CTX102579
XenApp Plug-in for Windows (32/64 Bit)
XenApp Plug-in for Windows (32/64 Bit)
1970-01-01
1970-01-01

ICA 7.100 Client or later

Symptom

When attempting to launch any application through Citrix Secure Gateway using ICA 7.100 Client or later on a Win9x/WinNT 4.0 workstation, the launch may fail with the following error message:

“The connection was rejected. The SSL certificate could not be checked for revocation. Please contact your Citrix Administrator (SSL error 78).”

Cause

The client device does not have an installed or registered DLL for verifying the Certificate Revocation List (CRL). The Win9x/WinNT 4.0 operating systems do not support CRL checking, even if SSLCertificateRevocationCheckPolicy=CheckWithNoNetworkAccess is configured in Appsrv.ini or Template.ica. This parameter is configured in Appsrv.ini of Non-English versions of the ICA 7.00 Client, but it’s not configured in Appsrv.ini of the ICA 7.100 Client by default. However if you update to ICA 7.100 Client from Non-English versions of the ICA 7.00 Client, this parameter still exists.

Non-English ICA 7.00 Client

Symptom

When attempting to launch any application through Citrix Secure Gateway while using a Non-English version of the ICA 7.00 Client on a Win9x/WinNT 4 workstation, the launch fails with the following error message:

“Cannot connect to MetaFrame Server: Protocol Driver Error.”

Cause

The client device does not have an installed or registered DLL for verifying the Certificate Revocation List (CRL). The Win9x/WinNT 4 operating systems do not support CRL checking.

Workaround

Configure SSLCertificateRevocationCheckPolicy=NoCheck in the Appsrv.ini.

— Or —

Remove SSLCertificateRevocationCheckPolicy from Appsrv.ini (if this parameter is not configured in Template.ica).

Note: The NoCheck setting disables CRL.

More Information

For details about the SSLCertificateRevocationCheckPolicy, see Page 91 of the ICA Clients Administrator’s Guide.


特别说明


本文来源为Citrix.com所有,翻译后版权归翻译者所有.如需转载请注明出处.

文档版本


.

广告招租


最新留言


.

广告招租


.