Title photo
frugal technology, simple living and guerrilla large-appliance repair
Wed, 26 Aug 2015

Use Firefox to find the right certificate for Citrix to beat SSL Error 61

I had to set up my laptop to access a new Citrix site, and I got the dreaded SSL Error 61, where the proper certificate could not be found.

It was a Go Daddy certificate, and I knew that I had it. I went to Go Daddy, got another copy and dropped it into /opt/Citrix/ICAClient/keystore/cacerts/.

The error persisted.

After a few other unsuccessful attempts, I found the answer at Ask Fedora.

Basically you find the right certificate by going through Firefox itself, exporting the certificate and then using rootly privileges to put it in /opt/Citrix/ICAClient/keystore/cacerts/.

  • In Firefox, go to the web site for your Citrix app. It should be a secure site.

  • Click on the little lock icon to the left of the URL.

  • Click "More Information"

  • Click "View Certificate"

  • Click "Details"

  • You should now see the certificate(s) you need. Click on them to select and then click "Export," and save it/them somewhere in your /home directory

  • Use the terminal and either su or sudo to copy the certificates to /opt/Citrix/ICAClient/keystore/cacerts/.

Everything should work. At least it did for me.