

Instead of using c_rehash which no longer works the openssl rehash command can be used instead. (Discuss in Talk:Citrix) # c_rehash /opt/Citrix/ICAClient/keystore/cacerts/ Reason: After the last openssl upgrade, the c_rehash command is broken in Arch. To do this, use this command (borrowed from ) Skipping this step might result in Citrix still giving certificate errors. Changes to your certificate directory will likely require rehashing links for openssl to find them properly. # awk 'BEGIN ' < tls-ca-bundle.pem You may also need to download your CA's intermediate certificates and store them in the same directory. # cp /etc/ca-certificates/extracted/tls-ca-bundle.pem. You need to run the following commands as root: # cd /opt/Citrix/ICAClient/keystore/cacerts/ For Citrix versions before 13.1, run the following command as root: # ln -sf /etc/ssl/certs/* /opt/Citrix/ICAClient/keystore/cacerts/ Since versions 13.1, Citrix needs the certificates in separate files. Copy the certificates from /etc/ssl/certs/ to /usr/lib/ICAClient/keystore/cacerts/. These are already installed on most systems, they are part of the core package ca-certificates, but they are not where ICAClient looks for them. You do not have the root Certificate Authority (CA) certificates. You may then receive the error You have not chosen to trust the issuer of the server's security certificate. If there is a certificate download and place it in /usr/lib/ICAClient/keystore/cacerts/. TLS/SSL Certificatesīecause ICAClient uses SSL you may need a security certificate to connect to the server, check with the server administrator. a text editor), make sure you have xorg-xprop installed. Note: If you are running Xfce and Chromium is opening the.
