Citrix and Comodo High Assurance Cert

[j0ka]

I have a user that is having a problem with Citrix and the Comdo High Assurance cert.

I have seen this with Linux and the resolution is to copy the cert to the ./usr/lib/ICAClient/keystore as root but as 10.10 is so locked down I am having problems locating the folder and getting finder into an elevated mode...

I have tried this sudo /System/Library/CoreServices/Finder.app/Contents/MacOS/Finder but can not launch a new finder window as root...

Thoughts

Yosemite 10.10

 

[maflynn]

What are you trying to do, install a new cert? What error is occurring?

 

[j0ka]

What are you trying to do, install a new cert? What error is occurring?

The Cert is in the Keystore but user gets and error when the receiver starts to launch "You have not chosen to trust "COMODO SSL CA" the issuer of the server's security certificate.

 

[j0ka]

So I guess I am looking for a way to get Finder in elevated mode to locate the citrix icaclient folder to copy the Comodo High Assurance cert to...???

 

[maflynn]

The Cert is in the Keystore but user gets and error when the receiver starts to launch "You have not chosen to trust "COMODO SSL CA" the issuer of the server's security certificate.

What tools do you use to add the cert into the keystone? Since OS X is built from Unix, can't you use one of the terminal commands to update the cert or trust it?

 

[j0ka]

I figured this out...

It appears that the receiver is not looking at the Keychain for the certs and as in Linux they have to be added into a folder...

First you have to create a couple of folders under /var

/CTXScert
/CTXScert/cacerts

Then add all the Comodo certs into this folder and you are good to go...

Comodo High-Assurance
Comodo SSL CA
and our Citrix server cert

I am so proud of myself...

 

[patrickw64]

citrix issue

Hi,

I have the same issues...but am a bit computer shy..Could you kindly go through how to do your fix below bit by bit?


"First you have to create a couple of folders under /var

/CTXScert
/CTXScert/cacerts

Then add all the Comodo certs into this folder and you are good to go...

Comodo High-Assurance
Comodo SSL CA
and our Citrix server cert "