OTRS 6.0.x and self-signed certificates doesn't display articles

[kruegerM]

Create a new OTRS 6.0.10 system.
Activate SSL and create a self-signed certificate
Text in articles does not display in Firefox
In IE (11), the article box contains the following:

This content cannot be displayed in a frame

To help protect the security of information you enter into this
website, the publisher of this content does not allow it to be
displayed in a frame.

Being a non-profit, charitable organization; we cannot afford putting all server SSL sites (specially "test" ones) with official certificates.

[christianclavet]

Have you tried using Firefox for checking it? You can define exceptions in it. Did you put OTRS inside a frame of an other page?

[kruegerM]

Firefox doesn't display anything. Using OTRS straight out of the box, no inside other frames, etc.

[kruegerM]

In the standard SSL.CONF file around here is the line

Header always set X-Frame-Options DENY

which was, of course, over-riding the OTRS setting of SAMEORIGIN.

Once that line was commented out - everything works fine.

My apologies for any confusion this may have caused anyone.

M

-- morale of the story - never trust a "company standard" completely - ALWAYS check.

[christianclavet]

Thanks for posting your fix! My setup use SSL and never had this problem.

[kruegerM]

I've also never had a problem with self-signed SSL certs until this version. I realize the database makeup of articles grew significantly since 6.x, but this was driving me crazy. Not sure quite how they changed, but since old article text shows fine, it was only text added after going to 6.0.10 that was not displaying correctly.

At any rate, you can be sure I won't be trusting any "this is the way we've always done it" statements around work without a LOT of scrutiny