SSL Error 59. Using XenApp 5.0 and CAG 4.6.3

jojamie — Tue, 29 May 2012 01:56:27 GMT

I have just installed a new certificate onto the Access Gateway (version 4.6.3). Now when connecting externally I get the following error:

SSL Error 59: The server sent a security certificate identifying "*.NEWBusinessName.org.nz", the SSL connection was to "apps.businessname.org.nz".

The old cert was for "apps.businessname.org.nz"

New new cert is a wildcard "*.NEWBusinessName.org.nz"

I have changed the External FQDN in the Access Gateway to reflect the new certificate.

Now whenever I launch a new application the .ICA file contains SSLProxyName=apps.businessname.org.nz and I get SSL Error 59.

Changing the ICA manually results in the connection working.

Can anyone help me to identify where the issue lies and how to resolve it. I have looked at the Web Interface and I have been unable to find a resolution.

Currently the Web Interface is set to DIRECT access method, and this did work until the new cert was installed.

I have changed this to GATEWAY DIRECT, and the issue remains. If I can change what is generating the ICA file and inserting the old FQDN I am sure it will fix the problem.

Thanks

Citrix Web Interface

SSL Error 59. Using XenApp 5.0 and CAG 4.6.3