name:	citrix01.png
Views:	129
Size:	246.8 KB
ID:	16744   Click image for larger version

Name:	citrix03.png
Views:	136
Size:	196.0 KB
ID:	16745  
 
Old 10-24-2014, 06:17 AM   #5
exactiv
Member
 
Registered: Nov 2008
Location: Ireland
Distribution: *nix
Posts: 50

Original Poster
Rep: Reputation: 15
Hi,

Ok, it looks like you need to export two certs. I'm writing this from an iPad so can't edit your screenshot to illustrate, but... let me try explain...

In your third image you have two certs available

QuoVadis...
and
adapt.......

Export BOTH of them, and place in the directory with 0444 permissions. See if that works. If you get different errors, post the screen shots.
 
Old 10-24-2014, 07:05 AM   #6
dwhb
Member
 
Registered: Jul 2012
Location: Down Under
Distribution: Mint 19 Tara
Posts: 138

Rep: Reputation: Disabled
Hi there
exported both files as suggested and chmod444 both, copied to /opt/Citrix...directory. SSL error on trying to access adapt's desktop or apps generated an SSL error 86 this time. Also I could not get to this forum (see screenshot). after re-exporting the 2 certs without chmod allowed me to get back here, but the Adapt.adelaide.edu.au problem remained.

Thanks heaps
Attached Thumbnails
Click image for larger version

Name:	errorSSL86.jpg
Views:	81
Size:	44.5 KB
ID:	16746   Click image for larger version

Name:	error-forum-login.png
Views:	45
Size:	7.4 KB
ID:	16747  
 
Old 10-24-2014, 07:27 AM   #7
exactiv
Member
 
Registered: Nov 2008
Location: Ireland
Distribution: *nix
Posts: 50

Original Poster
Rep: Reputation: 15
Hi, not sure why placing the certs in the Citrix dir would affect general internet browsing, but hey, everyone's system is different.

I've just purchased a new computer and need to set this all up again for myself, so will go through the process and report back if anything has changed. I'll give it a go this evening if I have time.
 
Old 11-08-2014, 05:52 AM   #8
exactiv
Member
 
Registered: Nov 2008
Location: Ireland
Distribution: *nix
Posts: 50

Original Poster
Rep: Reputation: 15
Hi there, just set up the whole thing from scratch using the latest Citrix ICA client. Worked fine once I'd placed the certs in the directory specified in my original post.
 
Old 11-08-2014, 06:01 AM   #9
dwhb
Member
 
Registered: Jul 2012
Location: Down Under
Distribution: Mint 19 Tara
Posts: 138

Rep: Reputation: Disabled
Hi
i have tried to link the certs from Mozilla but it kept telling me that it failed to do so because the files existed.

do you need to uninstall the old citric (mine is version 12) before you install the new version ? (13 it is now, i think). I found a page http://phpraxis.wordpress.com/2014/0...ux-mint-redux/where it says you need to install some other files as wel.

It has been while since i installed the Citrix on my Mint13 (KDE). Can you give me some guidance as to how to go about installing the latest citrix version? my system is x86-64, so i would image I need to download the 64bit.

thanks very much
 
Old 11-08-2014, 09:30 AM   #10
exactiv
Member
 
Registered: Nov 2008
Location: Ireland
Distribution: *nix
Posts: 50

Original Poster
Rep: Reputation: 15
Hi,

I uninstalled the old ICA client. There are no files required outside of the package supplied by Citrix. I downloaded the .deb file and left packagem manager install it. Just run the file and the package manager should take care of it. Place the certs in the diectory as specified above and you should be good.

I'm running version 13.1 of the ICA client.

So, install 13.1 and follow the instructions above. Let me know how you get on.
 
Old 11-10-2014, 11:25 PM   #11
dwhb
Member
 
Registered: Jul 2012
Location: Down Under
Distribution: Mint 19 Tara
Posts: 138

Rep: Reputation: Disabled
Hi
I downloaded the icaclient 13.1.0.285639_amd64.deb but on instaling, I got this message:
Mint13KDE-LTS Downloads # dpkg -i icaclient_13.1.0.285639_amd64.deb
dpkg: error processing icaclient_13.1.0.285639_amd64.deb (--install):
parsing file '/var/lib/dpkg/tmp.ci/control' near line 7 package 'icaclient':
'Depends' field, reference to 'libc6': invalid architecture name 'i386': a value different from 'any' is currently not allowed
Errors were encountered while processing:
icaclient_13.1.0.285639_amd64.deb

Can you please tell me whether I should really be using the 32bit?
Thanks
 
Old 11-11-2014, 02:16 AM   #12
exactiv
Member
 
Registered: Nov 2008
Location: Ireland
Distribution: *nix
Posts: 50

Original Poster
Rep: Reputation: 15
Execute this:
getconf LONG_BIT

and this
uname -a

and reply with output
 
Old 11-11-2014, 05:07 AM   #13
dwhb
Member
 
Registered: Jul 2012
Location: Down Under
Distribution: Mint 19 Tara
Posts: 138

Rep: Reputation: Disabled
LONG_BIT showed 64
and the uname as well
dbMint17LTS dwhb # uname -p
x86_64

I have actually in the meantime updated my Mint13 to 17 but have not tried installed Citrix yet. Would you by any chance know if any extra depency files need to be installed? From Ubuntu's howto,looks like you do need extra files. Which version Mint are you running? if its Mint as well)

thanks
 
Old 11-11-2014, 05:10 AM   #14
dwhb
Member
 
Registered: Jul 2012
Location: Down Under
Distribution: Mint 19 Tara
Posts: 138

Rep: Reputation: Disabled
Hi again
just tried installing citrix but won't go further. here's the output:

# dpkg -i icaclient_13.1.0.285639_amd64.deb
Selecting previously unselected package icaclient.
(Reading database ... 152725 files and directories currently installed.)
Preparing to unpack icaclient_13.1.0.285639_amd64.deb ...
Unpacking icaclient (13.1.0.285639) ...
Setting up icaclient (13.1.0.285639) ...
nspluginwrapper: no appropriate viewer found for /opt/Citrix/ICAClient/npica.so
Processing triggers for desktop-file-utils (0.22-1ubuntu1) ...
Processing triggers for mime-support (3.54ubuntu1) ...

it stopped processing here.

thanks
 
Old 11-11-2014, 05:25 AM   #15
dwhb
Member
 
Registered: Jul 2012
Location: Down Under
Distribution: Mint 19 Tara
Posts: 138

Rep: Reputation: Disabled
Hi
everything's cool now. just linked mozilla certs and i'm back in action. Thanks or your prompt response to my calls for help. One thing is that the connection drops out quite regularly.

cheers
 
  


Reply

Tags
certificate, citrix, error message


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Citrix ICA client 64-bit gargamel Slackware 5 10-13-2012 08:28 AM
[SOLVED] Ubuntu 11.04 and Citrix ICA client geraldjean Linux - Security 5 05-16-2011 08:58 PM
Ubuntu 7.10 Citrix ICA Client Issues (2) jordo2323 Linux - Software 8 08-08-2008 06:30 AM
Citrix ICA Client - Weird Connection Issue Caputs411 Linux - General 2 03-26-2005 06:33 PM
Installing Citrix ICA client Cypionate Fedora 5 06-24-2004 07:26 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Software

All times are GMT -5. The time now is 05:34 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration