WebRTC Issues - Is this the right way to go?

FreePBX
1

I am running Asterisk 13.9.1, FreePBX 13.0.190.11, WebRTC Phone Stable Track 13.0.32.2…

I have been waiting a while for WebRTC as a way to temporarily scale up some callers (at home, on demand) when needed. I have been using a fairly reliable IAX2 web client but would like to abandon it due to it’s security problems, compatibility and setup issues.

WebRTC looked like a perfect replacement years ago, then months ago, then lately… each time I revisit, it seems to get a little closer and a few steps backwards. It seems like there are compatibility inconsistencies when I try to get it running (Firefox vs Chrome)… My hope was to use Chrome on Windows/MacOS but I can’t even get the WebRTC dialer to show in the drop down menu… but in Firefox, it is there… and I can make calls! Yeah!.. but, I can’t receive calls? odd…

Anyways, I realize that WebRTC has been a b*tch to implement and has gone through a lot of stages… and the web browsers have been moving targets in trying to keep things running, reliably/consistently… I very seriously tip my hat to the folks fighting this battle…

I imagine that I am doing something wrong, in which case I will start a thread asking questions, but I have to ask if WebRTC on FreePBX is going to be a constant battle? Are others using this with dedicated callers remotely using a web browser and headset? What browser(s)/OS? Good / bad?

2

I use it daily with no issues. Sounds like you are not using UCP with SSL. For WebRTC you need to setup your UCP to use a non self signed SSL cert

3

Thanks for response. Can you confirm the browser and OS you are using?
When I log into my UCP, it is using https with Cert from Let’s Encrypt.

4

Chrome and OS doesn’t matter. Are you connecting on LAN or WAN. If WAN you need to make sure ports for webrtc are opened.

1 Like
5

Hi guys, just leaving this here to take in consideration:

6

Using WAN
Firewall has WebRTC TCP Ports: 8088, 8089
I do have Legacy SIP (chan_sip) disabled in the firewall.
I did have WebRTC Services set to disabled, I have enabled it.
I am using pjsip for the extensions I am testing with (all extensions are pjsip)
I just created a sip extension and have the same results… except fast busy signal for the new extension (no other phones using that extension).

To clarify, Firefox - I have the menu and dialer and can make a call… so it is working. Inbound calls are not.
However using Chrome, there is no menu option for the dialer at all. It’s not there.

After the firewall change, I rebooted the server and restarted browsers and am getting the same results. I disabled the firewall completely, and got the same results.

7

Is this something that should be entered into FreePBX bug tracker? Or do they already know about it?.. this is the thing that I keep scratching my head about… stuff keeps breaking.

8

I seem to be getting this on the inbound calls going to the WebRTC extension…

[2017-01-26 01:05:30] VERBOSE[1524][C-00000054] pbx.c: Executing [s@macro-dial-one:51] Dial(“Local/FMPR-222@from-internal-00000028;2”, “PJSIP/222/sip:[email protected]:5060&SIP/99222,67,trM(auto-blkvm)Ib(func-apply-sipheaders^s^1)”) in new stack
[2017-01-26 01:05:30] WARNING[1524][C-00000054] app_dial.c: Unable to create channel of type ‘SIP’ (cause 20 - Subscriber absent)

9

I do not have those problems. Unless you can give us reproducible steps a bug ticket won’t go anywhere. Maybe someone else here can help out but I am out of ideas.

10

First, there is a User Management bug regarding webrtc here:
http://issues.freepbx.org/browse/FREEPBX-13915

You want a valid TLS cert set up and set to default in Cert Management. The userman bug might mean that the TLS cert shown for webrtc in userman may not be the cert written to sip_additional.conf file. By checking the content of /etc/asterisk/sip_additional.conf, you want to ensure all webrtc extensions (regular extensions prefixed with 99) have lines that look like this:

dtlscertfile=/etc/asterisk/keys/www.example.com.crt
dtlsprivatekey=/etc/asterisk/keys/www.example.com.key

where the domain shown corresponds to your TLS cert. You want to ensure that none were created using the self signed cert on the system. To fix, disable webrtc for the user, and re-enable with the correct certificate.

Browse to UCP using https and chrome, make sure there are no https or cert errors. You should see the webrtc phone. Audio issues may require a STUN server be set up in Settings, Asterisk SIP Settings.

11

We already know about this.

12

I investigated the cert bug and yes, in fact, I was having that problem with the test extension in question. It has been fixed.

I’m not sure if I did something prior to this or not, but now Firefox isn’t loading the dialer (nor is Chrome).

The certs seem fine in both (https/Green and the proper cert from LetsEncrypt), but in Chrome, the debug console indicates:
HTTPS is not enabled for Asterisk
(anonymous) @ jsphp_e0d0c0a….js:129
dispatch @ jquery-1.11.3.min.js:4
r.handle @ jquery-1.11.3.min.js:4
trigger @ jquery-1.11.3.min.js:4
(anonymous) @ jquery-1.11.3.min.js:4
each @ jquery-1.11.3.min.js:2
each @ jquery-1.11.3.min.js:2
trigger @ jquery-1.11.3.min.js:4
(anonymous) @ jsphpg_ec08c25….js:1546
j @ jquery-1.11.3.min.js:2
fireWith @ jquery-1.11.3.min.js:2
x @ jquery-1.11.3.min.js:5
b @ jquery-1.11.3.min.js:5

13

Making some headway… reset https port settings so UCP is on port 1543.

Opened Web on that port and now Chrome is showing the dialer (RED) with
WebSocket connection to ‘wss://freepbx-xunity.xunity.com:8089/ws’ failed: Error in connection establishment: net::ERR_CONNECTION_REFUSED

14

The port (8089) is not opened or “Enable the mini-HTTP Server” is disabled or “Enable TLS for the mini-HTTP Server” is disabled in Advanced Settings

15

Got it working… changed the certs for the mini-http to same as webrtc… dialing in/out works. Will see if I can get this done in a video or something helpful to others.

16

You should not be changing that manually. It gets updated when you set the certificate to default in certificate manager.

17

Unfortunately, it did not change automatically… I also rebooted to see if that would resolve the issue.
As soon as I changed the cert around, it worked.

It was set to:
/etc/asterisk/keys/integration/certificate.pem
/etc/asterisk/keys/integration/webserver.key

I changed it to:
/etc/asterisk/keys/freepbx.domain.com.crt
/etc/asterisk/keys/freepbx.domain.com.key

I can change it back and see if it will automatically switch if I switch the default cert back to old and back to new…

18

Should also say, I noted some issue with password changes in user manager… I had to use the password icon at the user listing for it to stick.

19

The integration is correct. When you select default it copies freepbx.domain.com.crt to /integration/certificate.pem

This is how it’s working for everyone else.

What you should do is delete everything in /etc/asterisk/keys/integration

and then reset your default certificate

20

Hi,

I am not sure if this topic is still open or not, but I would just like to get some help with WebRTC.

I have a valid cert and the WebRTC module is installed, but I dont see WebRTC options under
Admin > User Manager > UCP

Only an option for Phone. Which just gives me dialer to dial out with, which connects but does not work.