I am getting SSL Error 61 ("You have not chosen to trust … ") when running appications on my company's Citrix server using Firefox on OpenSUSE 13.1, with two different computers. In one, the Citrix client application is in /usr/lib/ICAClient/. In the other, it is in /opt/Citrix/ICAClient/, but with a symbolic link from /usr/lib/ICAClient/. Details and checks done are below.

  • The certificates are in /usr/share/pki/trust/, to which I have created a symbolic link from /usr/share/ca-certificates/mozilla/. These include the one that the error message claims not to be trusted (Verisign Class 3 G5)
  • In Edit → Preferences → Advanced → Certificates → View Certificates, the one I want is listed, and looks correct. All three "Trust settings" are ticked.
  • The directory …/ICAClient/keystore/cacerts/ contains symbolic links to all the certificates in /usr/share/ca-certificates/mozilla/.
  • The server validates according to http://www.sslshopper.com/ssl-checker.html.
  • The applications run under Windows.
  • They used to run under OpenSUSE 12.3. They did not initially, but did after I ensured there were links to the certificates in the correct places. The same procedure did not work under OpenSUSE 13.1.

So is there anything else I need to check and correct to make it work? Or is it a problem with the server? If so, then what do I need to tell my company's IT servicedesk to do (I have no admin access to the server)?