vicidial.org

Version: 2.14b0.5
SVN Version: 0
DB Schema Version: 1573
DB Schema Update Date: 2019-07-20 23:34:21
Password Encryption: DISABLED - S1 - C1
Auto User-add Value: 101
Recording Prompt Count: 0
Install Date: 2019-07-20
ASterisk 13.X
Scratch install Ubuntu Server


Note: Before proceeding on setting up the webphone i proceed using softphones and all logins are working and able to dial with Sofphones


Hi guys any idea.? i already setup SSL certificate for my Vicidial Server and was able to access my fully qualified Domain by https://PPBX.me.co/vicidial/welcome.php
Then follow the how-to guide for VICIPHONE, enable the TLS and all these settings on http.conf on my asterisk-13.21.0-vici

THERE IS ONLY ONE MINOR DIFFERENCE HERE COZ THE CERTIFICATE I GET IS TWO FILES ON A .CRT AND Private.key - since http.conf only accept .pem i converted and rename this into .pem file and point the configuration onit from the http.conf and also the template of that PHONE

Code: Select all

Edit /etc/asterisk/http.conf
enabled=yes
bindaddr=0.0.0.0
bindport=8088
tlsenable=yes
tlsbindaddr=0.0.0.0:8089
dtlscertfile=/etc/apache2/ssl/PPBX.me.co-certificate.pem
dtlsprivatekey=/etc/apache2/ssl/PPBX.me.co-private.pem

FIREWALL OPEN

Chain INPUT (policy ACCEPT 92578 packets, 8033K bytes)
 pkts bytes target     prot opt in     out     source               destination
    0     0 DROP       all  --  any    any     82.205.17.165        anywhere
99499 8504K fail2ban-ASTERISK  all  --  any    any     anywhere             anywhere
 2081  715K fail2ban-ssh  tcp  --  any    any     anywhere             anywhere             multiport dports ssh
  584 64604 ACCEPT     tcp  --  any    any     anywhere             anywhere             tcp dpt:8089
98704 8427K fail2ban-ASTERISK  all  --  any    any     anywhere             anywhere
 1841  701K fail2ban-ssh  tcp  --  any    any     anywhere             anywhere             multiport dports ssh
    0     0 ACCEPT     tcp  --  eth0   any     anywhere             anywhere             tcp dpt:8089

ENABLE ON MODULES

Edit /etc/asterisk/modules.conf
load=> res_http_websocket.so

STATUS ON ASTERISK

I152*CLI> http show status
HTTP Server Status:
Prefix:
Server: Asterisk/13.21.0-vici
Server Enabled and Bound to 0.0.0.0:8089

Enabled URI's:
/httpstatus => Asterisk HTTP General Status
/phoneprov/... => Asterisk HTTP Phone Provisioning Tool
/static/... => Asterisk HTTP Static Delivery
/ari/... => Asterisk RESTful API
/ws => Asterisk HTTP WebSocket

Enabled Redirects:
  None.

WEBPHONE URL

Webphone URL: https://PPBX.me.co/vicifon/viciphone.php


Web Socket URL : wss://PPBX.me.co:8089/ws

PHONE TEMPLATES: (ENABLE WEB PHONE)

type=friend
host=dynamic
encryption=yes
avpf=yes
icesupport=yes
directmedia=no
transport=wss
force_avp=yes
dtlsenable=yes
dtlsverify=no
dtlscertfile=/etc/apache2/ssl/PPBX.me.co-certificate.pem
dtlsprivatekey=/etc/apache2/ssl/PPBX.me.co-private.pem
dtlssetup=actpass
rtcp_mux=yes

BUT UPON LOGIN SESSION IS NOT ESTABLISHED AND ALSO TEH WEBPHONE IS NOT REGISTER ANY IDEA OR SUGGESTIONS GUYS I SHOULD CHECK.?

Anyone have idea somehow Please..?

There are multiple probable causes for this:

- Have you set the phone template to WebRTC (Or whatever template has the tls config)?
- Is your port 8089 reachable from the exterior (i.e. telnet yourhost 8089)?
- Are you using a WebRTC enabled Browser, preferably Chrome?
- Have you checked the debug console in your browser for errors (you may have old intermediate certificates)?

Hope you find a solution, WebRTC phones for VICIdial are a really nice feature.

- Have you set the phone template to WebRTC (Or whatever template has the tls config)?
- Is your port 8089 reachable from the exterior (i.e. telnet yourhost 8089)?
- Are you using a WebRTC enabled Browser, preferably Chrome?
- Have you checked the debug console in your browser for errors (you may have old intermediate certificates)?

yes i set a Phone template for the WebRTC

Code: Select all

type=friend
host=dynamic
encryption=yes
avpf=yes
icesupport=yes
directmedia=no
transport=wss
force_avp=yes
dtlsenable=yes
dtlsverify=no
dtlscertfile=/etc/apache2/ssl/PPBX.me.co-certificate.pem
dtlsprivatekey=/etc/apache2/ssl/PPBX.me.co-private.pem
dtlssetup=actpass
rtcp_mux=yes

- Yes port is reachable on exterior 8089 (Which i allowed already on the Internal Firewall)
- Im using Google Chrome for login
- how to check the web browser console.?

how to check the web browser console.?

F12. then click on "console" and/or "network" and look for bad things (usually in RED)

This issue was resolved with the help and guidance of Marco Zink , Thank you so much for the guiding with the configuration:

the problem was just with the http.conf on asterisk which port 8089 should not be bind to http instead only with https secured, so i replaced the bind port with 8080 (which I mistakenly set by me), the location directory for the certificate on the setting also (these signs are removed <>), then restart and the webrtc is working already. Thanks again Marco Zink

Excellent postback Ruben. And thanks Marco, too!

If it's not in the other docs, it may be good to post your conf files with your domains changed to "example.com". For the next guy(s).