Vicibox ver 4 and https://

[bghayad]

Hello;

VERSION: 2.4-309a, BUILD: 110430-1642, GoAutoDial CE 2.1, 2.6.18-238.9.1.el5.goPAE (SMP), Intel(R) Core(TM) i7-3770 CPU @ 3.40GHz, Single Machine

I need to use https with vicibox as I am installing it on the machine, meanwhile I am only able to browse using http.

Is there an easy way to enable https or the only required thing is to enable https for apache2?
About the certificate that is required for https, does it come with vicibox (where I can find it?) or I have to get a one?

Regards
Bilal

[gardo]

I highly recommend installing the latest GoAutoDial ISO (v3.0 RC1a). HTTPS is enabled by default.

[bghayad]

Hello Gardo;

Regarding to Goautodial ISO version 3.0 RC1a:

1) As meanwhile I am running goautodial 2.1, how I can upgrade to version 3?
2) Which astguiclient is supporting? 2.6 or 2.8?
3) Does it work with asterisk 1.8.21?

Regards
Bilal

[gardo]

We'll be posting instructions on how to upgrade from 2.1 to 3.0 later.

It's based on the latest Vicidial 2.4 RC2 (which uses Asterisk 1.4.X). Unless you need a particular feature from Asterisk 1.8 outside Vicidial, then there is no point in using Asterisk 1.8.

[bghayad]

Ofcourse I need asterisk 1.8, also vicidial ver 2.4 is facing a problem in the ON-hook Caller I'd. Actually we don't see the caller I'd at the agent phones and the okay solution to upgrade to newer vicidial version 2.6 or 2.8

Regards
Bilal

[mflorell]

gardo, 2.4 RC2 is not the latest version, the latest version is 2.7 RC1, which is fully compatible with Asterisk 1.8.21.

[bghayad]

Why 2.7rc1 is the latest version? I installed vicibox 4.0.3 and I found the vicidial version is 2.8

But the question is:
Is 2.8 compatible with asterisk 1.8?

Regards
Bilal

[mflorell]

2.8 is compatible with Asterisk 1.8. We are separating the releases now by a different version number. Vicidial 2.6 was SVN-development, Vicidial 2.7 is a release branch, Vicidial 2.8 is SVN-development again, and so on. We did this because of how many people we had on the previous 2.4 version that were really on the 2.4 SVN-development version before the 2.4 release. This removes that confusion.

Vicidial 2.8 has everything in the 2.7 RC1 release does, and a few more features. Vicidial 2.7 will not add any more features, it is a feature-frozen branch now. Vicidial 2.8 will keep adding new features for probably a year or so until Vicidial 2.9 is branched off.

[gardo]

Matt,

What happened to the 2.4 series? I don't think I saw a stable final release aside from 2.4 RC2.

gardo, 2.4 RC2 is not the latest version, the latest version is 2.7 RC1, which is fully compatible with Asterisk 1.8.21.

[mflorell]

Almost none of our clients use the release branches, they are all on some svn/trunk version. The releases at this point are mostly just a stopping point to do manuals updates, other language builds and to have a "stable branch" for those that want to work off of something that won't have any database or feature changes. We will maintain most bug fixes on a stable release for a little while, but with svn/trunk being as stable as it is, the branches don't get much attention once they are created.

[bghayad]

I am trying to enable the https on apache2 at the vicibox 4.0.3, but I am failing. I believe my problem is mainly related to the certificates, as I used two methods (and in both cases I failed) to generate the certificate. The first one is using gensslcert and I was sure that the server name is same as placed in the vhost-ssl.conf. Also I used openssl method without any success.

Did anyone tried to enable the https on the apache2 at vicibox 4.0.3 and had experience in this thing so he/she can help me or giving me a reference for this?

Regards
Bilal

[williamconley]

not related to vicidial at all. try doing this with a stock LAMP install of opensuse and see if you have the same problem. after you get it working in stock OS with apache, the same technique will likely work with vicibox 4.X

we've got ssl working on many client boxes without a problem ... but this is not a vicidial related issue at all as vicidial does not require or benefit from ssl.

[bghayad]

I know that it is not vicidial issue at all. But I was thinking to chk because maybe the one who succeeded to make it working on the box, he can help me to know where is the missing point.

[williamconley]

an interesting concept ... but since you did not post anything regarding what you tried, how could anyone possibly know what you missed? hm ...

(ie: Detailed command line execution and .conf file contents and package additions ...)

[bghayad]

OK thanks a lot.


Do I have to have a real domain (http://www.mydomain.com)? Because I added http://www.anaskw.com to the hosts.conf as shown below, I used http://www.anaskw.com to create the certificate (again, it is not registered domain, so it is not reachable if you ping it).

anaskw:/etc # vi hosts

Code: Select all

192.168.0.5     http://www.anaskw.com

And I just put the email bilal.ghayad@anaskw.com which is not existed.

To generate a certificate, I used openssl command (reference link: http://www.server-world.info/en/note?os ... r_11&p=ssl), so I have the following files:

Code: Select all

anaskw:/etc/apache2/CA # ls -ltr
total 12
-r-------- 1 root root 963 May 28 16:24 server.key
-r-------- 1 root root 781 May 28 16:25 server.csr
-r-------- 1 root root 985 May 28 16:27 server.crt
You have new mail in /var/mail/root
anaskw:/etc/apache2/CA #

vi /etc/apache2/default-server.conf

Code: Select all

DocumentRoot "/srv/www/htdocs"

<Directory "/srv/www/htdocs">
Options None
AllowOverride None
Order allow,deny
 Allow from all
</Directory>

Alias /icons/ "/usr/share/apache2/icons/"

<Directory "/usr/share/apache2/icons">
 Options Indexes MultiViews
 AllowOverride None
 Order allow,deny
 Allow from all
</Directory>

ScriptAlias /cgi-bin/ "/srv/www/cgi-bin/"

# "/srv/www/cgi-bin" should be changed to whatever your ScriptAliased
# CGI directory exists, if you have that configured.
#
<Directory "/srv/www/cgi-bin">
 AllowOverride None
 Options +ExecCGI -Includes
 Order allow,deny
 Allow from all
</Directory>

<IfModule mod_userdir.c>
UserDir public_html
Include /etc/apache2/mod_userdir.conf
</IfModule>
Include /etc/apache2/conf.d/*.conf
Include /etc/apache2/conf.d/apache2-manual?conf
ServerName www.anaskw.com
ServerAdmin bilal.ghayad@anaskw.com


vi /etc/apache2/ssl-global.conf

Code: Select all

<IfDefine SSL>
<IfDefine !NOSSL>
<IfModule mod_ssl.c>

        AddType application/x-x509-ca-cert .crt
        AddType application/x-pkcs7-crl    .crl

        <IfDefine SYSTEMD>
        SSLPassPhraseDialog exec:/usr/sbin/apache2-systemd-ask-pass
        </IfDefine>
        <IfDefine !SYSTEMD>
        SSLPassPhraseDialog  builtin
        </IfDefine>

        SSLSessionCache         shmcb:/var/lib/apache2/ssl_scache(512000)
        SSLSessionCacheTimeout  600

        SSLMutex  default
        SSLRandomSeed startup builtin
        SSLRandomSeed connect builtin

</IfModule>
</IfDefine>
</IfDefine>


vi /etc/apache2/listen.conf

Code: Select all

Listen 443
Listen 80

<IfDefine SSL>
    <IfDefine !NOSSL>
        <IfModule mod_ssl.c>

            Listen 443

        </IfModule>
    </IfDefine>
</IfDefine>

 NameVirtualHost *:443


anaskw:/etc/apache2/vhosts.d# vi vhost-ssl.conf

Code: Select all

<IfDefine SSL>
<IfDefine !NOSSL>

<VirtualHost *:443>

 
        DocumentRoot "/srv/www/htdocs"
          ServerName www.anaskw.com:443
          ServerAdmin bilal.ghayad@anaskw.com
          ErrorLog /var/log/apache2/error_log
          TransferLog /var/log/apache2/access_log

        SSLEngine on
        SSLProtocol all -SSLv2 -SSLv3
        SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
          SSLCertificateFile /etc/apache2/CA/server.crt
         SSLCertificateKeyFile /etc/apache2/CA/server.key
         SSLCertificateChainFile /etc/apache2/CA/server.crt
         SSLCACertificateFile /etc/apache2/CA/server.crt

       <Files ~ "\.(cgi|shtml|phtml|php3?)$">
            SSLOptions +StdEnvVars
        </Files>
        <Directory "/srv/www/cgi-bin">
            SSLOptions +StdEnvVars
        </Directory>

        CustomLog /var/log/apache2/ssl_request_log   ssl_combined

</VirtualHost>

</IfDefine>
</IfDefine>


Code: Select all

anaskw:/etc/apache2/vhosts.d # rcapache2 restart
redirecting to systemctl
Enter SSL pass phrase for www.anaskw.com:443 (RSA): *********
Job failed. See system logs and 'systemctl status' for details.


anaskw:/etc/apache2/vhosts.d # vi /var/log/apache2/error_log

Code: Select all

[Tue May 28 19:02:34 2013] [info] Init: Seeding PRNG with 144 bytes of entropy
[Tue May 28 19:02:34 2013] [info] Loading certificate & private key of SSL-aware server
[Tue May 28 19:02:34 2013] [info] Init: Requesting pass phrase from dialog filter program (/usr/sbin/apache2-systemd-ask-pass)
[Tue May 28 19:02:42 2013] [debug] ssl_engine_pphrase.c(476): encrypted RSA private key - pass phrase requested
[Tue May 28 19:02:42 2013] [info] Init: Wiped out the queried pass phrases from memory
[Tue May 28 19:02:42 2013] [info] Init: Generating temporary RSA private keys (512/1024 bits)
[Tue May 28 19:02:42 2013] [info] Init: Generating temporary DH parameters (512/1024 bits)
[Tue May 28 19:02:42 2013] [info] Init: Initializing (virtual) servers for SSL
[Tue May 28 19:02:42 2013] [info] Configuring server for SSL protocol
[Tue May 28 19:02:42 2013] [debug] ssl_engine_init.c(465): Creating new SSL context (protocols: TLSv1)
[Tue May 28 19:02:42 2013] [debug] ssl_engine_init.c(603): Configuring client authentication
[Tue May 28 19:02:42 2013] [debug] ssl_engine_init.c(1198): CA certificate: /C=KW/ST=Hawalli/L=Hawalli/O=Safwa/OU=Call Center/CN=www.anaskw.com/emailAddress=bilal.ghayad@anaskw.com
[Tue May 28 19:02:42 2013] [debug] ssl_engine_init.c(666): Configuring permitted SSL ciphers [ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL]
[Tue May 28 19:02:42 2013] [debug] ssl_engine_init.c(750): Configuring server certificate chain (0 CA certificates)
[Tue May 28 19:02:42 2013] [debug] ssl_engine_init.c(420): Configuring TLS extension handling
[Tue May 28 19:02:42 2013] [debug] ssl_engine_init.c(797): Configuring RSA server certificate
[Tue May 28 19:02:42 2013] [debug] ssl_engine_init.c(836): Configuring RSA server private key
[Tue May 28 19:02:42 2013] [info] mod_ssl/2.2.21 compiled against Server: Apache/2.2.21, Library: OpenSSL/1.0.0k


Regards
Bilal

[williamconley]

remove the passphrase requirement

[bghayad]

I did this, still the same.

anaskw:/etc/apache2/CA # rcapache2 restart

Code: Select all

redirecting to systemctl
Job failed. See system logs and 'systemctl status' for details.


anaskw:/etc/apache2/CA # systemctl status apache2.service

Code: Select all

apache2.service - apache
          Loaded: loaded (/lib/systemd/system/apache2.service; enabled)
          Active: failed since Tue, 28 May 2013 21:08:36 +0300; 2min 33s ago
         Process: 5634 ExecStop=/usr/sbin/httpd2 -D SYSTEMD -k stop (code=exited, status=0/SUCCESS)
         Process: 3847 ExecStart=/usr/sbin/start_apache2 -D SYSTEMD -k start (code=exited, status=0/SUCCESS)
        Main PID: 4684 (code=exited, status=0/SUCCESS)
          CGroup: name=systemd:/system/apache2.service


anaskw:/etc/apache2/CA # vi /var/log/apache2/error_log

Code: Select all

[Tue May 28 21:08:36 2013] [info] Init: Seeding PRNG with 144 bytes of entropy
[Tue May 28 21:08:36 2013] [info] Loading certificate & private key of SSL-aware server
[Tue May 28 21:08:36 2013] [debug] ssl_engine_pphrase.c(470): unencrypted RSA private key - pass phrase not required
[Tue May 28 21:08:36 2013] [info] Init: Generating temporary RSA private keys (512/1024 bits)
[Tue May 28 21:08:36 2013] [info] Init: Generating temporary DH parameters (512/1024 bits)
[Tue May 28 21:08:36 2013] [info] Init: Initializing (virtual) servers for SSL
[Tue May 28 21:08:36 2013] [info] Configuring server for SSL protocol
[Tue May 28 21:08:36 2013] [debug] ssl_engine_init.c(465): Creating new SSL context (protocols: TLSv1)
[Tue May 28 21:08:36 2013] [debug] ssl_engine_init.c(603): Configuring client authentication
[Tue May 28 21:08:36 2013] [debug] ssl_engine_init.c(1198): CA certificate: /C=KW/ST=Hawalli/L=Hawalli/O=Safwa/OU=Call Center/CN=www.anaskw.com/emailAddress=bilal.ghayad@anaskw.com
[Tue May 28 21:08:36 2013] [debug] ssl_engine_init.c(666): Configuring permitted SSL ciphers [ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL]
[Tue May 28 21:08:36 2013] [debug] ssl_engine_init.c(750): Configuring server certificate chain (0 CA certificates)
[Tue May 28 21:08:36 2013] [debug] ssl_engine_init.c(420): Configuring TLS extension handling
[Tue May 28 21:08:36 2013] [debug] ssl_engine_init.c(797): Configuring RSA server certificate
[Tue May 28 21:08:36 2013] [debug] ssl_engine_init.c(836): Configuring RSA server private key
[Tue May 28 21:08:36 2013] [info] mod_ssl/2.2.21 compiled against Server: Apache/2.2.21, Library: OpenSSL/1.0.0k


Regards
Bilal

[williamconley]

See system logs and 'systemctl status' for details

[bghayad]

Thanks a lot .. Basically resolved.

I removed the listen 443 in the listen.conf, also when I generated the certificate, I leaved everything on default, and the password I entered it characters (did not put numbers and did not use @ or &, actually I am telling only what I did because I am sure that at least the numbers are not effecting). Then, it worked fine.

Yes, I applied the commands that I was see them in the systemctl status apache2.service

anaskw:/etc/apache2/vhosts.d # systemctl status apache2.service

Code: Select all

apache2.service - apache
          Loaded: loaded (/lib/systemd/system/apache2.service; enabled)
          Active: failed since Wed, 29 May 2013 00:29:04 +0300; 9s ago
         Process: 5634 ExecStop=/usr/sbin/httpd2 -D SYSTEMD -k stop (code=exited, status=0/SUCCESS)
         Process: 25937 ExecStart=/usr/sbin/start_apache2 -D SYSTEMD -k start (c ode=exited, status=0/SUCCESS)
        Main PID: 4684 (code=exited, status=0/SUCCESS)
          CGroup: name=systemd:/system/apache2.service


/usr/sbin/start_apache2 -D SYSTEMD -k start

Code: Select all

(98)Address already in use: make_sock: could not bind to address [::]:443

I googled this and I found that I need to remove the listen 443 in the listen.conf as it is already configured in listen.conf NameVirtualHost *:443 and the <VirtualHost *:443>
in the vhost-ssl.conf.

Thanks a lot.
Regards
Bilal

[williamconley]

good post back. even if off-topic, it may help someone.

[bghayad]

It will help anyone need to enable https on vicibox.

[bghayad]

Hello Garo;

Coming back to goautodial version v3.0 RC1a which has the vicidial 2.4 RC2, does it support the following:

1) On-Hook CID? So we can resolve the caller id problem, as the caller id is not appearing on the IP Phones of the agents when they are getting the calls.
2) About recording and searching on the recording, can I search on the recorded files from the List --> Search on Lead, and after doing my searching, I can find below the files for the recorded calls?

Regards
Bilal

[gardo]

I'm not sure on the on-hook CID feature. Maybe other users can verify which version of Vicidial it is available.

On the lead recording search, it shows the recorded calls by default. So you can download the recording with a click of a mouse.

[mflorell]

The Vicidial 2.7 RC1 release does have more options for the In-Group On-hook CID feature than the version 2.4 that GoAutoDial uses. So you should consider an upgrade.

[gardo]

We'll have 2.7 RC1 out by next week. You can easily upgrade via "yum update" command.

[bghayad]

That is fine .. Thanks gardo. Have u think about using asterisk 1.8?

Dear Matt;

I am facing a problem to have asterisk 1.8 on vicibox 4.0.3, I tried too many things without any success !! It seems that there are dependencies that is required for the channels like sip channel. When I do make menuselect, there is XXX preceded for these channels which means there is a conflict, that is why it is not installed.

My question is: when I have vicibox 4.0.3 with asterisk 1.4 and I need to upgrade for asterisk 1.8, what are the main libraries that is required to install it to be able to install asterisk 1.8? Actually, it is compiling and installing, but I do not find a lot of channels (like chan_sip or chan_gtalk or chan_jingle, ... etc) and all of these channels were having conflict "the XXX" when I ran make menuselect.

The asterisk 1.8 that I am trying to install it is existed in this path:http://download.vicidial.com/beta-apps/asterisk-1.8.21.0-vici-beta.tar.gz

Any special hint?
Regards
Bilal

[mflorell]

You really should have started another thread in the vicibox forum for this.

When you do start that new thread you will need to include all of the steps you are going through to install Asterisk 1.8 since it is not the default.

[bghayad]

Hello Gardo;

Why u do not use vicidial 2.8? It is now available and I am using it from vicibox 4.0.3
Also, Why not to use Asterisk 1.8?

Regards
Bilal

[gardo]

We go for the stable version and not the development versions. As you might have noticed, GOautodial focuses more on the user experience (ease of use and if we can do away with the manual or lessen our dependency on it the better). We have taken out a lot of advance options from our GOadmin UI (which is still accessible via default Vicidial admin UI) which most of our users seldom need (or don't use at all).

Upgrading to Asterisk 1.8 is on the roadmap. There are little difference using Asterisk 1.4.X and Asterisk 1.8.X. Vicidial uses just the basic features of Asterisk. That's one of the reasons why Asterisk 1.4.X was used for the longest time (aside from being very stable - tested and abused by the community). Unfortunately the 1.4.X series has reached it's EOL (end-of-life). So upgrading to 1.8.X might be necessary.

GOautodial is based on CentOS 5.X series and not the 6.X series. Asterisk 1.4.X compiles and build well on CentOS 5.X. Which has at least 4 more years of shelf-life and support. When we switcht to CentOS 6.X then Asterisk 1.8.X is a must.

[bghayad]

Thanks
Why not to use vicidial 2.8?

Regards
Bilal

[gardo]

Please see post above.

[bghayad]

Vicidial 2.8 is stable.

[gardo]

Of course it's stable. However, it's a development version.

[gardo]

Here's the HOWTO for upgrading to Vicidial 2.7 RC1: http://goautodial.org/projects/goautodialce/wiki/UpgradeVicidial27rc1.

[bghayad]

Hello Gardo;

I am running currently GoAutoDial CE 2.1 with vtiger 5.1.0 in one machine.
The link you sent is working only for GOautodial CE 3.0, right? In this case, I have to do a fresh installation for GOautodial CE 3.0.
The question is: how I can transfer the configuration that is existed in GoAutoDial CE 2.1? Is it the required to backup/restore for asterisk database before I do the instructions in the link you provided?
Regarding to the vtiger, what is the vtiger version that is existed with GOautodial CE 3.0? Can I do backup/restore for vtigercrm database or I have to do upgrade for vtiger?
From the other side, when do you expect to have asterisk 1.8?
One more question Do you have an idea if vtiger (or any other CRM) that have the ability to send and receive messages to whatsapp and facebook?
Regards
Bilal

[gardo]

You can upgrade your existing GOautodial CE 2.1 to 3.0 easily. Just follow this HOWTO: http://goautodial.org/projects/goautodialce/wiki/UpgradeCE21to30. It's always recommended to backup your data first.

You can also check our other HOWTOs: http://goautodial.org/projects/goautodialce/wiki/HowTos3.

Upgrading from CE 2.1 to CE 3.0 will preserve your VtigerCRM data and files.

We don't have a timetable for Asterisk 1.8 yet. See my previous posts above for the reasons.

[bghayad]

Hello Gardo;

That is nice .. I am gonna to try it and I will try to take image from the current system so I can restore it in case of any failure. Any special method to take backup (or backup image)?

I know that it is requiring to have CentOS 6.X but as expectation:

When do you expect to have asterisk 1.8?
Have u a plan for asterisk 11? It is because of social media (connecting with gtalk and some other channels)?

Regards
Bilal

[bghayad]

Upgrading from CE 2.1 to CE 3.0 will preserve your VtigerCRM data and files.

I did the upgrade, but I am facing a problem for vtigercrm that when I am adding account or contact (those what I tried until now), and pressing save, then it is generating a web error saying:

Code: Select all

The website encountered an error while retrieving http://10.149.1.130/vtigercrm/index.php. It may be down for maintenance or configured incorrectly.
Here are some suggestions:
Reload this webpage later.
HTTP Error 500 (Internal Server Error): An unexpected condition was encountered while the server was attempting to fulfill the request.

The directories and the files permissions is rwxr-xr-x (which is 755), is it wrong? Why it was working with the goautodial ce 2.1? I did not touch vtigercrm while I was doing the upgrade.

Regards
Bilal

[bghayad]

One more important problem I am facing now after I upgraded for 2.7:

I was need to upgrade, because I need the On-Hook CID, I am not able to find it on goautodial !!!!! It is very important.

This complete thread only for the caller ID and we agreed to upgrade, please help me:

http://vicidial.org/VICIDIALforum/viewt ... 761#p98761

Regards
Bilal

[gardo]

Again, if you need to use the advance features of Vicidial, you can use the default admin interface. I have mentioned this countless of times already for you.