6

The following Error occures when trying to use Citrix (access SAP Training via Citrix) on Ubuntu 15.10:

Citrix Receiver
SSL error
Contact your helpdesk with th following inofrmation:
You have not chosen to trust "Symantec Class 3 Secure Server CA / G4", the issuer of ther server's security certificate (SSL error 61).

Citrix SSL Error Message

I installed Citrix according the Tutorial How to install Citrix Receiver icaclient in Ubuntu 14.04 LTS 64-bit The installation completed without any errors.

I also made sure that the certificates are there according to the CitrixXenAppPlugin - configure certificates:

enter image description here

Additionally I checked in Firefox if the certificates are known and even checked all marks (which where not checked before) (Under Settings -> Advanced -> Certificates):

Firefox Certificate settings

What am I missing?

2

I'm using Ubuntu 16.04.1, Firefox 50 and Citrix Receiver 13.4.

@thorsten-niehues solution didn't work for me unfortunately.

To solve the problem, I had to copy the .crt file to /opt/Citrix/ICAClient/keystore/cacerts

I was then able to connect to Citrix with Firefox and with Chrome without any problem.

1

Not sure what scripts are run in your Citrix install, but I believe you may still need to tell Ubuntu to trust the root CA - you can do that by running sudo dpkg-reconfigure ca-certificates from the directory where you have the .crt files for Citrix. mozilla has its own directory (/usr/share/ca-certificates/mozilla) and that may be where it is looking to show the list of trusted certs that you see in Firefox.

  • Thanks for the Information. Unfortunately it did not solve the Issue. In /opt/Citrix/ICAClient/keystore/cacerts are symlinks to /usr/share/ca-certificates/mozilla so I tried the command in both directories with no success :( I also tried copy the certificate in both directories with no success. – Thorsten Niehues Mar 16 '16 at 9:19
  • 1
    @ThorstenNiehues - sorry - been a while since I've done this on Ubuntu -- have you tried update-ca-certificates? Good manpage description for that command. – sletarte Mar 17 '16 at 13:20
0

OK thx to the hints from @sletarte here the solution:

  1. Place certificate to be trusted in /usr/local/share/ca-certificates
  2. Execute sudo update-ca-certificates
    You should see something line this:
    1 added, 0 removed; done. Running hooks in /etc/ca-certificates/update.d.... Adding debian:SymantecClass3SecureServerCA-G4.pem
  3. Use Google Chrome instead of Firefox

Not the answer you're looking for? Browse other questions tagged or ask your own question.