We Saw a Chicken …

This is one that the support desk of my employer really should’ve answered, but they gave their usual, “You mentioned Macintosh in your e-mail, so this conversation stops here” response.

Anyway, they’ve just upgraded their Citrix access, and what used to work now gives the rather cruddy response:

Just what SSL Error 0: You have not chosen to trust “Entrust.net Secure Server Certification Authority”,the issuer of the server’s security certificate. Error number: 183 is supposed to mean to anyone, I don’t know. (Well, actually, I do know, but in rants like this it’s customary to feign ignorance in a huffy manner. Work with me here, people.)

So, to fix this:

1. Make sure that Citrix ICA Client is installed
2. Go to entrust.net/developer and click on Download Root Certificates
3. Select Personal Use, and click on Download Certificates
4. Download entrust_ssl_ca.cer and entrust_ssl_ca.der to your desktop
5. Open a terminal (it’s in Applications/Utilities), and enter the following:
   cd /Applications/Citrix\ ICA\ Client/keystore/cacerts/
   cp -p ~/Desktop/entrust_ssl_ca.* .
   ln -s entrust_ssl_ca.cer entrust_ssl_ca.crt
6. Exit the terminal, and try your Citrix session again.

There might be some unnecessary steps there, and this might all be fixed by downloading the latest release of the ICA client, but this works for me now.