Error: "SSL Error 61: You have not chosen to trust Certificate Authority.." with Online Plug-in

Error: "SSL Error 61: You have not chosen to trust Certificate Authority.." with Online Plug-in

book

Article ID: CTX200836

calendar_today

Updated On:

Description

 

Error: "SSL Error 61: You have not chosen to trust 'Certificate Authority'..." When Launching Apps with Citrix Online Plug-in

Users may be unable to launch apps with the Citrix Online Plug-in.

The following error message appears:
"Unable to launch your application. Contact your Helpdesk with the following information: Cannot connect to the Citrix XenApp server. SSL error 61: You have not chosen to trust <name of SSL Certificate Authority>, the issuer of the server's security certificate." 

Resolution

As of this writing, the following older Citrix products have been validated to support SHA-2 certificates:

  • Secure Gateway 3.3.4 
  • XenApp 6.5 with Hotfix XA650R06W2K8R2X64023
  • Web interface 5.4.2.59 with the below mentioned configurations for different XML transport types.
  • Citrix Receiver 4.1, or later.
It is recommended to use StoreFront and a current version of Citrix Receiver, rather than Web Interface and Citrix Online Plug-In both of which support the higher SHA-2 certificates.

Problem Cause

The older Citrix Online Plug-in does not support SHA256 signature algorithm.

Issue/Introduction

Users may be unable to launch apps with the Citrix Online Plug-in.

Additional Information

Citrix Documentation - Ciphers Supported by the NetScaler Appliance

Refer to the following articles if SSL error 61 is observed when using Citrix Receiver: