Forum Discussion
Citrix XenApp and APM - ssl error 59
I did the APM integration for Citrix XenApp 7.6 on my Big IP VE (11.5.1) using iApp. After that the users are able to authenticate and getting the webtop also, but unable launch the published applications. if click on application i am getting the following error. "cannot connect to the citrix XenApp server.SSL Error 59: The server sent a security certificate identifying "localhost.localdomain, the ssl connection was to virtual_server_ip** if anybody can give any valuable advice on this that would be highly appreciated.
7 Replies
That's easy - you are using a self-signed cert on the BIG-IP - and that won't work for the ICA proxy communication. You need to use a real trusted certificate and then this issue will go away.
- kunjan
Nimbostratus
The SSL cert common name(localhost.localdomain) doesn't match with domain name of the VIP(virtual_server_ip)
http://support.citrix.com/article/CTX124646
- siru_129409
Nimbostratus
Thank you Koyfman and kunjan, Currently i don't have a trusted certificate, i am using self signed certificate since this setup is for a POC. so is there any other way to remove this error ?
- kunjan
Nimbostratus
One cheat is to add localhost.localdomain map to VIP IP to the workstation host file.
You can try the steps mentioned here to make the cert as root cert in IE/Chrome
https://www.conetrix.com/Blog/post/How-to-Trust-a-Self-Signed-Certificate-in-IE-9.aspx
- siru_129409
Nimbostratus
i tried both, but didn't work for me, the error remain same. and one more thing i am using the ssl offloading (my citrix servers are on http)
- kunjan
Nimbostratus
Hi Siru, how do you access the VIP? using IP address or domain 'localhost.localdomain'? Should use domain.
- siru_129409
Nimbostratus
Hi Kunjan, its awsome.. its working now...thanks alot for your support....
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com