Ubuntu – Citrix receiver 13.10 on Ubuntu 18.04.1

citrixnetworkingserversslwildcards

I am trying to get Citrix receiver to work on my Ubuntu laptop. I've installed the Citrix receiver, however when I try to open the .ica file that my company provides when I login to my organisation's Citrix StoreFront site by Chrome, it exits out with an error that states "Cannot connect to 0.0.02 – Windows 2016 Desktop. No such file or directory. Verify your connection settings and try again". After this, the .ica file gets deleted automatically.

In addition, if I try to enter the address of my organisation's Citrix StoreFront site directly in the installed app, it gives me this error; "Your account cannot be added using this server address. Make sure you entered it correctly. An SSL connection to the server couldn't be established because the server's certificate was not trusted."

I always have to switch to Windows to work remotely. I tried every available solution existed on the internet including First Link, Second Link. I guess my problem is somehow related to wildcard character in my company's certificate. It is issued to * .myCompanyName however the site address is door.myCompanyName

I tried everything. I don't want to switch to Windows just because of this. Please help me.

Best Answer

This sounds like a problem with the certificates shipped with the Citrix client for Linux (screenshot). An elderly article in the Ubuntu Community Wiki explains:

Citrix Receiver only trusts a few root CA certificates, which causes connections to many Citrix servers to fail with an SSL error. The 'ca-certificates' package (already installed on most Ubuntu systems) provides additional CA certificates [...] that can be conveniently added to Citrix Receiver to avoid these errors

The Citrix client has its certificates installed in /opt/Citrix/ICAClient/keystore/cacerts. You can safely remove the entire folder and add a symbolic link to /etc/ssl/certs instead: 

$ cd /opt/Citrix/ICAClient/keystore/
$ sudo rm -r cacerts
$ sudo ln -s /etc/ssl/certs cacerts

The Citrix Receiver will start to work just fine afterwards.

Related Question