[Citrix Receiver/ICAClient] Connection dialog frozen

Setup

• Windows 10 Home
• dual screen setup (one on HDMI set to main by Windows settings, one on VGA of the onboard graphics)
• Citrix Receiver 4.8 (4.5, 4.6 and 4.7 sport the same behavior)
• Connection to Citrix session over web link downloaded in browser

Symptom

The Citrix Receiver process freezes at connection dialog and has to be kill by process management.

Work around

• Either use VGA screen as main screen
• Or deactivate VGA screen

Also

• Linux receiver at least 13.4 and 13.5 seems to be affected as well
• see https://discussions.citrix.com/topic/387808-47-on-multi-screen-windows-10-home-buggy/

[Tumbleweed] replacements for deprecated tools

Program	Obsoleted by
arp	ip neigh
ifconfig	ip addr
ipmaddr	ip maddr
iptunnel	ip tunnel
netstat	ss ip route (netstat -r) ip -s link (netstat -i)
route	ip route
mii-tool	ethtool
nameif	ifrename

see Linux Foundation and blog

[Citrix Receiver/ICAClient] SSL error 61

Problem

Funny enough the Citrix receiver does not integrate well into several Linux distros with Firefox (probably other Mozilla browsers too) even though the package from Citrix has been taken to install ICAClient. It happens that SSL error 61 is frequent after a vanilla installation. This usually means that certificates are missing. To integrate the certificates provided by the browser you could link them to ICAClient certificate folder. Be aware that if the browser certificates change place or name this solution probably breaks. You also could copy them into the ICAClient certificate folder eating up more disk space. I will link.

Cause

The certificates provided by the ICAClient are not sufficient, i. e. not present, revoked, outdated, malformed, broken, ...

Citrix client tested

• 13.4 (seems to be broken, but this problem was not the thing for breakage)
• 13.5 (seems to be broken, but this problem was not the thing for breakage)

OpenSUSE Leap 42.2 (probably since 13.1)

Credit

sudo ln -s /usr/share/pki/trust/* /opt/Citrix/ICAClient/keystore/cacerts/

Ubuntu

Credit

sudo ln -s /usr/share/ca-certificates/mozilla/* /opt/Citrix/ICAClient/keystore/cacerts/

All

Apparently this is not necessairy: Credit

sudo c_rehash /opt/Citrix/ICAClient/keystore/cacerts/

Actually

In my case this was not sufficient. Even though Firefox provided SwissSign certificates, I had to download the PEMs again from SwissSign Root or SwissSign CA. Firefox's were "broken" (see list above 😉). I put them in /opt/certificates_downloaded as root, root writeable and world readable, linked them analogously to the Firefox's above and rehashed. Probably only SwissSign CA is needed as I came accross this phenomenon on Windows 10/Firefox too. There I had to download the Gold G2 2006 certificate in DER format and install it using the context menu in Windows explorer.

[X] Change keyboard layout/mapping on the fly on the console

I booted into a live USB Gentoo system, but even though I selected german key mapping just after the boot process started, the KDE desktop used the american layout - somewhat annoying, especially since I was not able to graphically select a german layout. The where just 8 selectable but german was not amongst, swiss would not help a lot and I was unable to install more layouts. One at irc channel #gentoo told me, I could issue the following on the command line and it works just great.

setxkbmap -verbose de

[lvm2] no devices after reboot

I was installing a Gentoo system on lvm partitions. While doing so, the system of the live USB stick froze and I had to reboot. However, no lvm devices where present in /dev even though I successfully displayed the volume group (vgdisplay) and the logical volumes (lvdisplay). The point is, that after the boot volume groups are deactivated so I had to activate them. I had this info from #gentoo IRC channel but was too dump to record it somewhere accessible because I had to shutdown my system to go home. It took me a good deal of time to find the solution again on the net but here it is:

vgchange --activate y vg_sata

GPG key management

Revoke key

https://www.hackdiary.com/2004/01/18/revoking-a-gpg-key/

Generate key

https://keyring.debian.org/creating-key.html

Convert keys

https://search.thawte.com/support/ssl-digital-certificates/index?page=content&actp=CROSSLINK&id=SO26449

[Windoof (7)] Prepend user PATH to the system PATH environment variable

This is not possible. Probably for security reasons, Windoof always appends a user variable called PATH to the system variable PATH. It looks to me as if Winzigweich does not trust in Windoofs right management. However. work around for cmd.exe usage by creating shortcuts with the shortcut command being

cmd.exe /K set PATH=%_PATH%;%PATH%

where _PATH is a user variable containing the path portion that should be prepended. In my case the system PATH variable contained the path to a broken sqlplus installation. So I wanted to overrule that.