Showing posts with label XenApp. Show all posts
Showing posts with label XenApp. Show all posts

Sunday, 6 May 2012

SSL Error 61 on Citrix Access Gateway with Linux Client

I got the Linux client installed in the previous post, but got some SSL errors when trying to launch apps.
Our certificates are issued by Comodo, and the Linux Citrix client didn't support the root server for some reason.


  • I used Firefox to view the certificate by clicking on the blue part at the start of the URL.
  • Click 'More Information'
  • Click 'View certificate'
  • Click 'Details'
  • Click the Root Certificate at the top of the heirarchy
  • Click 'Export'
  • Save the certificate as type 'X.509 Certificate DER'
  • Save the certificate as 'RootCAName.crt' (Replace RootCAName with actual name)
  • Copy the certificate to /opt/Citrix/ICAClient/keystore/cacerts.
I have read that you can copy the CACerts from Firefox, but I haven't tried that.

Thanks to http://www.itswapshop.com/tutorial/how-install-citrix-receiver-linux-120-opensuse-121 for the pointers.

Citrix Receiver 12.1 on Ubuntu 12.04 x64


I've been playing with a few other operating systems since I hosed my Windows 7 install on my laptop.
We're a commited XenApp house, so I decided to take another stab at getting the Citrix receiver working on Unbuntu 12.04 LTS.

Here's what I did:

Followed the Ubuntu CitrixICAClientHowTo here:

  • https://help.ubuntu.com/community/CitrixICAClientHowTo

The above didn't quite work, so I modified it slightly:

  • Download the latest libmotif3 from:
    • http://nl.archive.ubuntu.com/ubuntu/pool/multiverse/o/openmotif
    • Currently libmotif3_2.2.3-4_i386.deb
  • Install libmotif3 using 'sudo dpkg -i libbmotif*i386.deb'
  • Link it using 'sudo ln -s /usr/lib/libXm.so.3 /usr/lib/libXm.so.4'
  • Download the Citrix Receiver 12.1 client and the USB support package:
    • http://www.citrix.com
    • Downloads
    • Citrix Receiver
    • Linux
    • Download the two x64 packages
  • Install both packages. This will generate errors:
    • The icaclient will complain of an error 2 in post configure
    • The ctxusb package will complain the the icaclient hasn't been configured
  • I found this fix to the error here:
    • http://forums.citrix.com/thread.jspa?threadID=306353
  • You need to edit icaclient.postinst:
  • 'sudo vi /var/lib/dpkg/info/icaclient.postinst'
  • Replace 
    • 'echo $Arch|grep "i[0-9]86 > /dev/null' with
    • 'echo $Arch|grep -iE "x86_64" > /dev/null'
  • Run 'sudo  dpkg --configure icaclient'
  • Run 'sudo dpkg --configure ctxusb'
  • Added a couple of extra packages as suggested:
    • 'sudo apt-get install flashplugin-installer'
    • 'sudo apt-get install curl'
  • Running 'sudo ./opt/Citrix/ICAClient/util/hdxcheck.sh' generated errors about missing libs
    • These missing libs all appear to be in /lib/i386-linux-gnu and the client works so...
  • I didn't run 'sudo apt-get install libmotif4:i386' as I have no plans to run wfcmgr.

Running through our CAG - I get some SSL errors - I'll explain how I fixed this in the next post

Please let me know if you have any luck or not with the above!