SSL Error: 128-bit SSL support is available in the High Encryption pack - Workspace version 22.11.0.19

[Nate Go]

Around the first of November my client stopped working on Ubuntu 20.04 - this client has been working perfectly on this device since 2017. When launching an ICA file via browser / portal, the citrix launch window just pops up and disappears after a few seconds without explanation or error message.

 

When launched from command line I receive this rather unhelpful error message: "SSL error 128-bit SSL support is available in the High Encryption pack or Internet Explorer versions with a Cipher Strength of 128-bit.". I'm guessing this issue doesn't really have anything to do with not having 128-bit SSL support...

 

 

I've tried bringing this issue up with my organization's IT support - they flat out refuse to support / troubleshoot anything with Linux.. Which is a shame, because Citrix has a fully supported Linux client, and as previously mentioned it has been working great since 2017.

 

Command line output, ICAClient.log output, and system info below

 

$ /opt/Citrix/ICAClient/wfica -icaroot /opt/Citrix/ICAClient /tmp/*.ica
[W]==> CSDKInitialise:96> (C)2021 Citrix CryptoSDK v14.2.2.0 (OpenSSL 1.1.1n 15 Mar 2022 (Citrix FIPS-capable)) built on Mar 24 2022 14:07:08
[W]==> initialiseSSLSDKWithParameter:168> (C)2021 Citrix CryptoKit v14.2.2.0 (OpenSSL 1.1.1n 15 Mar 2022 (Citrix FIPS-capable)) built on Mar 24 2022 14:07:13
[W]==> initialiseSSLSDKWithParameter:199> SSLSDK initialized WITHOUT smartcard support. Compliance Mode is OPEN
[W]==> ocspStaplingLeafCheck:1196> SSL_get_tlsext_status_ocsp_resp failed!

 

$ tail /var/log/citrix/ICAClient.log
2022-11-20 11:18:32.627 [LIBS] <P4065646> citrix-wfica: Value of cl_argv[0] : /opt/Citrix/ICAClient/wfica
2022-11-20 11:18:32.627 [LIBS] <P4065646> citrix-wfica: Value of cl_argv[1] : -icaroot
2022-11-20 11:18:32.627 [LIBS] <P4065646> citrix-wfica: Value of cl_argv[2] : /opt/Citrix/ICAClient
2022-11-20 11:18:32.627 [LIBS] <P4065646> citrix-wfica: Value of cl_argv[3] : /tmp/3a9361b0-8288-41f0-9eb5-9f8e420524f1.ica
2022-11-20 11:18:32.662 [LIBS] <P4065646> citrix-wfica: ReadINIConfig() exiting
2022-11-20 11:18:32.662 [ALL] <P4065646> citrix-wfica: Called NCSXMLanguageInit: language is EN UTF-8, codepage is 1252
2022-11-20 11:18:32.730 [WD] <P4065646> citrix-wfica: Opened and wrote serial number file.
2022-11-20 11:18:32.776 [TD] <P4065646> citrix-wfica: WSTCP:resolve name ;10;STA686302342;874A87546383A993A3729BE32D9D90
2022-11-20 11:18:32.779 [TD] <P4065646> citrix-wfica: SSLconnect enter: cs=0x301be720, context=0x301b7ba0
2022-11-20 11:18:33.191 [EUEM] <P4065646> citrix-wfica: VDEUEM: Insufficient Input buffer size: 0 bytes. Required buffer size: 48 bytes
2022-11-20 11:18:33.191 [EUEM] <P4065646> citrix-wfica: VDEUEM: DriverInfo failed. rc = 0x3ec
2022-11-20 11:18:33.191 [IME] <P4065646> citrix-wfica: VDIME: Insufficient Input buffer size: 0 bytes. Required buffer size: 48 bytes
2022-11-20 11:18:33.191 [MMVD] <P4065646> citrix-wfica: VDMM: Insufficient Input buffer size: 0 bytes. Required buffer size: 50 bytes
2022-11-20 11:18:33.191 [MMVD] <P4065646> citrix-wfica: VDMM: DriverInfo failed. rc = 0x3ec
2022-11-20 11:18:33.533 [TD] <P4065646> citrix-wfica: Not connected
2022-11-20 11:18:33.533 [VDCAM] <P4065646> citrix-wfica: DriverClose: deallocate the data buffers device: 1
2022-11-20 11:18:34.534 [EUEM] <P4065646> citrix-wfica: VDEUEM: DriverClose failed. rc = 0x3fe2

 

$ apt info icaclient

Package: icaclient

Version: 22.11.0.19
Status: install ok installed
Priority: extra
Section: utils
Maintainer: Citrix Systems, Inc. <debian.package.support@citrix.com>
Installed-Size: 426 MB
Pre-Depends: debconf (>= 0.5)
Depends: libc6 (>= 2.13-38), libice6 (>= 1:1.0.0), libgtk2.0-0 (>= 2.12.0), libsm6, libx11-6, libxext6, libxmu6, libxpm4, libasound2, libstdc++6, libidn11 | libidn12, zlib1g
Recommends: libglib2.0-0 (>= 2.12.0), libgstreamer-plugins-base0.10-0 (>= 0.10.15), libgstreamer0.10-0 (>= 0.10.15), libspeex1, libvorbis0a, libvorbisenc2, libcanberra-gtk-module, gstreamer1.0-libav (>= 1.2.0), gstreamer1.0-plugins-bad (>= 1.2.0), pulseaudio, libwebkit2gtk-4.0-37
Suggests: libpcsclite1
Homepage: http://www.citrix.com
Download-Size: unknown
APT-Manual-Installed: yes
APT-Sources: /var/lib/dpkg/status
Description: Citrix Workspace app for Linux
Citrix Workspace lets you access your enterprise files, applications, and
desktops from your favorite device wherever you are. Just ask your IT
department how to get started.

 

$ cat /etc/issue

Ubuntu 20.04.5 LTS \n \l

 

$ uname -a

Linux findumonde 5.15.0-52-generic #58~20.04.1-Ubuntu SMP Thu Oct 13 13:09:46 UTC 2022 x86_64 x86_64 x86_64 GNU/Linux

[Jeff Riechers]

I would check to see if they have all the proper certificates bound on their site.  It could be the certs aren't chained correctly.  Or they switch the certificate to a store that you don't have on your ubuntu install.

 

Are they going through Storefront, or NetScaler Gateway?