Linux - Software This forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum. |
Notices |
Welcome to LinuxQuestions.org, a friendly and active Linux Community.
You are currently viewing LQ as a guest. By joining our community you will have the ability to post topics, receive our newsletter, use the advanced search, subscribe to threads and access many other special features. Registration is quick, simple and absolutely free. Join our community today!
Note that registered members see fewer ads, and ContentLink is completely disabled once you log in.
Are you new to LinuxQuestions.org? Visit the following links:
Site Howto |
Site FAQ |
Sitemap |
Register Now
If you have any problems with the registration process or your account login, please contact us. If you need to reset your password, click here.
Having a problem logging in? Please visit this page to clear all LQ-related cookies.
Get a virtual cloud desktop with the Linux distro that you want in less than five minutes with Shells! With over 10 pre-installed distros to choose from, the worry-free installation life is here! Whether you are a digital nomad or just looking for flexibility, Shells can put your Linux machine on the device that you want to use.
Exclusive for LQ members, get up to 45% off per month. Click here for more info.
|
|
|
01-27-2014, 06:50 PM
|
#1
|
Member
Registered: Nov 2008
Location: Ireland
Distribution: *nix
Posts: 50
Rep:
|
Citrix ICA Client Certificate Issue - solution
Hi,
Posting this for others to use. I was attempting to use the Citrix Receiver Client and was getting the below error when trying to lauch apps.
You have not chosen to trust "VeriSign Class 3 Public Primary Certification Authority - G5", the issuer of the server's security certificate (SSL error 61)
Mostly the same as the guide here, but the path changed and was missing a step.
Quote:
In Firefox open the Secure Gateway site and click on the lock icon. Then click on More Information..., View Certificate and the tab Details. In my case there were three entries under Certificate Hierarchy: CA, AAA and the site name. Select CA and click Export..., select AAA and click Export... and finally select the site name and click Export....
|
Follow the guide above to export your certs. Rename all files with the extension .crt (I had 3 files). I exported from firefox as PEM certs.
Copy to the path /opt/Citrix/ICAClient/keystore/cacerts (you'll need root) and chmod 444.
Login to secure gateway and you should be good.
I have Receiver for Linux 13.0 ( http://www.citrix.com/downloads/citr...linux-130.html)
|
|
|
10-23-2014, 08:33 PM
|
#2
|
Member
Registered: Jul 2012
Location: Down Under
Distribution: Mint 19 Tara
Posts: 138
Rep:
|
Citrix SSL61 error
Quote:
Originally Posted by exactiv
Hi,
Posting this for others to use. I was attempting to use the Citrix Receiver Client and was getting the below error when trying to lauch apps.
You have not chosen to trust "VeriSign Class 3 Public Primary Certification Authority - G5", the issuer of the server's security certificate (SSL error 61)
Mostly the same as the guide here, but the path changed and was missing a step.
Follow the guide above to export your certs. Rename all files with the extension .crt (I had 3 files). I exported from firefox as PEM certs.
Copy to the path /opt/Citrix/ICAClient/keystore/cacerts (you'll need root) and chmod 444.
Login to secure gateway and you should be good.
I have Receiver for Linux 13.0 ( http://www.citrix.com/downloads/citr...linux-130.html)
|
Hi
I have same problem. Citrix was working until a few days ago when I am logged in but cannot access the XanApp Desktop or any of the apps. Have exported and copied file as per instructions quoted, but not sure whether I've got the correct file and also do not know what to do with instruction re chmod 444. Attaching a screenshot herewith. I tried exporting and copying "adapt.adelaide.edu.au" as well but that gave me an different error message (SSL 82 or something).
Any help would be greatly appreciated.Thanks in advance
|
|
|
10-24-2014, 02:34 AM
|
#3
|
Member
Registered: Nov 2008
Location: Ireland
Distribution: *nix
Posts: 50
Original Poster
Rep:
|
Hi there,
When you export the cert, the instruction to chmod 444 is to set permissions world readable (0444). From command line the command is chmod 444 /path/file
Try fixing the permission, if that fails post a few screen shots of the error message.
|
|
|
10-24-2014, 06:05 AM
|
#4
|
Member
Registered: Jul 2012
Location: Down Under
Distribution: Mint 19 Tara
Posts: 138
Rep:
|
Hi, thanks so much for the quick res[onse.
chmod 444 the QuoVadisGlobalSSKICAG2.crt and was unable to log in to this site. Replacing it with one without chmod got me back in. I do no understand why.
Anyway, chmod did not make any difference to access to the uni's XenApp Desktop or any of the apps. I was logged in without problems, it does not let me access my drive or use any of the Apps.
Attached are 3 screenshots that i hope will help explain the problem.
|
|
|
10-24-2014, 06:17 AM
|
#5
|
Member
Registered: Nov 2008
Location: Ireland
Distribution: *nix
Posts: 50
Original Poster
Rep:
|
Hi,
Ok, it looks like you need to export two certs. I'm writing this from an iPad so can't edit your screenshot to illustrate, but... let me try explain...
In your third image you have two certs available
QuoVadis...
and
adapt.......
Export BOTH of them, and place in the directory with 0444 permissions. See if that works. If you get different errors, post the screen shots.
|
|
|
10-24-2014, 07:05 AM
|
#6
|
Member
Registered: Jul 2012
Location: Down Under
Distribution: Mint 19 Tara
Posts: 138
Rep:
|
Hi there
exported both files as suggested and chmod444 both, copied to /opt/Citrix...directory. SSL error on trying to access adapt's desktop or apps generated an SSL error 86 this time. Also I could not get to this forum (see screenshot). after re-exporting the 2 certs without chmod allowed me to get back here, but the Adapt.adelaide.edu.au problem remained.
Thanks heaps
|
|
|
10-24-2014, 07:27 AM
|
#7
|
Member
Registered: Nov 2008
Location: Ireland
Distribution: *nix
Posts: 50
Original Poster
Rep:
|
Hi, not sure why placing the certs in the Citrix dir would affect general internet browsing, but hey, everyone's system is different.
I've just purchased a new computer and need to set this all up again for myself, so will go through the process and report back if anything has changed. I'll give it a go this evening if I have time.
|
|
|
11-08-2014, 05:52 AM
|
#8
|
Member
Registered: Nov 2008
Location: Ireland
Distribution: *nix
Posts: 50
Original Poster
Rep:
|
Hi there, just set up the whole thing from scratch using the latest Citrix ICA client. Worked fine once I'd placed the certs in the directory specified in my original post.
|
|
|
11-08-2014, 06:01 AM
|
#9
|
Member
Registered: Jul 2012
Location: Down Under
Distribution: Mint 19 Tara
Posts: 138
Rep:
|
Hi
i have tried to link the certs from Mozilla but it kept telling me that it failed to do so because the files existed.
do you need to uninstall the old citric (mine is version 12) before you install the new version ? (13 it is now, i think). I found a page http://phpraxis.wordpress.com/2014/0...ux-mint-redux/where it says you need to install some other files as wel.
It has been while since i installed the Citrix on my Mint13 (KDE). Can you give me some guidance as to how to go about installing the latest citrix version? my system is x86-64, so i would image I need to download the 64bit.
thanks very much
|
|
|
11-08-2014, 09:30 AM
|
#10
|
Member
Registered: Nov 2008
Location: Ireland
Distribution: *nix
Posts: 50
Original Poster
Rep:
|
Hi,
I uninstalled the old ICA client. There are no files required outside of the package supplied by Citrix. I downloaded the .deb file and left packagem manager install it. Just run the file and the package manager should take care of it. Place the certs in the diectory as specified above and you should be good.
I'm running version 13.1 of the ICA client.
So, install 13.1 and follow the instructions above. Let me know how you get on.
|
|
|
11-10-2014, 11:25 PM
|
#11
|
Member
Registered: Jul 2012
Location: Down Under
Distribution: Mint 19 Tara
Posts: 138
Rep:
|
Hi
I downloaded the icaclient 13.1.0.285639_amd64.deb but on instaling, I got this message:
Mint13KDE-LTS Downloads # dpkg -i icaclient_13.1.0.285639_amd64.deb
dpkg: error processing icaclient_13.1.0.285639_amd64.deb (--install):
parsing file '/var/lib/dpkg/tmp.ci/control' near line 7 package 'icaclient':
'Depends' field, reference to 'libc6': invalid architecture name 'i386': a value different from 'any' is currently not allowed
Errors were encountered while processing:
icaclient_13.1.0.285639_amd64.deb
Can you please tell me whether I should really be using the 32bit?
Thanks
|
|
|
11-11-2014, 02:16 AM
|
#12
|
Member
Registered: Nov 2008
Location: Ireland
Distribution: *nix
Posts: 50
Original Poster
Rep:
|
Execute this:
getconf LONG_BIT
and this
uname -a
and reply with output
|
|
|
11-11-2014, 05:07 AM
|
#13
|
Member
Registered: Jul 2012
Location: Down Under
Distribution: Mint 19 Tara
Posts: 138
Rep:
|
LONG_BIT showed 64
and the uname as well
dbMint17LTS dwhb # uname -p
x86_64
I have actually in the meantime updated my Mint13 to 17 but have not tried installed Citrix yet. Would you by any chance know if any extra depency files need to be installed? From Ubuntu's howto,looks like you do need extra files. Which version Mint are you running? if its Mint as well)
thanks
|
|
|
11-11-2014, 05:10 AM
|
#14
|
Member
Registered: Jul 2012
Location: Down Under
Distribution: Mint 19 Tara
Posts: 138
Rep:
|
Hi again
just tried installing citrix but won't go further. here's the output:
# dpkg -i icaclient_13.1.0.285639_amd64.deb
Selecting previously unselected package icaclient.
(Reading database ... 152725 files and directories currently installed.)
Preparing to unpack icaclient_13.1.0.285639_amd64.deb ...
Unpacking icaclient (13.1.0.285639) ...
Setting up icaclient (13.1.0.285639) ...
nspluginwrapper: no appropriate viewer found for /opt/Citrix/ICAClient/npica.so
Processing triggers for desktop-file-utils (0.22-1ubuntu1) ...
Processing triggers for mime-support (3.54ubuntu1) ...
it stopped processing here.
thanks
|
|
|
11-11-2014, 05:25 AM
|
#15
|
Member
Registered: Jul 2012
Location: Down Under
Distribution: Mint 19 Tara
Posts: 138
Rep:
|
Hi
everything's cool now. just linked mozilla certs and i'm back in action. Thanks or your prompt response to my calls for help. One thing is that the connection drops out quite regularly.
cheers
|
|
|
All times are GMT -5. The time now is 05:34 AM.
|
LinuxQuestions.org is looking for people interested in writing
Editorials, Articles, Reviews, and more. If you'd like to contribute
content, let us know.
|
Latest Threads
LQ News
|
|