Recently i was working in an project with Citrix Receiver in Ubuntu and was facing issues with Internal CA certificates.
Below steps will help
- Generate PEM file from PFX provided by client
-
Openssl pkcs12 -in client_ssl.pfx -out client_ssl.pem –clcerts
- Above command generate ppm file for URL certificate
-
Openssl pkcs12 -in client_ssl.pfx -out root.pem -cacerts
- Above command generate ppm file for CA certificate
-
Rename the generated ppm file extensions to .crt
-
Copy the crt files to /usr/share/local/ca-certificates & /usr/share/local/ca-certificates/Mozilla & /opt/Citrix/ICAClient/keystore/cacerts
-
Run update-ca-certificates
-
Run c_rehash /opt/Citrix/ICAClient/keystore/cacerts
-
Reboot system and try using Citrix receiver using https URL.
