PGTS PGTS Pty. Ltd.   ACN: 007 008 568

point Site Navigation

point Other Blog Threads



  Valid HTML 4.01 Transitional

   Stop The Internet Filter!

   No Clean Feed

   The Internet Filter Is An Ex-parrot!






PGTS Humble Blog

Thread: Tips/Tricks For Programming etc

GP JPG
You underestimate the power of the Dark Side!

Citrix client on Ubuntu 16.04


Chronogical Blog Entries:



Date: Tue, 28 Feb 2017 23:59:59 +1100

A few months ago I encountered a problem with Citrix on Ubuntu. It seems there was a solution.

The problem arose after a Citrix server had been "upgraded". There was something strange about the way that it was configured. After connecting to the Citrix server, the Firefox Citrix plugin refused to run any applications on the server. It reported the following error.

Contact your help desk with the following information:
You have chosen not to trust "COMODO RSA Organization
Validation Secure Server CA", the issuer of the server's
security certificate (SSL error 61).

A screenshot of the error is shown below:

SSL Error Message
Screenshot of SSL error message from Firefox on Ubuntu 16.04.


I gave up waiting for a fix to be applied to the server. I went looking for something to fix the issue on the client side (My desktop is Ubuntu 16.04). I did a Google Search for "COMODO RSA Organization Validation Secure Server CA" certificate. I found one at the site support.commodo.com, called comodorsaorganizationvalidationsecureserverca.crt

I downloaded a copy of this file ... It was a PEM certificate with line-feed record separators. The checksum (as returned by cksum) was 388918708 2159. I ran the following commands at the prompt

sudo -i
[Enter your password]
cd /usr/share/ca-certificates/mozilla
mv -i /home/[user]/Downloads/comodorsaorganizationvalidationsecureserverca.crt .
chown root:root comodorsaorganizationvalidationsecureserverca.crt
chmod 644 comodorsaorganizationvalidationsecureserverca.crt
cd /opt/Citrix/ICAClient/keystore/cacerts
ln -s /usr/share/ca-certificates/mozilla/comodorsaorganizationvalidationsecureserverca.crt

This fixed the issue.

Note: Substitute user login name for [user] above (presuming you are using the standard Download folder in Firefox).


Other Blog Posts In This Thread:

Copyright     2017, Gerry Patterson. All Rights Reserved.