problems with running the ICAclient

[A Post]

Hello all,

 

I am running fedora 35 (just updated from 33).

In fedora33 I installed the ICAClient-rhel-21.9.0.25-0.x86_64.rpm (latest version).

The installation looks good.

 

I then go tho the website of my company, for example: teleworking.mycomp.com.

I login and give my OTP, I accept the conditions... I run the .ica file with "Citrix Workspace Engine"... On the taskbar I can see that the "Citrix Workspace" is started, but after 2 seconds the app is gone.

 

#logfile

Nov 05 15:56:44 ltdre.pet7.local citrix-wfica[15382]: Failed to connect with logd.
Nov 05 15:56:44 ltdre.pet7.local citrix-wfica[15382]: Value of cl_argv[0] : /opt/Citrix/ICAClient/wfica
Nov 05 15:56:44 ltdre.pet7.local citrix-wfica[15382]: Value of cl_argv[1] : -icaroot
Nov 05 15:56:44 ltdre.pet7.local citrix-wfica[15382]: Value of cl_argv[2] : /opt/Citrix/ICAClient
Nov 05 15:56:44 ltdre.pet7.local citrix-wfica[15382]: Value of cl_argv[3] : /home/dre/Downloads/RGVmYXVsdEFnZ3JlZ2F0aW9uR3JvdXAuXERlc2t0b3AgTlA-.ica
Nov 05 15:56:44 ltdre.pet7.local citrix-wfica[15382]: ReadINIConfig() exiting
Nov 05 15:56:44 ltdre.pet7.local citrix-wfica[15382]: Called NCSXMLanguageInit: language is EN UTF-8, codepage is 1252
Nov 05 15:56:44 ltdre.pet7.local citrix-wfica[15383]: Failed to connect with logd.
Nov 05 15:56:44 ltdre.pet7.local citrix-wfica[15383]: Value of cl_argv[0] : /opt/Citrix/ICAClient/wfica
Nov 05 15:56:44 ltdre.pet7.local citrix-wfica[15383]: Value of cl_argv[1] : -version
Nov 05 15:56:44 ltdre.pet7.local citrix-wfica[15382]: Can't create serial number file '/etc/icalicense/clientlicense' - 'File exists'
Nov 05 15:56:44 ltdre.pet7.local citrix-wfica[15382]: New serial number file ?? made by another client
Nov 05 15:56:45 ltdre.pet7.local citrix-wfica[15382]: WSTCP:resolve name ;40;STA0050568A0B3B;D6D3F20537C0CBC53272027D1A8C29D2
Nov 05 15:56:45 ltdre.pet7.local citrix-wfica[15382]: Cgp_SetCLSessionContext pSC is null
Nov 05 15:56:45 ltdre.pet7.local citrix-wfica[15382]: SSL/TLS handshake failed: The security certificate "teleworking.mycomp.com" could not be validated. (SSL provider code: unable to get local issuer certificate)                                                                                                           
Nov 05 15:56:45 ltdre.pet7.local citrix-wfica[15382]: Negotiation failed. sslretcode: 119
Nov 05 15:56:45 ltdre.pet7.local citrix-wfica[15382]: CGPclosesocket: could not close session 0x80000003
Nov 05 15:56:45 ltdre.pet7.local citrix-wfica[15382]: Invalid socket
 

#output cmdline

/opt/Citrix/ICAClient/wfica -icaroot /opt/Citrix/ICAClient ~/Downloads/RGVmYXVsdEFnZ3JlZ2F0aW9uR3JvdXAuXERlc2t0b3AgTlA-.ica
curl_easy_perform() failed: SSL peer certificate or SSH remote key was not OK

curl_easy_perform() failed: SSL peer certificate or SSH remote key was not OK

curl_easy_perform() failed: SSL peer certificate or SSH remote key was not OK

 

I have tried to get ride of the "SSL/TLS handshake failed:  /  unable to get local issuer certificate" messages....

Therefore I downloaded the pem certificate from www.mycomp.com to .../keystore/intcerts and I did the rehash command. The outcome looks good again (hashes and links are there).

 

And I tried the "LD_PRELOAD solution".

 

But still nothing works, does anyone have a solution?

 

Fedora 35

wayland

tried with firefox and chrome

 

 

[A Post]

nobody?

[Chenxiang Wang]

It seems to be a workspace app/receiver issue but not a Linux VDA issue.

Would you like to post this issue to the workspace app/receiver section?

[A Post]

sorry ?... I reposted my question.

[A Post]

FYI.

I have found the solution...

What i did, i installed the webserver_cert.pem and the webserver_cert_chain.pem in the /opt/Citrix/ICAClient/keystore/intcerts directory.

What i should do, instead of all certs (3) in one chain.pem file, the ICAClient apparently needs it seperate from each other. In my case in 4 seperate .pem files.

 

And dont forget to do the .../util/ctx_rehash command.

 

Greetings Andre