Perhaps some of you have to deal with Citrix Receiver for Linux,
and are suffering from their latest root certificate breakage. 

The rest of you can ignore this post.

Portland area hospital systems use differing versions of the
proprietary (and $$$$$$$!) EPIC medical record software.
They provide external access via Citrix, which brings up
a Windoze screen over a web browser. 

Citrix offers Linux client drivers called Citrix Receiver.
My doctor friend has been using the 12.1 version for Linux
for some time, but its root certificate expired on January 28.

The suggested fix is to upgrade to the 13.0 version, but that
turns into dependency hell ... it depends on libwebkitgtk ,
which is a gnome3 related renaming of libwebkit for everything
earlier.  So, if you are using a distro that uses gnome2, then
the fragile Citrix installer fails. 

Even after fixing that with --nodeps and symlinks, there
is other breakage.  As near as I can tell, the 13.0 Linux
version wasn't tested and doesn't actually work.

The solution is to ignore the advice of the hospital IT staff,
and add new certs to the old ones: Root-R1.crt, Root-R2.crt,
and Root-R3.crt, available at http://tiny.cc/citcert

They go in old 12.1 key directory:
  /opt/Citrix/ICAClient/keystore/cacerts/ 

So far, that appears to work, and hopefully, the good doctor
will continue to have access to life-saving information.

Keith

PS - fighting this, I did not have time to write a clever
announcement for the clinic.  Same time, same place ...

-- 
Keith Lofstrom          [email protected]
_______________________________________________
PLUG mailing list
[email protected]
http://lists.pdxlinux.org/mailman/listinfo/plug

Reply via email to