How to fix SSL error 61 in Citrix Web Receiver on Linux

How to fix SSL error 61 in Citrix on LinuxI admit, the title is quite specific and will certainly appeal to only a small readership. But anyone who is facing the problem will be, like me, grateful for a solution.

In particular, the problem is about the SSL error 61 in the Citrix (Web) receiver under Linux and how to fix it. Since I have been running almost exclusively under Kubuntu for several months, the Citrix Reiceiver also moved into the new Linux box. Unfortunately, no connection to systems could be established, since the receiver disconnected with the following error message.

SSL Error 61: You have not chosen to trust “Go Daddy Root Certificate Authority – G2”, the issuer to the server’s security certificate.

Citrix-SSL-Fehler-61What does that tell us? The web receiver wants to check the certificate of the server while connecting, but fails because it does not know the root certificate or better said it does not trust it. Accordingly, you can actually use an arbitrary root authority in the error message, since the error message would raise up with every missing authority certificate.

Now there are two solutions. Either you get the missing certificates and insert them into the following directory:

/opt/Citrix/ICAClient/keystore/cacerts

Or you have Firefox installed… How does Firefox help us? Because the root certificates of Firefox can be shared with the Citrix receiver with only one command via symbolic links. The whole works as follows:

sudo ln -s /usr/share/ca-certificates/mozilla/* /opt/Citrix/ICAClient/keystore/cacerts

In this case, a symbolic link for each root certificate that the Firefox knows is created in the Citrix directory, so that it can participate. Now your SSL error 61 should be gone.

If, for whatever reason, you want to undo the changes, you can run the following two commands:

cd /opt/Citrix/ICAClient/keystore/cacerts
sudo find -type l -delete 

Leave a comment

Please be polite. We appreciate that. Your email address will not be published and required fields are marked