Cannot open server URL - This site can't provide a secure connection

[URON]

Hi all,

 

I'm not able to add our Citrix server URL in Citrix Receiver app, below is the error, can you please advise to fix this issue?

ERROR:
This site can't provide a secure connection

OUR CITRIX SERVER URL uses an unsupported protocol.
ERR_SSL_VERSION_OR_CIPHER_MISMATCH
Unsupported protocol
The client and server don't support a common SSL protocol version or cipher suite.

[CarlStalhood]

If you are using Receiver instead of Workspace app, then it's possible that your old Receiver doesn't support the newer ciphers. Try upgrading to Workspace app.

[URON]

2 minutes ago, Carl Stalhood1709151912 said:

If you are using Receiver instead of Workspace app, then it's possible that your old Receiver doesn't support the newer ciphers. Try upgrading to Workspace app.

Yes, I already tried to use the Citrix workspace app last version but still the same the issue.

[Jeff Riechers]

Look at the certificate on that site to see what Ciphers it uses.  It could be too restrictive too a lower cert level or a higher level than the client supports.

 

Is it a self-signed certificate?  Does the endpoint have that root certificate?

[URON]

On 4/18/2023 at 6:09 PM, Jeff Riechers1709152667 said:

Look at the certificate on that site to see what Ciphers it uses.  It could be too restrictive too a lower cert level or a higher level than the client supports.

 

Is it a self-signed certificate?  Does the endpoint have that root certificate?

Hi Jeff,

Please see the certificate on the site as screenshot below

 

We don't add site binding for port 8080. If I try to bind for port 443 it will stop the IIS Server and then Citrix site will become unavailable to the users

 

the site binding is only done through Citrix Gateway only 

 

 

[CarlStalhood]

I don't think Secure Gateway supports modern ciphers. You might have to switch to Citrix Gateway on a NetScaler. Or use an old Receiver that still supports legacy ciphers.

[URON]

21 minutes ago, Carl Stalhood1709151912 said:

I don't think Secure Gateway supports modern ciphers. You might have to switch to Citrix Gateway on a NetScaler. Or use an old Receiver that still supports legacy ciphers.

Hi Carl,

You might have to switch to Citrix Gateway on a NetScaler -> You mean we should use VPN connection to connect to use Citrix?

Or use an old Receiver that still supports legacy ciphers -> Can you please give me the version of the old Receiver app then I will download it to try?

 

Thanks.