Citrix Fix

Citrix Receiver 13.0, RHEL/CentOS/ScientificLinux 6.5 32 bit

As of the beginning of February 2014, accessing websites using Citrix Receiver 12.1 fails with this (useless) error message:

• SSL error

• Contact your help desk with the following information:
• The server sent an expired security certificate. The

• certificate "GlobalSign Root CA" is valid from 01

• September 1998 to 28 January 2014 (SSL error 70).

The recommended fix is using Citrix Receiver 13.0, using this RPM. However, this new version requires libxerces-c-3.1.so and libwebkitgtk-1.0.so.0 . libxerces is available here

Still doesn't work ... poop on this!

INSTEAD

Make 12.1 work by adding new Root-R*.crt files here or here. I downloaded Root-R1.crt, Root-R2.crt, and Root-R3.crt, and added them to the .../Citrix/ICAClient/keystore/cacerts/ directory. Probably only Root-R1.crt is needed, but I don't want to go through this nonsense again, any time soon.