[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: How do I tel SSL to trust a certificate?



In <[🔎] 4D6AC759.1000503@gmail.com>, Marc Shapiro wrote:
>I am trying to access my work computer from home using the Citrix
>client.  First, I connect to the companies web-site and log in.  I
>navigate from there to a link for remote login.  On selecting that, I
>should be presented with a login for my computer at work.  This has
>worked in the past, but I am now getting the following error:
>
>You have not chosen to trust "VeriSign 3 Public Primary Certification
>Authority - G3", the issuer of the server's security certificate (SSL
>error 61).

ICA Client, despite having an unofficial Debian package, is not well-
integrated into Debian.  Instead of using the standard directory tree under 
/usr/share/ca-certificates, it has its own little certificate store.

Install (or symlink) .crt files into /usr/lib/ICAClient/keystore/cacerts and 
complain to Citrix.  I could probably fix their package, but I'd be unable to 
distribute it.  I can certainly cover the common case without even seeing 
their source.  (A simple GNU find command to symlink /usr/share/ca-
certificates/**/*.crt under /usr/lib/ICAClient/keystore/cacerts.)

HTH
-- 
Boyd Stephen Smith Jr.                   ,= ,-_-. =.
bss@iguanasuicide.net                   ((_/)o o(\_))
ICQ: 514984 YM/AIM: DaTwinkDaddy         `-'(. .)`-'
http://iguanasuicide.net/                    \_/

Attachment: signature.asc
Description: This is a digitally signed message part.


Reply to: