Alma 9 Vicidial Selfsign Webrtc

I am going to provide step by step guide to integrate, enable and configure the viciphone(a webrtc phone) in vicidial (also applicable to any vicidial based system) using the Self Signed SSL Certificate ,ie without a public-ip and FQDN or accessing the vicidial with internal LAN IP.

1️⃣ Install OpenSSL (if not installed)

sudo dnf install -y openssl

2️⃣ Generate a Private Key

openssl genpkey -algorithm RSA -out selfsigned.key -pkeyopt rsa_keygen_bits:2048

3️⃣ Create a Certificate Signing Request (CSR)

openssl req -new -key selfsigned.key -out selfsigned.csr

It will prompt you for details like:

• Country Name (e.g., IN)
• State or Province (e.g., Gujarat)
• Locality (City)
• Organization Name
• Common Name (Domain, e.g., example.com or your server IP)
• Email Address

You can use localhost or an IP address if needed.

4️⃣ Generate a Self-Signed Certificate

openssl x509 -req -days 365 -in selfsigned.csr -signkey selfsigned.key -out selfsigned.crt

• -days 365 → Valid for 1 year (Adjust as needed)
• selfsigned.crt → SSL certificate file
• selfsigned.key → Private key

5️⃣ Verify the Certificate

openssl x509 -in selfsigned.crt -text -noout

6️⃣ Configure Apache to Use SSL

If you are using Apache:

• Copy the files:

  sudo cp selfsigned.crt /etc/pki/tls/certs/
  sudo cp selfsigned.key /etc/pki/tls/private/
  

• Edit Apache config:

  
  sudo nano /etc/httpd/conf.d/ssl.conf
  

  Update:

  SSLCertificateFile /etc/pki/tls/certs/selfsigned.crt
  SSLCertificateKeyFile /etc/pki/tls/private/selfsigned.key
  

• Restart Apache:

  sudo systemctl restart httpd

7️⃣ Allow HTTPS Traffic

sudo firewall-cmd --permanent --add-service=https 

sudo firewall-cmd --reload

optional:- 

Redirect All HTTP to HTTPS connection

Edit the below mentioned file

     nano /etc/httpd/conf.d/default.conf

Add below line after DocumentRoot as shown below

    DocumentRoot /var/www/html
    Redirect permanent / https://yourserverip/   

Note: its My Redirect IP / https://192.168.1.9/

Asterisk configuration to support webrtc:


Edit /etc/asterisk/http.conf and make sure below settings enabled

   nano /etc/asterisk/http.conf

 [general]
enabled=yes
bindaddr=0.0.0.0
bindport=8088
tlsenable=yes
tlsbindaddr=0.0.0.0:8089
tlscertfile=/etc/pki/tls/certs/selfsigned.crt
tlsprivatekey=/etc/pki/tls/private/selfsigned.key

save the file.

Vicidial configuration

Make sure the vicidial admin interface is accessible via https
https://192.168.1.9/vicidial/admin.php
Step 5.1
Go to ADMIN --> System settings
Change the Wephone URL

    Wephone URL: /PBXWebPhone/viciphone.php

Goto ADMIN -> Servers
configure the External Server IP:
If your server is accessible from outside ie Public ip ,enter your public ip here. if not leave it blank or enter your local server ip.

    Web Socket URL : wss://192.168.1.9:8089/ws

if you are accessing your server with public ip then
Set External Web Socket URL: wss://publicip/fqdn:8089/ws
or Leave it blank