Jump to content


Cannot Connect to the Citrix XenApp Server SSL Error 29

Started by Joe Schneiders , 10 August 2009 - 03:35 PM
7 replies to this topic

Joe Schneiders Members

Joe Schneiders
  • 1 posts

Posted 10 August 2009 - 03:35 PM

We have XenApp 5 for W2K3, Web Interface 5.1.1, and Secure Gateway 3.1.0 in a DMZ. XML Service is on port 8080. We only have the Desktop published and Session Reliability is not enabled. Occasionally when logging into the Web Interface users will receive "cannot connect to the citrix xenapp server ssl error 29 the proxy denied access to (STA value) on Port 1494". After several minutes the retry is successful. If a user is connected they can work with no issues.

Resources on the Presentation Server seem fine, we rarely have more than 10 users on the server concurrently. Also, we reboot the Presentation Server every week. The server was built 3 months ago and this has always been an issue. We have tried re-adding the STA connections with no luck. Also, the CSG Diagnostics are clean. I have confirmed that the STA URL's are the same in the Web Interface and Secure Gateway. We also have a Hosts file entry on the Secure Gateway server pointing to the Presentation Server.

The event logs we see on the Secure Gateway Server are:
SCHANNEL - 127 - SSL library error 47 on <PublicURL>:443 with client :An unclassified SSL network error occurred. (error code: error:14094418:lib(20):func(148):reason(1048)).
SCHANNEL - 125 - SSL Handshake from Client Failed
CORE - 169 - Connection was broken by either client or server.

Scott McDonald Citrix Employees

Scott McDonald
  • 1,837 posts

Posted 14 August 2009 - 04:48 PM

Joseph, do you know what version of the ICA client the user has installed?

Ulrik Andreassen Members

Ulrik Andreassen
  • 19 posts

Posted 16 September 2009 - 12:25 PM

I have exactly the samme error message on my CSG3.1 running on a Windows 2003 server.

First error (event id 125):
SSL handshake from client failed.
And then (event id 127):
SSL library error 47 on *.domain-name-removed.here:443 with client 192.168.ip-removed.1:An unclassified SSL network error occurred. (error code: error:1407609B:lib(20):func(118):reason(155)).

Google doesn't give many results searching for this error...

My XenApp 5.0 is running on Windows 2008 and WI on a separate Windows 2008 server.

Can anybody give me a clue to what could be wrong?


Andrew Saenz Members

Andrew Saenz
  • 5 posts

Posted 24 June 2010 - 08:21 PM

Having the same issue as above. Only certain users are having this problem. Everyone else is working fine.

Anybody from Citrix have any ideas???

Sam Jacobs CTP Member

Sam Jacobs
  • 6,729 posts

Posted 24 June 2010 - 09:10 PM

DId you by any chance clone the XenApp server(s) that you are using for your STA's?
If so, check to see if the STAID's might be the same. If they are not unique, that could definitely cause problems.


Andrew Saenz Members

Andrew Saenz
  • 5 posts

Posted 28 July 2010 - 03:01 PM

@Sam Jacobs - No recloning of machines.

This is only happening with one set of clients from a specific location. Does anyone know of a client side problem that would cause the above errors.

BTW - running latest client

Edited by: Andrew Saenz on Jul 28, 2010 11:01 AM

Andrew Saenz Members

Andrew Saenz
  • 5 posts

Posted 11 January 2011 - 04:08 PM

I am still having this issue if anyone has anything to add.

RaviKumar Vadivel Members

RaviKumar Vadivel
  • 12 posts

Posted 23 January 2011 - 08:39 AM

Could you please try upgrading SG to latest version.I did not see any error after upgrade in my environment.


Edited by: vsreeravikumar on Jan 23, 2011 3:41 AM