[THIN] Pure SSL Problem

  • From: "SteveC" <stevec@xxxxxxxxxxx>
  • To: <thin@xxxxxxxxxxxxx>
  • Date: Thu, 18 Sep 2003 14:20:17 -0400


Hey all.  I have a "pure" SSL problem.  I put quotes around "pure" because I
am *not* using NFuse.  My system (for now) is comprised of a single
MetaFrame XP system with SP3, IIS running on the same server.  An SSL cert
is installed in IIS and the site is set to only allow SSL connections.  The
server is behind a firewall which publishes only the SSL port, the MetaFrame
XML service port, and the HTTP ICA browser port.

I am getting the error 

"
   The archives required to make an SSL connection are not    
   available.  Please contact your Citrix administrator.   
"

ICA clients are Windows 2000 and using the Java Client only.  The Java
Client Admin Guide 7.1 says to take my certificate and use the MS CAB
utility to roll the certificate into a CAB file, which I have done and
included in my /components/ directory.  I also put the certificate by itself
in the /components/ directory.  What am I missing?

Here is the applet HTML:

<applet name="javaclient"
  codebase="/components/"
  code=com.citrix.JICA
  archive=JICA-coreN.jar,JICA-configN.jar
  width="900" height="675"
  >
    <param name="cabinets" 
    value="JICAEngM.cab,cryptojM.cab,sslM.cab,JICA-sicaM.cab,devcerts.cab">
    <param name="Language" value="en">
    <param name="Start" value="auto">
    <param name="End" value="Manual">
    <param name="ShowStatusBar" value="no">
    <param name="ShowSettingsButton" value="no">
    <param name="client.wfclient.UseHostname" value="off">
<param name="client.wfclient.Clientname" value="dev1">
    <param name="Address" value="Word:12001">
    <param name="InitialProgram" value="#Word">
    <param name="EncryptionLevel" value="1">
    <param name="BrowserProtocol" value="HTTPonTCP">
    <param name="SSLEnable" value="on">
    <param name="SSLNoCACerts" value="0">
    <param name="SSLCACert0" value="dev.cer">
    <param name="HttpBrowserAddress" value="devmf1.test.net:12002">
    <param name="ClientAudio" value="on">
    <param name="ProxyType" value="none">
    <param name="user.wfclient.UseAlternateAddress" value="1">



If I set SSLEnable to "off" I can get into the app, so I know it is
published properly.

Thanks!

********************************************************
This Week's Sponsor:  ThinPrint
http://www.thinprint.com
**********************************************************
Useful Thin Client Computing Links are available at:
http://thethin.net/links.cfm

For Archives, to Unsubscribe, Subscribe or 
set Digest or Vacation mode use the below link:
http://thethin.net/citrixlist.cfm

Other related posts:

  • » [THIN] Pure SSL Problem