Viciphone Reg. failed error with multi server setup

[richmac2018]

Hi All,

Anyone know on how to setup viciphone using the multi server setup? and what are the requirements?

I tested using single server and it did work using the https fully qualified domain. but when I tried setup using separate asterisk multi server setup if shows Reg. failed error during login it says wrong username and password.

Im using vicibox 9.0.3
2 asterisk server
1 webserver
viciphone: https://github.com/carpenox/CyburPhone.git
firewall off both servers

on the webserver it says on the logs:

Tue Aug 03 2021 08:14:55 GMT+0800 (Singapore Standard Time) | sip.transport | WebSocket wss://edge.sip.onsip.com connected
sip-0.15.11.min.js:1 Tue Aug 03 2021 08:14:55 GMT+0800 (Singapore Standard Time) | sip.transport | sending WebSocket message:

REGISTER sip:44.44.114.200 SIP/2.0
Via: SIP/2.0/TCP 192.0.2.103;branch=z9hG4bK5613012
To: "test1000" <sip:test1000@44.44.114.200>
From: "test1000" <sip:test1000@44.44.114.200>;tag=bnc00qcl4m
CSeq: 5624 REGISTER
Call-ID: pj9b947g60edcometdnv4l
Max-Forwards: 70
Contact: <sip:fbm66uln@192.0.2.103;transport=wss>;expires=600
Allow: ACK,CANCEL,INVITE,MESSAGE,BYE,OPTIONS,INFO,NOTIFY,REFER
Supported: outbound, path, gruu
User-Agent: VICIphone 2.1
Content-Length: 0


sip-0.15.11.min.js:1 Tue Aug 03 2021 08:14:55 GMT+0800 (Singapore Standard Time) | sip.transport | received WebSocket text message:

SIP/2.0 403 Forbidden
Via: SIP/2.0/TCP 192.0.2.103;rport=38085;received=110.54.249.201;branch=z9hG4bK5613012
To: "test1000" <sip:test1000@44.44.114.200>;tag=ddc0651ebf8256bfae230d10564963d3.2d36
From: "test1000" <sip:test1000@44.44.114.200>;tag=bnc00qcl4m
CSeq: 5624 REGISTER
Call-ID: pj9b947g60edcometdnv4l
Server: OpenSIPS (1.11.8-notls (x86_64/linux))
Content-Length: 0

[carpenox]

did you setup separate templates for each server?

[richmac2018]

Hi Carpenox,

No I use 1 template only.

type=friend
host=dynamic
encryption=yes
avpf=yes
icesupport=yes
directmedia=no
transport=wss
force_avp=yes
dtlsenable=yes
dtlsverify=no
dtlscertfile=/etc/certbot/live/test1.test.com/cert.crt
dtlsprivatekey=/etc/certbot/live/test1.test.com/key.key
dtlssetup=actpass
rtcp_mux=yes
nat=yes

On the asterisk server what setup should I set? since I only configure the webserver for the vicibox-certbot
Should I set the certifacate and key on the asterisk server? or what other settings should I look?

Thanks,

[richmac2018]

Also as per inspect element on my browser I can see wrong login details, is this the reason for the wrong login and password?

/agc/ViciPhone/viciphone.php?phone_login=dGVzdDEwMDA=&phone_login=dGVzdDEwMDA=&phone_pass=dGVzdDEwMDA=&server_ip=MzguMTE0LjExNC4yMDA=&callerid=&protocol=U0lQ&codecs=&options=SU5JVElBTF9MT0FELS1ESUFMUEFEX1ktLUFVVE9BTlNXRVJfWS0tRElBTEJPWF9ZLS1NVVRFX1ktLVZPTFVNRV9Z&system_key=

this should be phone_login=test1000 and phone_pass=test1000.

Where did they get those credentials?

Thanks

[carpenox]

take off nat=yes and do you have encrypted passwords enabled? Also you need separate templates for each server with separate SSL certs for each

[richmac2018]

Hi Carpenox,

Still not working. take off nat=yes and the encrypted password is disabled status.

Do you mean for each server with separate SSL certs like this?
for webserver i use domain1.test.com - for webserver (sslcert and sslkey) - web server activated.
for asterisk server do I need to have domain2.test.com - for astersik (sslcert and sslkey) - web server activated also and run the vicibox-certbot?

Is this what you mean?

Thanks

[carpenox]

yes, each server you plan tyo use webrtc on needs to have its own cert and template for it, then when you assign the phone you need to set the template to the proper server