How to install the Citrix ICA Client with Mozilla

A quick howto on installing Citrix ICA Client under Linux and getting it to connect to a Internet Citrix Secure Gateway (CSG)
note: this was tested on redhat 8 - fedora core 1 or Mandrake 9.0 - 9.1

Installation

Mozilla

Download and Install mozilla

If you have moved mozilla from the default /usr/lib/mozilla-1.x use this script to change where the /usr/bin/mozilla script points to.

Java

Install the blackdown java sdk installation or the sun j2re

Make sure you use blackdown because currently (2003/05/03) the Sun java install is not compiled under gcc3.2.x and fails to load the javaplugin.

Update: you no longer have to install blackdown at the time I first wrote this it was the only java kit that worked with gcc3.2.x compiled mozilla. I am now using the sun java environment.

Use this script to set up the environment for it

Link javaplugin_oji.so to mozilla with this script

Citrix

Install the Citrix ICA Client ( we are up to version seven )

tar -zxvf linuxx86.tar.gz
./setupwfc

Leave the defaults for the installation i.e install to /usr/lib/ICAClient

Set ICA_ROOT and adjust PATH environment vars

Configuration

Certificates

To connect to the secure gateway your ICA client needs to trust the server it is connecting to. This is done by installing a certificate to identify the remote CSG server in the keystore of the Citrix client as follows.
Installing CSG Certificate
  1. Download the certificate (ask your admin or look at the help on the CSG front page).
  2. cp /path/to/cert/name-of-cert.crt $ICA_ROOT/keystore/cacerts/myroot.crt
Note: The certificate must be named "myroot.crt", this certificate must be in DER binary encoding format or DER base 64 Binary format

Mozilla

Update: npica.so now works with mozilla simply symlink it to your $MOZILLA_HOME/plugins folder
    ln -sf /usr/lib/ICAClient/npica.so $HOME/.mozilla/plugins/

The $ICA_ROOT/npica.so plugin doesn't work with Mozilla
To enable mozilla to know what it has to do with application/x-ica content from the CSG and to launch the ICA Client add the following lines to the .mailcap in your home directory or for system wide settings edit /etc/mailcap

application/x-ica; /usr/lib/ICAClient/wfica -file %s; x-mozillaflags= plugin:Citrix ICA


Problems

Problem: I couldn't connect with many SSL Errors: certificates failing to load and many problems
Cause: I'm assuming but it could be the previous ICA install that I had done and edited all the settings so that it wasn't a clean install.
Resolution:

rm -rf ~/.ICAClients
mv /usr/lib/ICAClient /usr/lib/ICAClient.sav
downloaded the ica client from the CSG frontpage and installed it
reinstall ICA


Screenshot

desktop