verisign

Citrix Presentation Server (Citrix Client) on Fedora 12, 13, 14

Here's how I got Citrix Presentation Server (Citrix Client) running on Fedora 12.

  • Install the rpmfusion repo if not already installed

rpm -ivh http://download1.rpmfusion.org/nonfree/fedora/rpmfusion-nonfree-release-stable.noarch.rpm
rpm -ivh http://download1.rpmfusion.org/free/fedora/rpmfusion-free-release-stable.noarch.rpm

  • Make sure your system is up-to-date

yum update

  • Install OpenMotif - at this time is version 2.3.2 which works fine.

yum install openmotif

  • There is a conflict with the cjkuni-uming-fonts package - if you have it installed, remove it

yum remove package cjkuni-uming-fonts

  • Download the Citrix ICA Client rpm from:

http://www.citrix.com/English/SS/downloads/details.asp?downloadID=3323&productID=-1#top

  • Install the Citrix ICA Client:

yum --nogpgcheck localinstall ICAClient-11.100-1.i386.rpm

  • Configure for use with Firefox:

mkdir ~/.mozilla/plugins
ln -s /usr/lib/ICAClient/npica.so ~/.mozilla/plugins/

When Firefox asks you how to open an .ica file choose to open it with /usr/lib/ICAClient/wfica and select to do this automatically.

Done!

On some installs I have seen been a VeriSign cert error, that reads:

You have not chosen to trust "VeriSign Class 3 Secure Server CA", the issuer of the server's security certificate (SSL error 61).

To fix this problem, I added the missing certificates by exporting them from firefox into the ICA client's cacerts folder.

If you have a local install of the ICA client this is usually in:

~/ICAClient/linuxx86/keystore/cacerts/

Otherwise it will usually be in:

/usr/lib/ICAClient/keystore/cacerts/

Ok, to export the certs from firefox go to: [Edit->Preferences->Advanced->Encryption->View Certificates]

Scroll down to the set of VeriSign certificates - Now for each that has "Class 3" in its name, export it in X.509 (PEM) format to .../ICAClient/keystore/cacerts/

For me there were 8 Class 3 VeriSign certificates to export.

That's it, you should be all set to go.

Syndicate content