Citrix Error "You have not trusted certificate"

Question

I'm having a problem. I installed Citrix receiver icaclient 13.1.0.285639 in a machine running Ubuntu 14.04 LTS. I'm attempting to access my Citrix applications, but I get the following error:

`You have not chosen to trust 'RapidSSL CA', the issuer of the server's security certificate (SSL error 61).`

I have read multiple sites about how I can move the Mozilla certificates to the Citrix folder and attempted the proposed solution, however the problem persists. Currently I also have a Windows machine working perfectly with the server. Is there a way I can download the certificates from the Windows machine and install them in the Ubuntu machine?

Thanks!

Solution 1

You don't need to get them from Windows, Firefox has the certificates you need, so you can use them: e.g.

sudo ln -s /usr/share/ca-certificates/mozilla/* /opt/Citrix/ICAClient/keystore/cacerts/

sudo c_rehash /opt/Citrix/ICAClient/keystore/cacerts

I've argued this point with Citrix, but they seem to view the Linux version of the client as a tool for creators of thin client machines, and not as something that an actual user might install.

Solution 2

I've had this exact same issue with 13.4 and ubuntu 16.10

A lot of the answers I've found are nearly correct, but this worked for me after reading this guide: https://www.citrix.com/content/dam/citrix/en_us/documents/downloads/citrix-receiver/linux-oem-guide-13-1.pdf

sudo cp /usr/share/ca-certificates/mozilla/* /opt/Citrix/ICAClient/keystore/cacerts/

sudo rename 's/\.crt/\.pem/' /opt/Citrix/ICAClient/keystore/cacerts/*.crt

sudo /opt/Citrix/ICAClient/util/ctx_rehash

Comments

[Merlijn Sebrechts]

Possible duplicate of Certificate error when using Citrix Receiver

[javy888]

Thanks for your reply. I attempted the commands above, but my problem still persists. It continues with the exact same error. It's stupid from Citrix to believe that the Linux version would only be used by creators.

[James Lewis]

The solution above is detailed in several places, including this document:- help.ubuntu.com/community/CitrixICAClientHowTo

[James Lewis]

I have pasted my full notepad for installing Citrix Client on 64 bit Ubuntu here:- pastebin.com/waEzY0nw

[javy888]

I attempted all the instructions in the notepad, everything installed correctly, I moved the certificates from mozilla Firefox to the client's folder. However, the error persists. This is frustrating!

[James Lewis]

I have noticed that you are using a rapidSSL certificate, not the verisign G5 certificate that is usually the issue, I wonder if perhaps this is a different certificate that you could get hold of and copy into the /opt/Citrix/ICAClient/keystore/cacerts folder as well as the Firefox ones.

[javy888]

That is what I believed. I don't know where to find it. I have a Windows machine with access to Citrix and working properly. I'm curious that maybe the certificate is in it, however I have little idea of where the certificates are stored in the Windows platform. I searched the entire ICA folder and found nothing.

[James Lewis]

Perhaps it is a private cert created inside your organisation, can you perhaps ask the team responsible for deploying it on Windows if there is a cert they deploy with it?

[Vik]

WORKED. Thanks a lot. Accept this answer, please.