The Citrix Product Documentation site is the home of Citrix documentation for IT administrators and developers. Download Citrix Workspace App, Citrix ADC and all other Citrix workspace and networking products. Receive version updates, utilities and detailed tech information.
What exactly is Citrix Server?
Both Citrix Virtual Apps and Citrix Virtual Apps and Desktops come in three different editions with different features and pricing structures:
Organizations need to search through each product edition to work out which features best suit their purpose. Moreover, additional components such as Citrix Provisioning Services (PVS) and Citrix Director for advanced features should be purchased for an improved user experience.
Another challenge is that the installation of Citrix products may be complicated. Often a certified professional is needed to install and configure the product, plus multiple components need to be configured for complete virtualization infrastructure.
Additionally, a Microsoft SQL database is necessary to maintain a healthy Citrix infrastructure. As there can be a multitude of software and hardware components within the Citrix infrastructure, monitoring it may be challenging.
Also, SQL Server pricing may be costly and complex for organizations. The Per Core option pricing model in the SQL server is too high for organizations that want to scale up their SQL instances.
Microsoft Dynamics 365. Agility without limits. Adapt and innovate with the only portfolio of business applications that empowers your organization to deliver operational excellence and delight every customer. Learn how Watch overview.
An overly complicated Citrix infrastructure is also challenging when it comes to delivering and maintaining business continuity. Given the large number of components required to deploy Citrix systems and the many failure points, an organization cannot provide high availability and disaster recovery for its assets.
Symptoms or Error
When attempting to connect to an Application or Desktop using Citrix Receiver for Windows 4.7 or Citrix Receiver for Mac 12.5, or Receiver for Android 3.12.2/3.12.3 or Citrix Receiver for Linux 13.6, you may see these errors.
- Error “The Remote SSL peer send a handshake failure alert”
- Error “Cannot connect to the Citrix XenApp Server. SSL Error 4: The operation completed successfully” or
- Error “Cannot connect to the Citrix XenApp Server. SSL Error 47: An unclassified SSL network error occurred”
- Error “TLS handshake failure, the TLS version configured may not match the version used by the server.”
- Error “General problem”
Citrix has identified a behavior with Receiver for Windows 4.7, Receiver for Mac 12.5, Receiver for Android 3.12.2/3.12.3, and Receiver for Linux 13.6, which prevents connections via some specific NetScaler firmware versions. The following table covers the NetScaler builds which are affected.
|Release train||Affected Builds||Notes|
|10.5||50.10, 51.10, 52.11||Interoperability issue is found on all NetScaler MPX and SDX* appliances on these builds.|
|10.1||124.13, 125.9, 126.12, 127.10, 128.8, 129.11, 129.22, 130.10, 130.11, 130.13, 131.11, 132.8, 133.9, 134.9|
|10.1.e||124.1308.e, 126.1203.e, 127.1007.e, 128.8003.e, 129.1105.e, 130.1302.e|
- No interoperability issue found with NetScaler VPX and FIPS appliances.
- All NetScaler 12.0/11.1/11.0 builds are safe from interoperability issue.
If you are using any of the above mentioned builds, Citrix recommends to upgrade to the latest build in each respective release. For example if you are using Netscaler 10.5 Build 50.10, you should upgrade to Netscaler 10.5 Build 65.11
|Release train||Recommended build||Release date|
|10.5||65.11||Feb 5, 2017|
|10.5.e||60.7004.e||Mar 31, 2016|
|10.1||135.12||Oct 24, 2016|
|10.1.e||10.5 65.11||Feb 5, 2017|
Free Download Citrix 4.12
The issue is due to a defect in some builds of NetScaler where SSL handshake fails if a client hello message includes an ECC extension but the NetScaler appliance does not support any of the ECDHE ciphers in the cipher list sent by the client. The handshake fails even if the list contains some non-ECDHE ciphers that are supported.
Receiver for Windows 4.7, Receiver for Mac 12.5, Receiver for Android 3.12.2/3.12.3 and Receiver for Linux 13.6 introduce these ECDHE ciphers which trigger this defect.
- TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 and
CTX224709 - Error: 'You have not chosen to trust '..' When Launching Applications Using Receiver Through NetScaler Gateway