[ale] Citrix client on linux - how to fix missing CA certificates

[Scott Plante]

Nice tip! 

----- Original Message -----

From: "Jim Kinney" <jim.kinney at gmail.com> 
To: "Atlanta Linux Enthusiasts - Yes! We run Linux!" <ale at ale.org> 
Sent: Tuesday, October 18, 2016 12:35:12 PM 
Subject: [ale] Citrix client on linux - how to fix missing CA certificates 


Citrix client is sometime required for work. It allows a remote application that runs from a windows server to be usable without installtion on a Linux desktop. 


However, the Citrix receiver installation doesn't doesn't ship with much understanding of known CA certs and thus trows up error codes and blocks access. 


The fix is to install the entire cert chain for the connector into the citrix cacerts folder. Firefox makes this pretty easy. 


Log into the connector website " https://mycitrixsite.mywork.com " and click on the "lock" icon in the URL bar. Now open the certificate fully and get to the "details" tab. The top panel is called "Certificate Hierarchy" and the chain of certs you need Citrix to use. Select the top one, choose "Export" at the bottom, make sure it's X.509 (PEM) type and adjust the extension in the name from .crt to .pem. Repeat for all others in the chain. Make note of where they were put. Now copy those .pem file to the Citrix cacerts folder. On an RPM installation (and this seems to be a common location for all Citrix installs) it's /opt/Citrix/ICAClient/keystore/cacerts. 


If you have multiple sites, just repeat the cert export/copy process. 
-- 
James P. Kinney III Every time you stop a school, you will have to build a jail. What you gain at one end you lose at the other. It's like feeding a dog on his own tail. It won't fatten the dog. - Speech 11/23/1900 Mark Twain http://heretothereideas.blogspot.com/ 
_______________________________________________ 
Ale mailing list 
Ale at ale.org 
http://mail.ale.org/mailman/listinfo/ale 
See JOBS, ANNOUNCE and SCHOOLS lists at 
http://mail.ale.org/mailman/listinfo 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.ale.org/pipermail/ale/attachments/20161018/5e105796/attachment.html>