Jump to content
Updated Privacy Statement

Stian Viskjer

Members
  • Posts

    10
  • Joined

  • Last visited

  • Days Won

    1

Posts posted by Stian Viskjer

  1. Hi

     

    Assuming you use Fedora 31 and Workspace app 19.12.

     

    Open a terminal window and copy-paste the following line by line:

    # workspace app needs a previous release of openssl
    sudo dnf install compat-openssl10
    # modify the workspace app launch shortcut to use library from compat-openssl10
    sudo sed -i 's/^Exec=/Exec=env LD_PRELOAD=\/lib64\/libcrypto.so.1.0.2o /g' /usr/share/applications/wfica.desktop

     

    If you get a certificate error starting the app/desktop, do:

    cd /opt/Citrix/ICAClient/keystore/cacerts/
    # extract certificates from tls-ca-bundle.pem
    sudo awk 'BEGIN {c=0;} /BEGIN CERT/{c++} { print > "cert." c ".pem"}' < /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem

     

  2. Hi

     

    Verify your OS has the required certificates installed (Firefox has its own certificate store).

    openssl s_client -connect storefront-or-gateway.example.com:443

    Hit ctrl+c and do the following *if* openssl returned ok. Type the commands and use tab completion to make sure that these paths exist on your system.

    # rename the cacerts directory
    sudo mv /opt/Citrix/ICAClient/keystore/cacerts /opt/Citrix/ICAClient/keystore/cacerts.bak
    
    # create the cacerts directory
    sudo mkdir /opt/Citrix/ICAClient/keystore/cacerts
    
    # create links to the system certificates in the cacerts directory
    sudo ln -s /etc/ssl/certs/* /opt/Citrix/ICAClient/keystore/cacerts/
    
    # list the content of the cacerts directory
    ls /opt/Citrix/ICAClient/keystore/cacerts/

    Now try connecting to your storefront-or-gateway.example.com.

     

    If you're not sure if a previous attempt may have done something that affects this, just uninstall workspace app (make sure /opt/Citrix/ICAClient is removed) and reinstall. Your Citrix user config resides in ~/.ICAClient. You might want to rename or delete that directory as well to start fresh.

  3. Hi

     

    If you didn't get a certificate warning in your browser then you probably already have the required certificates installed in your operating system. Note that Firefox has its own certificate store but most browsers/operating systems has the same set of root certificates. Chrome, and I assume Chromium, use the operating system certificate store on Linux.

     

    Workspace App comes bundled with a limited set of root certificates and uses its own certificate store on Linux. You probably only need to do what's described here: https://wiki.archlinux.org/index.php/Citrix#TLS/SSL_Certificates.
     

    If you do need to download certificates you can probably download them in your browser from the website (storefront/gateway) you are logging in to. You can view and download all of the certificates associated with a website in your web browser (root/intermediate/site cert). The root certificate is usually what's missing but sometimes the intermediate also.

     

    The ica file needs to be opened with Workspace App. Some of that is also explained in that wiki article. 

    • Like 2
×
×
  • Create New...