Citrix receiver 13.10 on Ubuntu 18.04.1
I am trying to get Citrix receiver to work on my Ubuntu laptop. I've installed the Citrix receiver, however when I try to open the .ica file that my company provides when I login to my organisation's Citrix StoreFront site by Chrome, it exits out with an error that states "Cannot connect to 0.0.02 - Windows 2016 Desktop. No such file or directory. Verify your connection settings and try again". After this, the .ica file gets deleted automatically.
In addition, if I try to enter the address of my organisation's Citrix StoreFront site directly in the installed app, it gives me this error; "Your account cannot be added using this server address. Make sure you entered it correctly. An SSL connection to the server couldn't be established because the server's certificate was not trusted."
I always have to switch to Windows to work remotely. I tried every available solution existed on the internet including First Link, Second Link. I guess my problem is somehow related to wildcard character in my company's certificate. It is issued to * .myCompanyName however the site address is door.myCompanyName
I tried everything. I don't want to switch to Windows just because of this. Please help me.
Solution 1:
This sounds like a problem with the certificates shipped with the Citrix client for Linux (screenshot). An elderly article in the Ubuntu Community Wiki explains:
Citrix Receiver only trusts a few root CA certificates, which causes connections to many Citrix servers to fail with an SSL error. The 'ca-certificates' package (already installed on most Ubuntu systems) provides additional CA certificates [...] that can be conveniently added to Citrix Receiver to avoid these errors
The Citrix client has its certificates installed in /opt/Citrix/ICAClient/keystore/cacerts
. You can safely remove the entire folder and add a symbolic link to /etc/ssl/certs
instead:
$ cd /opt/Citrix/ICAClient/keystore/
$ sudo rm -r cacerts
$ sudo ln -s /etc/ssl/certs cacerts
The Citrix Receiver will start to work just fine afterwards.
Solution 2:
Makes Citrix Workspace Work on Chrome Browser running on Ubuntu MATE 18
$ uname -a
Linux 5.0.0-37-generic #40~18.04.1-Ubuntu SMP Thu Nov 14 12:06:39 UTC 2019 x86_64 x86_64 x86_64 GNU/Linux
Steps
-
Export CA from browser little lock icon when visiting
storefront.example.com
reference
aside: I found it easier to export CA with Firefox than Chrome -
Import CA to browser
In Chrome:
chrome://settings/advance
-
Set the CA in Linux
- Copy your CA to the directory
/usr/local/share/ca-certificates/
-
Use command:
sudo cp <whatever>.crt /usr/local/share/ca-certificates/<whatever>.crt
-
Update the CA store:
sudo update-ca-certificates
fun aside, use
openssl
to check the certificate
- Copy your CA to the directory
-
Follow steps above
cd /opt/Citrix/ICAClient/keystore/ sudo mv cacerts _cacerts ### I don't delete things until things are working sudo ln -s /etc/ssl/certs cacerts
Notes Below for Search Bots
Error Message for Firefox
$ firefox --version
Mozilla Firefox 68.0.1
Submitting details on the storefront.example.com page returned an error log while using FF Quantum
Citrix Workspace app cannot launch desktop "example Desktop"
Please verify that the ICA connection is available and that the server address is present
Different Error Message with Chrome
Brave - Version 1.1.21 Chromium: 79.0.3945.79 (Official Build) (64-bit)
- have to navigate to the storefront storefront.example.com
- select
- file
*.ica
is created (screenshot) - double click donwloaded
*.ica
file - get error message
[SSL ERROR]
Contact your help desk with the following information: You Have not chosen to trust "AddTrust External CA Root", the issuer of the server's security certificate (SSL error 61)