On Tue, Dec 21, 2010 at 09:35:12AM -0800, Paul Heinlein wrote: > It's the "probably other tools" that might hang you up. ... > RHEL/CentOS: add the certificate to /etc/pki/tls/certs/ca-bundle.crt.
It turns out that Citrix wants the two binary cert files that I got from the hospital stored in the directory: /usr/lib/ICAClient/keystore/cacerts/ Then rename them with a .crt suffix, and set the ownership to root.sys and the permissions to -r--r--r-- , like the other files in that directory. It took a lot of searching around the web, and trying many incorrect suggestions, to figure that out. The last thing that tripped me up was getting the permissions right. The problem was not related to the browser at all. One useful clue was that the error window was rendered by something different than firefox. It was helpful that the fix involves moving around files, as one of the target machines is remote - I could configure it over the vpn. A remaining problem is that Citrix wants to render in a smaller window than my 2048x1536 laptop screen, and won't resize the characters. Looks OK on older grainier screens, though. This is probably a general problem with windows, running as a Citrix guest or not, which may be why the high-res screen I retrofitted to my laptop was surplussed in the first place. Gads, it must be painful to design great hardware and have M$ not support it. I had much more attached hair before I began this process. Keith -- Keith Lofstrom [email protected] Voice (503)-520-1993 KLIC --- Keith Lofstrom Integrated Circuits --- "Your Ideas in Silicon" Design Contracting in Bipolar and CMOS - Analog, Digital, and Scan ICs _______________________________________________ PLUG mailing list [email protected] http://lists.pdxlinux.org/mailman/listinfo/plug
