Citrix receiver on linux, GlobalSign Root CA not trusted

ln -s /etc/pki/tls/rootcerts/* /opt/Citrix/ICAClient/keystore/cacerts/
c_rehash /opt/Citrix/ICAClient/keystore/cacerts/

update 2024: CHU cert chain is reported as broken, had to manually install globalsign cert + convert crt to pem