Citrix SSL woes

[athelu]

I am trying to setup a test citrix environment, and it is driving me crazy. We want to offer (primarily) the web interface to our users.

i have 3 servers in the mix

dc1 -
2003 AD Server
TS license server

present-
Windows srvr 2003
citrix 4.0 presentation server
Office 2003

web1-
Windows Server 2003
IIS 6.0
Certificate Authority services
Citrix License Server
Citrix Access console
Citrix Web Interface


I am able to pull up the web interface and login fine. I even see the published office applications. however, when i launch one of them i get the following error:

"Cannot connect to the citrix metaframe server. The citrix ssl server you have selected is not accepting connections."


I thought that this might have been a problem with windows CA and ssl, so i removed the ssl cert, uninstall the site, and readded it. I still received the same error.

I then tried to connect from the presentation server itself to try to rule out the web gateway. i used the program neighborhood client. I then received an error regarding the ssl relay not being setup properly (which i am not using) and ssl error 40.

any help would be greatly appreciated.

 

[ascotta]

You have not got a Secure Gateway In there or a Secure Ticket Authority

[blue] Oh you know, just doing what I do.[/blue]

Cheers
Scott

 

[athelu]

no, we dont have either yet. This test environment is not exposed to the internet yet, but i had planned on putting the secure gateway on the same server as the web interface.

 

[ascotta]

Its the secure gateway that does the SSL, and your web interface is trying to play https, I think and cannot encrypt.

[blue] Oh you know, just doing what I do.[/blue]

Cheers
Scott

 

[athelu]

just curious - Does the presentation server in the deployment i mentioned above require IIS to be installed?

 

[ascotta]

No it does not, but you will have to tell the system when you install which port the XML service will run on.

[blue] Oh you know, just doing what I do.[/blue]

Cheers
Scott

 

[athelu]

yes, i did that. what is odd however, is that i have now installed IIS on the presentation server (and an ssl cert) and now things are working. This is really bizarre. I would like to try to figure out what fixed it.

 

[ascotta]

probably the certificate though how you would apply one without IIS ?

[blue] Oh you know, just doing what I do.[/blue]

Cheers
Scott