MacBook Pro
OS X 10.5.5
Citrix client Version 10.00.601, OS X.

I just ran some software updates on my Mac. I'm now at 10.5.5. I'm
pretty sure I was just at 10.5.4.
I did select the Java update but now not entirely sure what update
that was. I think it was update 2 for 10.5.

The citrix client was working fine on my Mac before. Now when I
connect to my work site, I log in and when I attempt to open an
application I get:

A local security certificate could not be loaded. (error code: 7)

I read elsewhere to show all expired certificates in keychain and
choose to trust them in trust settings.
I also read to open Java preferences and select a previous version of
Java.
In my Java preferences I have:
J2SE 5.0 32 bit
J2SE 1.4.2 32 bit
Java SE 6 64 bit
J2SE 5.0 64 bit

I don't know why I have 64 bit.
Anyway I moved them all up to the top separately, quit Safari and
opened again but still get the same error.
I have deleted all Citrix files and reinstalled the Client.
I have downloaded Java update 2 for 10.5 and reinstalled.
I still get the error. Below is the whole message:
Anyone have ideas?

A local security certificate could not be loaded. (error code: 7)
at
com.citrix.sdk.security.ssl.ConnectionModel.addCACertificate(ConnectionModel.java)
at sun.reflect.GeneratedMethodAccessor3.invoke(Unknown Source)
at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:
25)
at java.lang.reflect.Method.invoke(Method.java:585)
at com.citrix.client.io.net.ip.m.h(Unknown Source)
at com.citrix.client.io.net.ip.proxy.i.<init>(Unknown Source)
at com.citrix.client.io.net.ip.g.a(Unknown Source)
at com.citrix.client.io.net.ip.o.a(Unknown Source)
at com.citrix.client.module.td.tcp.TCPTransportDriver.t(Unknown
Source)
at com.citrix.client.module.td.TransportDriver.run(Unknown Source)
at java.lang.Thread.run(Thread.java:613)
Caused by: The SSL cryptography library failed. The security
certificate "AOL Time Warner Root Certification Authority 2" has a
public key of length greater than 2048 bit.
at
com.citrix.sdk.security.certificate.X509CertificateLoader.loadCertificates(X509CertificateLoader.java)
at
com.citrix.sdk.security.ssl.ConnectionModel.addCACertificate(ConnectionModel.java)
at sun.reflect.GeneratedMethodAccessor3.invoke(Unknown Source)
at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:
25)
at java.lang.reflect.Method.invoke(Method.java:585)
at com.citrix.client.io.net.ip.m.h(Unknown Source)
at com.citrix.client.io.net.ip.proxy.i.<init>(Unknown Source)
at com.citrix.client.io.net.ip.g.a(Unknown Source)
at com.citrix.client.io.net.ip.o.a(Unknown Source)
at com.citrix.client.module.td.tcp.TCPTransportDriver.t(Unknown
Source)
at com.citrix.client.module.td.TransportDriver.run(Unknown Source)
at java.lang.Thread.run(Thread.java:613)
Caused by: java.lang.IllegalStateException: C=US, O=AOL Time Warner
Inc., OU=America Online Inc., CN=AOL Time Warner Root Certification
Authority 2
at com.certicom.b.a.a.a.v.d(v.java)
at com.certicom.b.a.a.a.v.b(v.java)
at com.certicom.b.a.a.a.v.<init>(v.java)
at com.certicom.b.a.a.a.t.a(t.java)
at com.certicom.b.a.a.a.t.a(t.java)
at
com.citrix.sdk.security.certificate.X509CertificateLoader.loadCertificates(X509CertificateLoader.java)
at
com.citrix.sdk.security.ssl.ConnectionModel.addCACertificate(ConnectionModel.java)
at sun.reflect.GeneratedMethodAccessor3.invoke(Unknown Source)
at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:
25)
at java.lang.reflect.Method.invoke(Method.java:585)
at com.citrix.client.io.net.ip.m.h(Unknown Source)
at com.citrix.client.io.net.ip.proxy.i.<init>(Unknown Source)
at com.citrix.client.io.net.ip.g.a(Unknown Source)
at com.citrix.client.io.net.ip.o.a(Unknown Source)
at com.citrix.client.module.td.tcp.TCPTransportDriver.t(Unknown
Source)
at com.citrix.client.module.td.TransportDriver.run(Unknown Source)
at java.lang.Thread.run(Thread.java:613)

kathryn.chen DeleteThis @gmail.com wrote:
> A local security certificate could not be loaded. (error code: 7)
....
> Caused by: The SSL cryptography library failed. The security
> certificate "AOL Time Warner Root Certification Authority 2" has a
> public key of length greater than 2048 bit.
....
> Caused by: java.lang.IllegalStateException: C=US, O=AOL Time Warner
> Inc., OU=America Online Inc., CN=AOL Time Warner Root Certification
> Authority 2

> Anyone have ideas?

Just one idea:
- Until you have a fixed version of the SSL crypto lib, you could try this:
(a) If you don't need the root certificate, remove it (if you can, save
a backup copy).
(b) If you do need it (because some other certificate depends on it),
you can try to find a certificate with a public key length of 2048 bits
(a public download for the public key is probably available).

(Sorry, I don't know where certificates are stored/managed on OS X.)