Citrix client - Verisign Class 3

[adityabankar]

Hi,

I followed this HowTo:http://ubuntuforums.org/showthread.php?t=85398&page=4
and installed citrix on my ubuntu 9.04. Citrix starts by says 'You have not chosen to trust "Verisign.....".
After searching the message on google I got this link: http://www.verisign.com/support/veri...ate/index.html

I copied the certificate text in /usr/lib/ICAClient/keystore/cacerts/Class3.cer. But still I get the same message saying that 'You have not chosen...". Should the filename of certificate be something else?

Thanks,
-Aditya

[adityabankar]

I did this too to copy all the available certificates, but no luck.
sudo cp -i /etc/ssl/certs/* /usr/lib/ICAClient/keystore/cacerts/

Any suggestions?

-Aditya

[KaiO]

I think the certificate needs to be a .crt file (not .cer).
It should be put in the /usr/lib/ICAClient/keystore/cacerts/
as root (sudo).
You may have to do some googelin' to fint the .crt fil you need unless this works for you:
https://www.verisign.com/support/thawte-roots.zip

[adityabankar]

I was not able to get anything different in that path. Still trying.

[nicholas_22]

I managed to get it to work by following the following steps:

1) Install Citrix Server ICA client (linuxx86.tar.gz) from Citrix website
2) Save the Verisign Class 3 Secure Server CA certificate I attached
3) Save as/rename it to class3.crt
4) Move this file to your ICAClient/linuxx86/keystore/cacerts folder
5) Try again now, it should work.

Regards
Nick T.

ps: Tested with success on Kubuntu 9.04 and openSUSE 11 (Mozilla v3+)

[adityabankar]

This caused the following error
*** glibc detected *** /usr/lib/ICAClient/wfica: double free or corruption (top): 0x089ce480 ***
======= Backtrace: =========
...
..Many more lines
...
I refered this: http://ubuntuforums.org/showthread.php?t=175050
and again I get what I used to get.

-Aditya

[ariel]

I managed to get it to work by following the following steps:

1) Install Citrix Server ICA client (linuxx86.tar.gz) from Citrix website
2) Copy and paste Verisign Class 3 Certificate to text file (include ----...----- lines)
----BEGIN CERTIFICATE-----
MIIEnDCCBAWgAwIBAgIQdTN9mrDhIzuuLX3kRpFi1DANBgkqhk iG9w0BAQUFADBf
MQswCQYDVQQGEwJVUzEXMBUGA1UEChMOVmVyaVNpZ24sIEluYy 4xNzA1BgNVBAsT
LkNsYXNzIDMgUHVibGljIFByaW1hcnkgQ2VydGlmaWNhdGlvbi BBdXRob3JpdHkw
HhcNMDUwMTE5MDAwMDAwWhcNMTUwMTE4MjM1OTU5WjCBsDELMA kGA1UEBhMCVVMx
FzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQLExZWZX JpU2lnbiBUcnVz
dCBOZXR3b3JrMTswOQYDVQQLEzJUZXJtcyBvZiB1c2UgYXQgaH R0cHM6Ly93d3cu
dmVyaXNpZ24uY29tL3JwYSAoYykwNTEqMCgGA1UEAxMhVmVyaV NpZ24gQ2xhc3Mg
MyBTZWN1cmUgU2VydmVyIENBMIIBIjANBgkqhkiG9w0BAQEFAA OCAQ8AMIIBCgKC
AQEAlcMhEo5AxQ0BX3ZeZpTZcyxYGSK4yfx6OZAqd3J8HT732F Xjr0LLhzAC3Fus
cOa4RLQrNeuT0hcFfstG1lxToDJRnXRkWPkMmgDqXkRJZHL0zR DihQr5NO6ziGap
paRa0A6Yf1gNK1K7hql+LvqySHyN2y1fAXWijQY7i7RhB8m+Ip n4G9G1V2YETTX0
kXGWtZkIJZuXyDrzILHdnpgMSmO3ps6wAc74k2rzDG6fsemEe4 GYQeaB3D0s57Rr
4578CBbXs9W5ZhKZfG1xyE2+xw/j+zet1XWHIWuG0EQUWlR5OZZpVsm5Mc2JYVjh
2XYFBa33uQKvp/1HkaIiNFox0QIDAQABo4IBgTCCAX0wEgYDVR0TAQH/BAgwBgEB
/wIBADBEBgNVHSAEPTA7MDkGC2CGSAGG+EUBBxcDMCowKAYIKwY BBQUHAgEWHGh0
dHBzOi8vd3d3LnZlcmlzaWduLmNvbS9ycGEwMQYDVR0fBCowKD AmoCSgIoYgaHR0
cDovL2NybC52ZXJpc2lnbi5jb20vcGNhMy5jcmwwDgYDVR0PAQ H/BAQDAgEGMBEG
CWCGSAGG+EIBAQQEAwIBBjApBgNVHREEIjAgpB4wHDEaMBgGA1 UEAxMRQ2xhc3Mz
Q0EyMDQ4LTEtNDUwHQYDVR0OBBYEFG/sr6DdiqTv9SoQZy0/VYK81+8lMIGABgNV
HSMEeTB3oWOkYTBfMQswCQYDVQQGEwJVUzEXMBUGA1UEChMOVm VyaVNpZ24sIElu
Yy4xNzA1BgNVBAsTLkNsYXNzIDMgUHVibGljIFByaW1hcnkgQ2 VydGlmaWNhdGlv
biBBdXRob3JpdHmCEHC65B0Q2Sk0tjjKewPMur8wDQYJKoZIhv cNAQEFBQADgYEA
w34IRl2RNs9n3Nenr6+4IsOLBHTTsWC85v63RBKBWzFzFGNWxn Iu0RoDQ1w4ClBK
Tc3athmo9JkNr+P32PF1KGX2av6b9L1S2T/L2hbLpZ4ujmZSeD0m+v6UNohKlV4q
TBnvbvqCPy0D79YoszcYz0KyNCFkR9MgazpM3OYDkAw=
-----END CERTIFICATE-----
3)Save it as Class3.crt
4)Move this file to your ICAClient/linuxx86/keystore/cacerts folder (or very similar)
5)Try again now, it should work.

Regards
Nick T.

I started seeing this problem a week or so ago on my 9.04 box. The above method didn't solve the issue. Actually I also tried downloading all certificates directly from verisign (https://knowledge.verisign.com/suppo...ntent&id=AR657) and installing them in the cacerts folder, and it also didn't help.

What fixed this problem for me was: in firefox, Edit > Preferences > Advanced > Encryption > View Certificates, browse the list to find the VeriSign entries, then export the ones that are Class 3 (In my case there are 7), one by one, in format X509 (PEM), and store them in your "cacert" folder with the ".crt" extension (you have to manually add the extension when you save the certificates).

You don't need to restart firefox nor re-login into your citrix portal, just try launching any citrix app again, this time it should work.

[nicholas_22]

I started seeing this problem a week or so ago on my 9.04 box. The above method didn't solve the issue. Actually I also tried downloading all certificates directly from verisign (https://knowledge.verisign.com/suppo...ntent&id=AR657) and installing them in the cacerts folder, and it also didn't help.

What fixed this problem for me was: in firefox, Edit > Preferences > Advanced > Encryption > View Certificates, browse the list to find the VeriSign entries, then export the ones that are Class 3 (In my case there are 7), one by one, in format X509 (PEM), and store them in your "cacert" folder with the ".crt" extension (you have to manually add the extension when you save the certificates).

You don't need to restart firefox nor re-login into your citrix portal, just try launching any citrix app again, this time it should work.

My post assumes that you are able to properly copy and paste from this forum and/or the VeriSign website (are you using K-based text editors which alter your formatting?)
If it didn't work, some characters were altered, simple as that, because what you're doing is the same principle.
I edited the post and have included an attachment, for those having difficulties navigating this with copy and paste (see above)

FYI, if you're going to follow the Firefox export methodology, there is no need for the brute force approach of exporting all certificates,
the "Verisign Class 3 Secure Server CA" (which you can obtain from VeriSign or my above post) will do.

Regards
Nick T.

[adityabankar]

You are correct. After exporting the certificate from Firefox the client is working fine. Many Many thanks.
Last time when you posted the file I didn't use any editor for copy-paste. I used cat > Class3.crt, then selected the entire text and middle clicked on the terminal. I think the change in format would have caused that crash "glibc detected..."

Thanks,
Aditya

[mca1954]

Many thanks, copy Verisign Class 3 cert and rename solve all problem with using Citrix client. This works also under Ubuntu 9.10 //mca1954