Customers who viewed this article also viewed
CTX274587
{{tooltipText}}
Article
|
Configuration
|
{{likeCount}} found this helpful
|
Created:
{{articleFormattedCreatedDate}}
|
Modified:
{{articleFormattedModifiedDate}}
Applicable Products
- Citrix Cloud
- Citrix Virtual Desktops
- Citrix Virtual Apps
- Citrix Virtual Apps and Desktops
Symptoms or Error
Application launch fails with SSL error 70: The server returned an expired security certificate
Solution
Install the AddTrust External CA certificate on the Cloud Connector servers
Problem Cause
Issue was seen on 30th May 2020 when the global certificate for AddTrust External CA expire
Was this page helpful?
Thank you!
Sorry to hear that.
Please provide
{{ feedbackPageLabel.toLowerCase() }} feedback.
Please provide article feedback
Feel free to give us additional feedback!
What can we do to improve this page?
Email address is required
Please verify reCAPTCHA and press «Submit» button
Failed
to load featured products content, Please
try again
.
Hi Guys,
Our entrust certificate for our Windows Ctirix server expired today. I renewed the certificate on the gateway server but we are still getting the SSL ERROR 70 certificate expired message when trying to run any apps.When checking the properties for the certificate, it reads that is it valid from 12/20/2007 to 01/03/2009. The time and date on the server and the clients are all correct. I am at a loss right now as to what else to check or do and any assistance would be greatly appreciated.
Thanks.
CitrixSecurityMicrosoft IIS Web Server
Posted by SaaaS 2017-07-25T15:07:08Z
Hello All,
based on testing,
My certificate has expired and I understand what needs to be done to get it fixed. The only thing is it will take about another day or so.
I wanted to know if there is any immediate local fix that I can perform on my computer to bypass this error ?
Maybe a registry key ?
3 Replies
-
I’m not aware of an over ride as such whilst your expired cert is bound to your gateway/storefront server.
You may be able to generate a self signed certificate through Active Directory Certificate Services or through IIS / Netscaler and bind that instead, however any internal / external clients connecting to this service must trust the certificate and have the appropriate intermediate/root certs on the certificate store otherwise you will be back to square one.
Was this post helpful?
thumb_up
thumb_down
-
Im aware of that, I was doing some research and saw that we can manipulate the registry key to bypass that error. I didnt get further in it and needed some guidance
Was this post helpful?
thumb_up
thumb_down
-
The only reg key I am aware of is the one to allow citrix receiver to communicate over HTTP, but that only takes effect when your going through the initial setup as far as I am aware.
https:/ Opens a new window/support.citrix.com/article/CTX134341
Was this post helpful?
thumb_up
thumb_down
As you may be able to determine from the previous post, I had some excitement while working with a NetScaler last week. Before I experienced SSL Error 38, I had to fix an SSL 70 Error when launching a published application from the Access Gateway site.
In this case, the error had nothing to do with the NetScaler but the resolution required a change to the computer on which I was connecting from. In this example, I was attempting to run an application while connected with an IE 8 browser. I opened IE properties and when to the Content tab and then clicked on Certificates.
Sure enough, there were several Verisign certificates that had expired on 1/7/2004, but the fix was easy enough. I had to install the Update for Root Certificates that can be downloaded as part of Windows Updates or downloaded and installed manually.
If you have any additional problems after applying the root certificate update, it may be necessary to click on the Clear SSL state button found within IE properties on the Content tab.
Open a Case
Open a ticket online for technical assistance with troubleshooting, break-fix requests, and other product issues.
Open a Case Online
Related:
- No Related Posts