We run citrix internally in the company, with an internal webserver to publish applications and to supply the users with a web interface.
We now have to connect to another company, via their Internet facing webinterface. So we enter the https url and can connect and login to the interface fine and are presented with the applications. When we launch an application, and it's the same for all of them, we get the above mentioned ssl error.
Testing I have changed routing to bypass the proxy and to bypass the firewall but still the same error. If we try from outside of the company, on a company laptop it works fine.
Internally, I'm running XenApp 4.5 featurepack 1 on the servers. The client software installed on my machine is version 11. Our internal webserver is quite old, running the web interface from PSE 3.
Any help would be appreciated as the only thing I can think of at the moment which is stopping it is our own citrix enviroment.
Thanks
Dave
On the WI save the app as an .ica and check the settings:
SSLProxyHost=fq.dn.com etc
Is it correct? and nslookupable?
--Emil
Hi,
Do you use CSG? Did you clone any of your XenApp servers?
The client side IE proxy settings can cause this, specifically the "Automatically detect settings" checkbox. Try clearing this checkbox, close all IE windows, then try reconnecting.
Otherwise, have you already gone through the CTX articles that match this error?
http://support.citrix.com/article/ctx101716
http://support.citrix.com/article/ctx711855 (look for the error text, also make sure your STA IDs are unique and that the WI and CSG configs use the same STAs and that the XML port is correct in all cases)
http://support.citrix.com/article/ctx104490 (less likely, but worth checking)
Other forum posts on the same topic:
http://support.citrix.com/search/forum/?searchQuery="SSL+Server+you+have+selected+is+not+accepting+connections"
http://www.google.ca/search?source=ig&hl=en&rlz=&=&q=%22SSL+Server+you+have+selected+is+not+accepting+connections%22+site%3Abrianmadden.com&btnG=Google+Search&meta=lr%3D&aq=f&oq=
Also, make sure you've applied all the CSG hotfixes (if applicable)
Alan Osborne
President (MCSE, CCNA, VCP, CCA)
VCIT Consulting - Citrix/Terminal Services Remote Desktop Solutions for SMB
VCIT website My Blog
Alan Osborne: Hi, Do you use CSG? Did you clone any of your XenApp servers? The client side IE proxy settings can cause this, specifically the "Automatically detect settings" checkbox. Try clearing this checkbox, close all IE windows, then try reconnecting. Otherwise, have you already gone through the CTX articles that match this error? http://support.citrix.com/article/ctx101716 http://support.citrix.com/article/ctx711855 (look for the error text, also make sure your STA IDs are unique and that the WI and CSG configs use the same STAs and that the XML port is correct in all cases) http://support.citrix.com/article/ctx104490 (less likely, but worth checking) Other forum posts on the same topic: http://support.citrix.com/search/forum/?searchQuery="SSL+Server+you+have+selected+is+not+accepting+connections" http://www.google.ca/search?source=ig&hl=en&rlz=&=&q=%22SSL+Server+you+have+selected+is+not+accepting+connections%22+site%3Abrianmadden.com&btnG=Google+Search&meta=lr%3D&aq=f&oq= Also, make sure you've applied all the CSG hotfixes (if applicable)
This isn't an issue with our citrix farm and configuration, but on the company WE"RE connecting to. We have a couple of other companies where we connect to their web interface and it works OK. Just not for this one.
EmilBeck: On the WI save the app as an .ica and check the settings: SSLProxyHost=fq.dn.com etc Is it correct? and nslookupable? --Emil
Yes to all these. But I have since discovered the issue.
I looked at the setting in their launch.ica, and found the address FQDN for their CSG. This is on a different IP address to the Https site, and this was also trying to make a direct connection, rather than thru our proxy. Therefore our firewall was stopping the traffic, as only the proxy can access the outside world from client pc's. Add an access list rule to point to the csg address and tested OK.
The error message really misleading!