Page 1 of 2 12 LastLast
Results 1 to 10 of 11

Thread: Citrix client - Verisign Class 3

  1. #1
    Join Date
    Nov 2008
    Beans
    15

    Citrix client - Verisign Class 3

    Hi,

    I followed this HowTo:http://ubuntuforums.org/showthread.php?t=85398&page=4
    and installed citrix on my ubuntu 9.04. Citrix starts by says 'You have not chosen to trust "Verisign.....".
    After searching the message on google I got this link: http://www.verisign.com/support/veri...ate/index.html

    I copied the certificate text in /usr/lib/ICAClient/keystore/cacerts/Class3.cer. But still I get the same message saying that 'You have not chosen...". Should the filename of certificate be something else?

    Thanks,
    -Aditya

  2. #2
    Join Date
    Nov 2008
    Beans
    15

    Re: Citrix client - Verisign Class 3

    I did this too to copy all the available certificates, but no luck.
    sudo cp -i /etc/ssl/certs/* /usr/lib/ICAClient/keystore/cacerts/

    Any suggestions?

    -Aditya

  3. #3
    Join Date
    Sep 2005
    Location
    Norway
    Beans
    28
    Distro
    Kubuntu 10.10 Maverick Meerkat

    Re: Citrix client - Verisign Class 3

    I think the certificate needs to be a .crt file (not .cer).
    It should be put in the /usr/lib/ICAClient/keystore/cacerts/
    as root (sudo).
    You may have to do some googelin' to fint the .crt fil you need unless this works for you:
    https://www.verisign.com/support/thawte-roots.zip

  4. #4
    Join Date
    Nov 2008
    Beans
    15

    Re: Citrix client - Verisign Class 3

    I was not able to get anything different in that path. Still trying.

  5. #5
    Join Date
    May 2009
    Beans
    2

    Wink Re: Citrix client - Verisign Class 3

    I managed to get it to work by following the following steps:

    1) Install Citrix Server ICA client (linuxx86.tar.gz) from Citrix website
    2) Save the Verisign Class 3 Secure Server CA certificate I attached
    3) Save as/rename it to class3.crt
    4) Move this file to your ICAClient/linuxx86/keystore/cacerts folder
    5) Try again now, it should work.

    Regards
    Nick T.

    ps: Tested with success on Kubuntu 9.04 and openSUSE 11 (Mozilla v3+)
    Attached Files Attached Files
    Last edited by nicholas_22; May 16th, 2009 at 06:03 PM.

  6. #6
    Join Date
    Nov 2008
    Beans
    15

    Re: Citrix client - Verisign Class 3

    This caused the following error
    *** glibc detected *** /usr/lib/ICAClient/wfica: double free or corruption (top): 0x089ce480 ***
    ======= Backtrace: =========
    ...
    ..Many more lines
    ...
    I refered this: http://ubuntuforums.org/showthread.php?t=175050
    and again I get what I used to get.

    -Aditya
    Last edited by adityabankar; May 13th, 2009 at 06:08 PM.

  7. #7
    Join Date
    Jul 2005
    Beans
    366

    Re: Citrix client - Verisign Class 3

    Quote Originally Posted by nicholas_22 View Post
    I managed to get it to work by following the following steps:

    1) Install Citrix Server ICA client (linuxx86.tar.gz) from Citrix website
    2) Copy and paste Verisign Class 3 Certificate to text file (include ----...----- lines)
    ----BEGIN CERTIFICATE-----
    MIIEnDCCBAWgAwIBAgIQdTN9mrDhIzuuLX3kRpFi1DANBgkqhk iG9w0BAQUFADBf
    MQswCQYDVQQGEwJVUzEXMBUGA1UEChMOVmVyaVNpZ24sIEluYy 4xNzA1BgNVBAsT
    LkNsYXNzIDMgUHVibGljIFByaW1hcnkgQ2VydGlmaWNhdGlvbi BBdXRob3JpdHkw
    HhcNMDUwMTE5MDAwMDAwWhcNMTUwMTE4MjM1OTU5WjCBsDELMA kGA1UEBhMCVVMx
    FzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQLExZWZX JpU2lnbiBUcnVz
    dCBOZXR3b3JrMTswOQYDVQQLEzJUZXJtcyBvZiB1c2UgYXQgaH R0cHM6Ly93d3cu
    dmVyaXNpZ24uY29tL3JwYSAoYykwNTEqMCgGA1UEAxMhVmVyaV NpZ24gQ2xhc3Mg
    MyBTZWN1cmUgU2VydmVyIENBMIIBIjANBgkqhkiG9w0BAQEFAA OCAQ8AMIIBCgKC
    AQEAlcMhEo5AxQ0BX3ZeZpTZcyxYGSK4yfx6OZAqd3J8HT732F Xjr0LLhzAC3Fus
    cOa4RLQrNeuT0hcFfstG1lxToDJRnXRkWPkMmgDqXkRJZHL0zR DihQr5NO6ziGap
    paRa0A6Yf1gNK1K7hql+LvqySHyN2y1fAXWijQY7i7RhB8m+Ip n4G9G1V2YETTX0
    kXGWtZkIJZuXyDrzILHdnpgMSmO3ps6wAc74k2rzDG6fsemEe4 GYQeaB3D0s57Rr
    4578CBbXs9W5ZhKZfG1xyE2+xw/j+zet1XWHIWuG0EQUWlR5OZZpVsm5Mc2JYVjh
    2XYFBa33uQKvp/1HkaIiNFox0QIDAQABo4IBgTCCAX0wEgYDVR0TAQH/BAgwBgEB
    /wIBADBEBgNVHSAEPTA7MDkGC2CGSAGG+EUBBxcDMCowKAYIKwY BBQUHAgEWHGh0
    dHBzOi8vd3d3LnZlcmlzaWduLmNvbS9ycGEwMQYDVR0fBCowKD AmoCSgIoYgaHR0
    cDovL2NybC52ZXJpc2lnbi5jb20vcGNhMy5jcmwwDgYDVR0PAQ H/BAQDAgEGMBEG
    CWCGSAGG+EIBAQQEAwIBBjApBgNVHREEIjAgpB4wHDEaMBgGA1 UEAxMRQ2xhc3Mz
    Q0EyMDQ4LTEtNDUwHQYDVR0OBBYEFG/sr6DdiqTv9SoQZy0/VYK81+8lMIGABgNV
    HSMEeTB3oWOkYTBfMQswCQYDVQQGEwJVUzEXMBUGA1UEChMOVm VyaVNpZ24sIElu
    Yy4xNzA1BgNVBAsTLkNsYXNzIDMgUHVibGljIFByaW1hcnkgQ2 VydGlmaWNhdGlv
    biBBdXRob3JpdHmCEHC65B0Q2Sk0tjjKewPMur8wDQYJKoZIhv cNAQEFBQADgYEA
    w34IRl2RNs9n3Nenr6+4IsOLBHTTsWC85v63RBKBWzFzFGNWxn Iu0RoDQ1w4ClBK
    Tc3athmo9JkNr+P32PF1KGX2av6b9L1S2T/L2hbLpZ4ujmZSeD0m+v6UNohKlV4q
    TBnvbvqCPy0D79YoszcYz0KyNCFkR9MgazpM3OYDkAw=
    -----END CERTIFICATE-----
    3)Save it as Class3.crt
    4)Move this file to your ICAClient/linuxx86/keystore/cacerts folder (or very similar)
    5)Try again now, it should work.

    Regards
    Nick T.
    I started seeing this problem a week or so ago on my 9.04 box. The above method didn't solve the issue. Actually I also tried downloading all certificates directly from verisign (https://knowledge.verisign.com/suppo...ntent&id=AR657) and installing them in the cacerts folder, and it also didn't help.

    What fixed this problem for me was: in firefox, Edit > Preferences > Advanced > Encryption > View Certificates, browse the list to find the VeriSign entries, then export the ones that are Class 3 (In my case there are 7), one by one, in format X509 (PEM), and store them in your "cacert" folder with the ".crt" extension (you have to manually add the extension when you save the certificates).

    You don't need to restart firefox nor re-login into your citrix portal, just try launching any citrix app again, this time it should work.

  8. #8
    Join Date
    May 2009
    Beans
    2

    Wink Re: Citrix client - Verisign Class 3

    Quote Originally Posted by ariel View Post
    I started seeing this problem a week or so ago on my 9.04 box. The above method didn't solve the issue. Actually I also tried downloading all certificates directly from verisign (https://knowledge.verisign.com/suppo...ntent&id=AR657) and installing them in the cacerts folder, and it also didn't help.

    What fixed this problem for me was: in firefox, Edit > Preferences > Advanced > Encryption > View Certificates, browse the list to find the VeriSign entries, then export the ones that are Class 3 (In my case there are 7), one by one, in format X509 (PEM), and store them in your "cacert" folder with the ".crt" extension (you have to manually add the extension when you save the certificates).

    You don't need to restart firefox nor re-login into your citrix portal, just try launching any citrix app again, this time it should work.
    My post assumes that you are able to properly copy and paste from this forum and/or the VeriSign website (are you using K-based text editors which alter your formatting?)
    If it didn't work, some characters were altered, simple as that, because what you're doing is the same principle.
    I edited the post and have included an attachment, for those having difficulties navigating this with copy and paste (see above)

    FYI, if you're going to follow the Firefox export methodology, there is no need for the brute force approach of exporting all certificates,
    the "Verisign Class 3 Secure Server CA" (which you can obtain from VeriSign or my above post) will do.

    Regards
    Nick T.
    Last edited by nicholas_22; May 16th, 2009 at 06:06 PM.

  9. #9
    Join Date
    Nov 2008
    Beans
    15

    Re: Citrix client - Verisign Class 3

    You are correct. After exporting the certificate from Firefox the client is working fine. Many Many thanks.
    Last time when you posted the file I didn't use any editor for copy-paste. I used cat > Class3.crt, then selected the entire text and middle clicked on the terminal. I think the change in format would have caused that crash "glibc detected..."

    Thanks,
    Aditya

  10. #10
    Join Date
    May 2009
    Beans
    1

    Re: Citrix client - Verisign Class 3

    Many thanks, copy Verisign Class 3 cert and rename solve all problem with using Citrix client. This works also under Ubuntu 9.10 //mca1954

Page 1 of 2 12 LastLast

Tags for this Thread

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •