Title photo
frugal technology, simple living and guerrilla large-appliance repair

Regular blog here, 'microblog' there

Many of my traditional blog post live on this site, but a great majority of my social-style posts can be found on my much-busier microbloging site at updates.passthejoe.net. It's busier because my BlogPoster "microblogging" script generates short, Twitter-style posts from the Linux or Windows (or anywhere you can run Ruby with too many Gems) command line, uploads them to the web server and send them out on my Twitter and Mastodon feeds.

I used to post to this blog via scripts and Unix/Linux utilities (curl and Unison) that helped me mirror the files locally and on the server. Since this site recently moved hosts, none of that is set up. I'm just using SFTP and SSH to write posts and manage the site.

Disqus comments are not live just yet because I'm not sure about what I'm going to do for the domain on this site. I'll probably restore the old domain at first just to have some continuity, but for now I like using the "free" domain from this site's new host, NearlyFreeSpeech.net.

Tue, 25 Aug 2015

Use Firefox to find the right certificate for Citrix to beat SSL Error 61

I had to set up my laptop to access a new Citrix site, and I got the dreaded SSL Error 61, where the proper certificate could not be found.

It was a Go Daddy certificate, and I knew that I had it. I went to Go Daddy, got another copy and dropped it into /opt/Citrix/ICAClient/keystore/cacerts/.

The error persisted.

After a few other unsuccessful attempts, I found the answer at Ask Fedora.

Basically you find the right certificate by going through Firefox itself, exporting the certificate and then using rootly privileges to put it in /opt/Citrix/ICAClient/keystore/cacerts/.

  • In Firefox, go to the web site for your Citrix app. It should be a secure site.

  • Click on the little lock icon to the left of the URL.

  • Click "More Information"

  • Click "View Certificate"

  • Click "Details"

  • You should now see the certificate(s) you need. Click on them to select and then click "Export," and save it/them somewhere in your /home directory

  • Use the terminal and either su or sudo to copy the certificates to /opt/Citrix/ICAClient/keystore/cacerts/.

Everything should work. At least it did for me.