{"id":2867,"date":"2006-12-14T07:16:09","date_gmt":"2006-12-14T12:16:09","guid":{"rendered":"http:\/\/scruss.com\/blog\/2006\/12\/14\/when-you-really-havent-chosen-not-to-trust-citrix-mac-os-x-and-entrust-certificates\/"},"modified":"2018-12-06T08:42:30","modified_gmt":"2018-12-06T13:42:30","slug":"when-you-really-havent-chosen-not-to-trust-citrix-mac-os-x-and-entrust-certificates","status":"publish","type":"post","link":"https:\/\/scruss.com\/blog\/2006\/12\/14\/when-you-really-havent-chosen-not-to-trust-citrix-mac-os-x-and-entrust-certificates\/","title":{"rendered":"When you really haven’t chosen not to trust: Citrix, Mac OS X, and Entrust certificates"},"content":{"rendered":"

NB: this article is a few years old, and I haven’t tested any updates since I wrote it. It may<\/em> still work; who knows?<\/span><\/p>\n

This is one that the support desk of my employer really should’ve answered, but they gave their usual, “You mentioned Macintosh in your e-mail, so this conversation stops here” response.<\/p>\n

Anyway, they’ve just upgraded their Citrix access, and what used to work now gives the rather cruddy response:<\/p>\n

\"SSL<\/div>\n

Just what SSL Error 0: You have not chosen to trust “Entrust.net Secure Server Certification Authority”,the issuer of the server’s security certificate. Error number: 183<\/em> is supposed to mean to anyone, I don’t know. (Well, actually, I do know, but in rants like this it’s customary to feign ignorance in a huffy manner. Work with me here, people.)
\n<\/em><\/p>\n

So, to fix this:<\/p>\n

    \n
  1. Make sure that Citrix ICA Client<\/a> is installed<\/li>\n
  2. Go to entrust.net\/developer<\/a> and click on Download Root Certificates<\/em><\/li>\n
  3. Select Personal Use<\/em>, and click on Download Certificates<\/em><\/li>\n
  4. Download entrust_ssl_ca.cer<\/a> and entrust_ssl_ca.der<\/a> to your desktop<\/li>\n
  5. Open a terminal (it’s in Applications\/Utilities), and enter the following:
    \ncd \/Applications\/Citrix\\ ICA\\ Client\/keystore\/cacerts\/
    \ncp -p ~\/Desktop\/entrust_ssl_ca.* .
    \nln -s entrust_ssl_ca.cer entrust_ssl_ca.crt<\/li>\n
  6. Exit the terminal, and try your Citrix session again.<\/li>\n<\/ol>\n

    There might be some unnecessary steps there, and this might all be fixed by downloading the latest release of the ICA client, but this works for me now.<\/p>\n","protected":false},"excerpt":{"rendered":"

    NB: this article is a few years old, and I haven’t tested any updates since I wrote it. It may still work; who knows? This is one that the support desk of my employer really should’ve answered, but they gave their usual, “You mentioned Macintosh in your e-mail, so this conversation stops here” response. Anyway, […]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[7],"tags":[512,270,269],"class_list":["post-2867","post","type-post","status-publish","format-standard","hentry","category-computers-suck","tag-citrix","tag-linux","tag-mac"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_shortlink":"https:\/\/wp.me\/pQNZZ-Kf","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/scruss.com\/blog\/wp-json\/wp\/v2\/posts\/2867","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/scruss.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/scruss.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/scruss.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/scruss.com\/blog\/wp-json\/wp\/v2\/comments?post=2867"}],"version-history":[{"count":4,"href":"https:\/\/scruss.com\/blog\/wp-json\/wp\/v2\/posts\/2867\/revisions"}],"predecessor-version":[{"id":15276,"href":"https:\/\/scruss.com\/blog\/wp-json\/wp\/v2\/posts\/2867\/revisions\/15276"}],"wp:attachment":[{"href":"https:\/\/scruss.com\/blog\/wp-json\/wp\/v2\/media?parent=2867"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/scruss.com\/blog\/wp-json\/wp\/v2\/categories?post=2867"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/scruss.com\/blog\/wp-json\/wp\/v2\/tags?post=2867"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}