Citrix Workspace App for Linux: How to trust a CA certificate?

Citrix Workspace App for Linux: How to trust a CA certificate?

book

Article ID: CTX231524

calendar_today

Updated On:

Description

This article is intended for Citrix administrators and technical teams only.
 
Non-admin users must contact their company's Help Desk/IT support team and can refer to
CTX297149 for more information.

This article's objective is to describe the steps involved in trusting a CA certificate in Citrix Workspace App for Linux 


Instructions

  1. Download CA certificate in PEM format. 
  2. Save the certificate with .crt file extension. 
  3. Switch to root user and copy the .crt CA certificate file to /opt/Citrix/ICAClient/keystore/cacerts/ folder. 
  4. Make sure the CA certificate file is owned by Root user and Group, and it has -rw-r--r-- or 644 as the File permissions. 
  5. Run sudo /opt/Citrix/ICAClient/util/ctx_rehash 

Note: Location of /opt/Citrix/ICAClient/keystore/cacerts/ and /opt/Citrix/ICAClient/util/ctx_rehash may vary depending on the distribution and location you would be installing Citrix Worskpace App for Linux. Above location is on default Ubuntu Distribution installation directory /opt/Citrix/ICAClient/

Additional Information

Please use the below article to fix "SSL error 61"
https://support.citrix.com/article/CTX203362

In most of the occasions we might need set a link to Firefox's keystore to Citrix & below command will help to set the link to Firefox's keystore to Citrix
sudo ln -s /usr/share/ca-certificates/mozilla/* /opt/Citrix/ICAClient/keystore/cacerts

Note : Always copy the required crt file.