Applications/Citrix ICA Client/keystore/cacerts/VeriSignClass3SecureServerCA-G2.crtĪfter relaunching the client the connection went flawless. The full path to the intermediate CA on my system is:
The certificate should be located in the following sub directory of the Citrix ICA Client folder keystore/cacerts/ crt extension) in that location ( Citrix explanation here). The workaround is to create a folder hierarchy in the Citrix Client folder (Most likely to be /Application/Citrix ICA Client/), and place the binary encoded root certificate (with a. It seems that the Citrix ICA Client has the CA's build in, so it completely ignores your trusted CA's. Everything in between should be provided during the communications setup.Īnyway, since this is not completely new to me, I found the correct CA in the FireFox keystore (I ran into this on a website a while back), and exported it, imported it in the OSX Keychain and thought that everything would be oké. The basis of PKI is that you should preferably trust ROOT CA's only. Since it's issued by an intermediate certificate, the service you're trying to access should provide you with this CA during the initial exchange key while establishing the SSL connection. Problem is that this SSL Certificate is issued by an INTERMEDIATE CA. Most likely, the original SSL certificate expired, and they installed a new SSL certificate on the Citrix gateway.
For someone who works with PKI, one would think that they would remember choosing NOT to trust a public VeriSign CA. The error message suggests that I have changed something on my Mac, but not that I know. Today, completely out of the blue came this error: Apart from some little quirks (like not functioning well when having two displays), the experience is good. I've been using the OSX ICA Client for a couple of months now to access my mail on the company intranet. They also have an ICA client for Apple OSX (Yeeehaaaaa). They have several solutions for remote access and thin client computing. The great thing about Citrix is that you can access company resources from almost anywhere.
0 kommentar(er)
