This message was deleted.
# citrix-vads
Slackbot
04/23/2022, 1:48 AMThis message was deleted.
n
Neal Dolson
04/23/2022, 1:49 AMDoing some searching on that SSL error 47, it sounds like it might be cipher related.
Neal Dolson
04/23/2022, 1:49 AMFrom the ICAClient.log during attempted login:
2022-04-22 202301.332 [TD] <P6250> citrix-wfica: Error reading data. try again, failure: 11
2022-04-22 202301.333 [TD] <P6250> citrix-wfica: Error reading data. try again, failure: 11
2022-04-22 202301.334 [TD] <P6250> citrix-wfica: Error reading data. try again, failure: 11
2022-04-22 202301.336 [TD] <P6250> citrix-wfica: SSL/TLS handshake failed: Attempted to connect using the (TLS V1.2) protocol(s). The server is configured for TLS V1.2.
2022-04-22 202301.336 [TD] <P6250> citrix-wfica: Negotiation failed. sslretcode: 47
2022-04-22 202305.824 [TD] <P6250> citrix-wfica: Connect failed. sockerror: 1000047, sslerror: 1000047
2022-04-22 202305.824 [TD] <P6250> citrix-wfica: Invalid socket
2022-04-22 202750.160 [TD] <P6250> citrix-wfica: Not connected
2022-04-22 202750.160 [TD] <P6250> citrix-wfica: Not connected
2022-04-22 202750.160 [VDCAM] <P6250> citrix-wfica: DriverClose: deallocate the data buffers device: 1
2022-04-22 202750.162 [EUEM] <P6250> citrix-wfica: VDEUEM: DriverClose failed. rc = 0x3fe
2022-04-22 202750.360 [LIBS] <P6532> citrix-wfica: Value of cl_argv[0] : /opt/Citrix/ICAClient/wfica
2022-04-22 202750.360 [LIBS] <P6532> citrix-wfica: Value of cl_argv[1] : -eula
2022-04-22 202750.360 [LIBS] <P6532> citrix-wfica: Value of cl_argv[2] : -tell
2022-04-22 202750.360 [LIBS] <P6532> citrix-wfica: Value of cl_argv[3] : MinimumTLS,MaximumTLS,SSLCiphers
Neal Dolson
04/23/2022, 1:51 AMWe have only TLS 1.2 ciphers in the SSL profile bound to the gateway, although I'm reviewing them to see if there's an older one in there or something. Release notes for 2203 state that it introduced support for TLS 1.3, but I couldn't find anything about ciphers being deprecated.
https://docs.citrix.com/en-us/citrix-workspace-app-for-linux/whats-new.html
Neal Dolson
04/23/2022, 1:54 AMI was able to connect fine from Windows Workspace App 2202 (22.2.0.4525)
s
Salim Hurjuk
04/23/2022, 6:07 AMdo u have browser in that thinclient?
n
Neal Dolson
04/23/2022, 12:26 PMThis is actually an Ubuntu Desktop 20.04 LTS installed on a Dell XPS laptop
s
Salim Hurjuk
04/23/2022, 12:45 PMCheck with browser if it's working or not
n
Neal Dolson
04/23/2022, 9:00 PMBut yes there is a browser
Neal Dolson
04/23/2022, 9:00 PMI can log in and be presented apps, the problem occurs after the ICA file is generated and the desktop is in the process of connecting
s
Salim Hurjuk
04/23/2022, 11:07 PMIt's ca cert issue not installed properly
n
Neal Dolson
04/25/2022, 3:37 PMYou're right - the ADC was missing one of the root certificates for that chain. Not sure why Windows is/was happy with it and so was Ubuntu until recently, but adding the cert and linking it into the chain did indeed resolve it. Thanks @Salim Hurjuk
s
Salim Hurjuk
04/25/2022, 3:38 PMWelcome @Neal Dolson
Salim Hurjuk
04/25/2022, 3:39 PMWindows if you clear cache and if Windows is Updated then root CA will be automatically updated
Salim Hurjuk
04/25/2022, 3:40 PMIn Ubuntu or Linux, complete cert chain is mandatory otherwise it will not work
n
Neal Dolson
04/25/2022, 3:44 PMWonder if that was a change included in the “Ubuntu base” update that was installed at the same time then, because this certificate config has been in place for some time without issue.
16 Views