A list of articles/blog posts to review, research, or archive
Thanks for reading,
[NOTE: I recently ran into this issue and the webinterface.conf changes mentioned in this Citrix forum post solved my issue. I’m also re-posting a Citrix article that covers the same problem.]
SSL 38 Error is Displayed when Launching Applications
Document ID: CTX128812 / Created On: Apr 26, 2011 / Updated On: Aug 24, 2011
Average Rating: not yet rated
When trying to launch an application using ICA Proxy to XenApp via Access Gateway Enterprise the following error message is displayed:
This is possibly because of licensing restrictions as indicated in the article CTX119980 – SSL Error 38 when Launching Applications using Access Gateway Enterprise Edition
This issue can also be because of problems with Domain Name System (DNS) name resolution. When launching an application, the Access Gateway Enterprise Edition appliance uses the method specified in the WebInterface.conf file for name resolution. The Web Interface generates the ICA file. If the WebInterface.conf file is set to dns-port and DNS resolution is not possible, either because no DNS server is specified in the Access Gateway Enterprise configuration or the appliance being in a DMZ where no DNS server is reachable, then the launch of the application fails with the preceding error message.
The first option to resolve this issue is to specify a DNS server in the Access Gateway Enterprise Edition appliance within the Name Servers pane as shown in the following screenshot:
The second option is to edit the WebInterface.conf file on the Web Interface server for that site, to resolve through ipv4-port rather than dns-port. The default location of the WebInterface.conf file is C:\inetpub\wwwroot\Citrix\sitename\conf\. Replace the sitename with the name of your site; the default sitename for a Web site on Web Interface is /Citrix/Xenapp. The following screenshots are sample screenshots of the WebInterface.conf file:
Restart the IIS Web Server after saving the WebInterface.conf file.
This document applies to:
EdgeSight for NetScaler relies on HTML injections to gather user data. NetScaler 9.3 has a built-in wizard that you can run to configure it to work with EdgeSight for NetScaler. For previous versions of NetScaler, refer to the following CTX article:
CTX126862 – How to Configure a NetScaler Appliance for EdgeSight for NetScaler – Citrix Knowledge Center.