Citrix problem on SuSE only, works fine from Mac and Windows

Hi,

I really hope that someone here in this community are able to help me...
here is my problem.

My girl works for a company which uses Citrix as there main platform, which,
has we all know enables her to logon from home via a web page, where userid
etc are required. This works fine on our old Windows XP PC, and I just got
it working on Apple Macintosh, with some GREAT help in this community -
http://support.citrix.com/forums/thr...e=true&#306220

But as we both wants to work, at the same time, would she very much like to
use our openSuSE Linux as her primary PC from home, but it seems to more
complicated to get SuSE to connect to the company citrix farm then the Mac.
Which I infact doesn't understand.. why, well basically because
the "problem" as I have understood, is the same for the Linux as for the
Mac platform.

Ok, I am running openSuSE 10.2 with all updated officially patches and the
newest Citrix Client for Linux, and I have tested it against a testing site
I found on the internet, so I know that the client and the browser is
working. The problem is that when I logon and "asks" the brower to launch
the "desktop" (they are publishing the full desktop) it comes with the
following error: "The security cerficiate "Entrust.net Secure Server
Certificate Authority" is not suitable for use in a SSL Connection.
(Unsuitable Netscape Usage Extension field). ...

And I have tried everything, I have tried download every entrust
certificate - but no luck...

What I don't understand, is why it works on the Mac, as I did exact the what
the (link) said, and it work perfectly.. but on the openSuSE, it doesn't
work. However, it seems to me, that on the Linux, Citrix is trying to
launch a Java client instead of the "Fat" ICA Client installed, but I can't
reall verify it.. anyway the mac launces the citrix session fine, via e
program launch from Firefox and the the Citrix client startes the session,
no prblems at all...... any ideas ?

At least, could anyone clarify for me, which certificates are used, those in
the openSuSE, in Firefox or those placed in the certs directory of the
Citrix client. I personally think, that it's the citrix client with need
to "have" the certificate, but please.. let me hear your ideas ... cause I
am running out of ideas to try.

Regards

Stig

On Mon, 07 May 2007 16:12:12 +0000, Stig Nielsen wrote:
> Ok, I am running openSuSE 10.2 with all updated officially patches and the
> newest Citrix Client for Linux, and I have tested it against a testing site
> I found on the internet, so I know that the client and the browser is
> working. The problem is that when I logon and "asks" the brower to launch
> the "desktop" (they are publishing the full desktop) it comes with the
> following error: "The security cerficiate "Entrust.net Secure Server
> Certificate Authority" is not suitable for use in a SSL Connection.
> (Unsuitable Netscape Usage Extension field). ...

You need to get the .crt file from the Citrix administrator and put them
into your ICAClient/keystore/cacerts wherever that is depending on
how/where you installed the citrix client.

There is also a way to use Opera and export the public cert from the
website then use openssl to convert it to the right format but that is
long and complicated...easier to just ask the citrix admin for the .crt
formatted key.