Citrix “SSL Error 61: You have not chosen to trust ‘Certificate Authority’…”

This is not a real story about something. But this is a handy note for all Linux and maybe Mac users.

Every time I need to run Citrix Workspace App (ex. Citrix Reciever) on a brand new Linux installation. I see the error “SSL Error 61: You have not chosen to trust ‘Certificate Authority’…” and I start digging the Internet to find the solution.

Now I decided to write a note with the solution.

Debian / Ubuntu solution

You may already have missed a certificate in your system. First of all, try this solution.

1. sudo ln -s /usr/share/ca-certificates/mozilla/* /opt/Citrix/ICAClient/keystore/cacerts
2. sudo rename ‘s/\.crt/\.pem/’ /opt/Citrix/ICAClient/keystore/cacerts/*.crt
3. sudo /opt/Citrix/ICAClient/util/ctx_rehash

If it not helps. Try the generic solution

The generic solution.

1. Download the CA Root certificate from your firm’s Citrix portal
2. Save it as a *.PEM file NOT *.CRT in /opt/Citrix/ICAClient/keystore/cacerts folder
3. Rehash all certificates
   sudo /opt/Citrix/ICAClient/util/ctx_rehash