Posts Tagged ‘citrix’

now it really works

Tuesday, May 8th, 2007

While I said quite early on that I had Ubuntu Feisty running in 64-bit, it wasn’t until today I got things really how I liked it. My earlier Perl problem was due to a broken gcc setup; all is happy now, and all the modules I’ve ever used are built and running as expected.

The one thing I’ll probably never get going is Citrix Metaframe presentation client. There’s no AMD64 package for it. I’m hardly heartbroken, as I still have two machines on which it runs just fine.

When you really haven’t chosen not to trust: Citrix, Mac OS X, and Entrust certificates

Thursday, December 14th, 2006

This is one that the support desk of my employer really should’ve answered, but they gave their usual, “You mentioned Macintosh in your e-mail, so this conversation stops here” response.

Anyway, they’ve just upgraded their Citrix access, and what used to work now gives the rather cruddy response:

SSL Error 0: You have not chosen to trust

Just what SSL Error 0: You have not chosen to trust “Entrust.net Secure Server Certification Authority”,the issuer of the server’s security certificate. Error number: 183 is supposed to mean to anyone, I don’t know. (Well, actually, I do know, but in rants like this it’s customary to feign ignorance in a huffy manner. Work with me here, people.)

So, to fix this:

  1. Make sure that Citrix ICA Client is installed
  2. Go to entrust.net/developer and click on Download Root Certificates
  3. Select Personal Use, and click on Download Certificates
  4. Download entrust_ssl_ca.cer and entrust_ssl_ca.der to your desktop
  5. Open a terminal (it’s in Applications/Utilities), and enter the following:
    cd /Applications/Citrix\ ICA\ Client/keystore/cacerts/
    cp -p ~/Desktop/entrust_ssl_ca.* .
    ln -s entrust_ssl_ca.cer entrust_ssl_ca.crt
  6. Exit the terminal, and try your Citrix session again.

There might be some unnecessary steps there, and this might all be fixed by downloading the latest release of the ICA client, but this works for me now.