This happens because the ICAClient ignores the system's proxy settings. Instead of using the Web Browser/system's proxy settings, the client tries to connect first to the
SSLProxyHost which is mentioned in the
Try to configure the proxy settings manually.
Edit the file
~/.ICAClient/All_Regions.ini, look for
Change the first two fields:
I'm not sure what to put in there if you have the URL of a proxy server; maybe the documentation can help in this case.
If you can't download the ica file to start the client from the command line, disable the browser plugin and click on the VM button in the Citrix web site. The browser should then download and save the
launch.ica file automatically.
If your client complains that it doesn't have a (root) certificate installed for SSL, you need to put more into
/opt/Citrix/ICAClient/keystore/cacerts/. A simple source for those is Firefox; search your local copy for
*.crt files like
GeoTrust_Global_CA.crt. Copy or link those additional certificates to the
cacerts folder and the client should be able to find and use them.