Clean Ubuntu 20.04.1 LTS + Citrix Workspace 2009 => no connect, no error - TcpProxyChannel woe?

[R Emerson]

Hello,

 

I've been able to use Citrix Workspace on Ubuntu for several years with only minor tweaks and little trouble until recently.

 

Since yesterday I've been unable to connect but with no error reported - when I login via e.g. Firefox or Chrome, and run the .ica file, simply nothing happens. I can see wfica running but it exits after a short time. No error message is reported. It suddenly broke without warning and seems stuck so.

 

To try to isolate this, I've installed Ubuntu 20.04.1 LTS in VirtualBox clean and then installed Citrix Workspace 2009 icaclient_20.9.0.15_amd64.deb from:

 

https://www.citrix.com/en-gb/downloads/workspace-app/linux/workspace-app-for-linux-latest.html

Citrix Workspace app for Linux (x86_64)
Sep 15, 2020
SHA-256 - F336040271C9CBA815CC764CD183488E7E5567150C65A4802D5B489B50A9B5CE

As a side show, when I first try to connect to my desktop initially from this clean install (after accepting the license), I get an error:

SSL error

Contact your help desk with the following information: You have not chosen to trust "USERTrust RSA Certification Authority", the issuer of the server's security certificate (SSL error 61)

 

Google tells me to fix the certificates - fine:

 

https://support.citrix.com/article/CTX203362

https://askubuntu.com/questions/901448/citrix-receiver-error-1000119

 

I ran: /opt/Citrix/ICAClient/util/ctx_rehash then tried to connect again.

 

Now things get very interesting because... nothing happens. The "SSL error 61" is no longer appearing but neither is anything else. No desktop, no error box.

 

So, I set logging to "verbose" using /opt/Citrix/ICAClient/util/setlog then I can see wfica runs and appears to be connecting, which looks promising e.g.

2020-10-20 10:30:20.208 [TD] <P3218> citrix-wfica: SSL/TLS handshake complete
2020-10-20 10:30:20.208 [TD] <P3218> citrix-wfica: SSLconnect: direct handshake returned 0
2020-10-20 10:30:20.208 [PD] <P3218> citrix-wfica: CGPCore: CgpOpenSession entered.
...
2020-10-20 10:30:20.427 [PD] <P3218> citrix-wfica: CGPCore: Service Citrix.TcpProxyService bound as Service ID 1.
2020-10-20 10:30:20.427 [PD] <P3218> citrix-wfica: CGPCore: HandleBindRequestAndBindResponseForEndpoints:: CGP_BIND processed.
2020-10-20 10:30:20.427 [PD] <P3218> citrix-wfica: UPSessionAccepted
...
2020-10-20 10:30:20.427 [PD] <P3218> citrix-wfica: CGPCore: User Program successfully informed of session open request.
2020-10-20 10:30:20.427 [PD] <P3218> citrix-wfica: TCP Proxy Service: TcpProxySessionOpened entered.
2020-10-20 10:30:20.427 [PD] <P3218> citrix-wfica: TCP Proxy Service: TcpProxySessionOpened exiting with status 0x2.
2020-10-20 10:30:20.427 [PD] <P3218> citrix-wfica: CGPCore: CgpDataArrived exiting with status: 0x2.

 

But then we get stuck after TcpProxySessionOpened:

2020-10-20 10:30:20.478 [WD] <P3218> citrix-wfica: ----------------- SND 173 (0) ------------------
2020-10-20 10:30:20.478 [WD] <P3218> citrix-wfica: Packet length = 173, max = 1411, orig max = 1453
2020-10-20 10:30:20.478 [WD] <P3218> citrix-wfica: Send 1 packets on stream 0
2020-10-20 10:30:20.478 [WD] <P3218> citrix-wfica: SENDING PT MESSAGE BYTE 20
2020-10-20 10:30:20.478 [WD] <P3218> citrix-wfica: Sending packet on stream 0, of length 174
2020-10-20 10:30:20.478 [PD] <P3218> citrix-wfica: CGPGetCGPOutputBuffer: 0xf50e80 ==============
2020-10-20 10:30:20.478 [PD] <P3218> citrix-wfica: CGPsend: sending 177 bytes *********** 0xf73fd0
2020-10-20 10:30:20.478 [PD] <P3218> citrix-wfica: TCP Proxy Service: TcpProxyChannelSendData entered.
 
2020-10-20 10:30:20.478 [PD] <P3218> citrix-wfica: CGPCore: CgpWriteToChannel entered.
 
2020-10-20 10:30:20.478 [PD] <P3218> citrix-wfica: CGPCore: Channel 0: Writing out a CGP_DATA_REALTIME_WITH_ACK message with 1 ACKs.
 
2020-10-20 10:30:20.479 [PD] <P3218> citrix-wfica: CGPCore: CgpWriteToChannel exiting with status: 0x2.
 
2020-10-20 10:30:20.479 [PD] <P3218> citrix-wfica: TCP Proxy Service: TcpProxyChannelSendData exiting with status 0x2.
 
2020-10-20 10:30:20.479 [PD] <P3218> citrix-wfica: CGPsend: sent 177 bytes *********** 0xf73fd0
2020-10-20 10:30:20.479 [TD] <P3218> citrix-wfica: TcpSend: stream 0, ipLayer 12878336, bc=177, bs=177
2020-10-20 10:30:20.479 [WD] <P3218> citrix-wfica: OutBufFree: f73fa0, mem f73fd0
2020-10-20 10:30:20.479 [FRAME] <P3218> citrix-wfica: PdRFrame: DeviceWrite, bc 177, Status=0x0
2020-10-20 10:30:20.479 [WD] <P3218> citrix-wfica: exit
2020-10-20 10:30:21.476 [PD] <P3218> citrix-wfica: CGPrecv: got 6 bytes (err 11) (stream 0)
2020-10-20 10:30:21.476 [PD] <P3218> citrix-wfica: CGPCore: CgpDataArrived entered.
 
2020-10-20 10:30:21.477 [PD] <P3218> citrix-wfica: CGPFreeOutputBuffer: 0xf50e80 ~~~~~~~~~~~~~~
2020-10-20 10:30:21.477 [PD] <P3218> citrix-wfica: CGPCore: CgpDataArrived exiting with status: 0x2.
 
2020-10-20 10:30:21.477 [TD] <P3218> citrix-wfica: TcpRecv: ipLayer 0xc48200, AmountRead=6
2020-10-20 10:30:21.477 [TD] <P3218> citrix-wfica: TcpRecv: ipLayer 0xc48200, rc=0
2020-10-20 10:30:22.477 [PD] <P3218> citrix-wfica: CGPrecv: got 3 bytes (err 11) (stream 0)
2020-10-20 10:30:22.477 [PD] <P3218> citrix-wfica: CGPCore: CgpDataArrived entered.
...

 

This "CgpDataArrived exiting with statusL 0x2" block repeats once a second for the next 20 seconds or so, then the connection is shut down.

 

020-10-20 10:30:41.481 [TD] <P3218> citrix-wfica: TcpRecv: ipLayer 0xc48200, AmountRead=3
2020-10-20 10:30:41.481 [TD] <P3218> citrix-wfica: TcpRecv: ipLayer 0xc48200, rc=0
2020-10-20 10:30:42.483 [PD] <P3218> citrix-wfica: CGPrecv: got 3 bytes (err 11) (stream 0)
2020-10-20 10:30:42.483 [PD] <P3218> citrix-wfica: CGPCore: CgpDataArrived entered.
 
2020-10-20 10:30:42.483 [PD] <P3218> citrix-wfica: CGPCore: CgpDataArrived exiting with status: 0x2.
 
2020-10-20 10:30:42.483 [TD] <P3218> citrix-wfica: TcpRecv: ipLayer 0xc48200, AmountRead=3
2020-10-20 10:30:42.483 [TD] <P3218> citrix-wfica: TcpRecv: ipLayer 0xc48200, rc=0
2020-10-20 10:30:43.354 [PD] <P3218> citrix-wfica: CGPrecv: got 11 bytes (err 11) (stream 0)
2020-10-20 10:30:43.355 [PD] <P3218> citrix-wfica: CGPCore: CgpDataArrived entered.
 
2020-10-20 10:30:43.355 [PD] <P3218> citrix-wfica: TCP Proxy Service: TcpProxyChannelDataArrived entered.
 
2020-10-20 10:30:43.355 [PD] <P3218> citrix-wfica: Received 9 bytes of data on connection 0xf49890
2020-10-20 10:30:43.355 [PD] <P3218> citrix-wfica: TCP Proxy Service: TcpProxyChannelDataArrived exiting with status 0x2.
 
2020-10-20 10:30:43.355 [PD] <P3218> citrix-wfica: CGPCore: CgpDataArrived exiting with status: 0x2.
 
2020-10-20 10:30:43.355 [TD] <P3218> citrix-wfica: TcpRecv: ipLayer 0xc48200, AmountRead=11
2020-10-20 10:30:43.355 [TD] <P3218> citrix-wfica: TcpRecv: ipLayer 0xc48200, rc=0
2020-10-20 10:30:43.355 [WD] <P3218> citrix-wfica: PdRFrame: dLEN1H 00
2020-10-20 10:30:43.355 [FRAME] <P3218> citrix-wfica: PdFrame: non-buffered: bc 7
2020-10-20 10:30:43.355 [WD] <P3218> citrix-wfica: EmulProcessInput got 6 bytes on stream 0
2020-10-20 10:30:43.355 [WD] <P3218> citrix-wfica: Packet Received 24664, Processed at 24664
2020-10-20 10:30:43.355 [WD] <P3218> citrix-wfica: NEW ROUND TRIP RESULT = 150, RAW = 22837, SEND TIME = 30, RECEIVE_TIME = 10
2020-10-20 10:30:43.355 [WD] <P3218> citrix-wfica: Len = 6, Est = 0, OutSpd = 9000, InSpd = 10000
2020-10-20 10:30:43.355 [WD] <P3218> citrix-wfica: ----------------- RCV 5 (1) --------------------
2020-10-20 10:30:43.355 [WD] <P3218> citrix-wfica: channel = 63, length = 3, compressed = 0, completed = 2, Blocknr = 1
2020-10-20 10:30:43.355 [WD] <P3218> citrix-wfica: V3Reducer: ENTER chan = 63, inStr = 0, inp len = 3, max out len = 0, coder = 23
 
2020-10-20 10:30:43.355 [WD] <P3218> citrix-wfica: V3Reducer: EXIT bytes consumed = 3, inString = 0
 
2020-10-20 10:30:43.355 [WD] <P3218> citrix-wfica: WdIca: dTYPE 05
2020-10-20 10:30:43.355 [WD] <P3218> citrix-wfica: WdIca: dLEN1 01
2020-10-20 10:30:43.355 [WD] <P3218> citrix-wfica: TERMINATE : 1

 

Now obviously there is an errno 11 (EAGAIN) happening here. But on which resource and why, I do not know. So I am bit stuck on what the problem is exactly.

 

Has anyone seen this before or can offer any insight?

 

Any help much appreciated (before I give up and install Windows!)

[Marton Sigmond]

$ cp /usr/share/ca-certificates/mozilla/USERTrust_RSA_Certification_Authority.crt /tmp
$ openssl x509 -in /tmp/USERTrust_RSA_Certification_Authority.crt -out /tmp/USERTrust_RSA_Certification_Authority.pem -outform PEM
$ sudo mv /tmp/USERTrust_RSA_Certification_Authority.pem /opt/Citrix/ICAClient/keystore/cacerts/

Citrix Workspace used to work with crt files, but not anymore.

I ran the above commands in a terminal to convert crt to pem, and login works like a charm.

(Mine is a fresh install of Ubuntu Unity 22.10.)