Asterisk 15 HTTPS server

Asterisk Asterisk Support
1

Any idea why it’s not firing up?

Here my http.conf :slight :

GNU nano 2.7.4 File: http.conf Modified

[general]
enabled=yes
bindaddr=0.0.0.0
bindport=8088
tlsenable=yes
tlsbindaddr=0.0.0.0:8089
tlscertfile=/etc/asterisk/keys/asterisk.pem
tlsprivatekey=/etc/asterisk/keys/asterisk.pem

When I type http show status I get :
HTTP Server Status:
Prefix:
Server: Asterisk/15.0.0
Server Enabled and Bound to 0.0.0.0:8088

Enabled URI’s:
/httpstatus => Asterisk HTTP General Status
/phoneprov/… => Asterisk HTTP Phone Provisioning Tool
/static/… => Asterisk HTTP Static Delivery
/ari/… => Asterisk RESTful API
/ws => Asterisk HTTP WebSocket

Enabled Redirects:
None.

2

Have you looked at the console to see if it complains at all, be it about binding or the certificates?

3

Actually you might be right, I overlook this two messages,

[Nov 1 12:14:18] ERROR[15226]: rtp_engine.c:2740 ast_rtp_dtls_cfg_parse: dtlscafile file /etc/asterisk/keys/ca.crt does not exist or is not readable
[Nov 1 12:14:18] ERROR[15226]: config_options.c:744 aco_process_var: Error parsing dtls_ca_file=/etc/asterisk/keys/ca.crt at line 35 of

4

No luck,

I was following the WebRTC tutorial using SIPML5 ,
every step until went fine until :
netstat -an | grep 8089

I get nothing, I even recreated the certificates, restarted the server, restarted asterisk, still no https running,
im clueless now

5

Did you look at the console as I mentioned? (At startup would be when such things would show)

6

I did, all seems ok.

The only errors/warnings I see are :

[Nov 1 12:36:49] ERROR[16338]: ari/config.c:312 process_config: No configured users for ARI
[Nov 1 12:36:49] NOTICE[16338]: res_config_ldap.c:1826 parse_config: No directory user found, anonymous binding as default.
[Nov 1 12:36:49] ERROR[16338]: res_config_ldap.c:1852 parse_config: No directory URL or host found.
[Nov 1 12:36:49] ERROR[16338]: res_config_ldap.c:1714 load_module: Cannot load LDAP RealTime driver.
[Nov 1 12:36:49] ERROR[16338]: res_config_pgsql.c:1605 pgsql_reconnect: PostgreSQL RealTime: Failed to connect database asterisk on 127.0.0.1:
[Nov 1 12:36:49] WARNING[16338]: res_config_pgsql.c:1543 parse_config: PostgreSQL RealTime: Couldn’t establish connection. Check debug.
[Nov 1 12:36:49] NOTICE[16338]: cel_tds.c:450 tds_load_module: cel_tds has no global category, nothing to configure.
[Nov 1 12:36:49] WARNING[16338]: cel_tds.c:555 load_module: cel_tds module had config problems; declining load
[Nov 1 12:36:49] WARNING[16338]: cel_pgsql.c:467 process_my_load_module: CEL pgsql config file missing global section.
[Nov 1 12:36:49] NOTICE[16338]: cdr_pgsql.c:531 config_module: cdr_pgsql configuration contains no global section, skipping module load.
[Nov 1 12:36:49] WARNING[16338]: pbx.c:7053 add_priority: Extension ‘Start’ priority 6 in ‘ECO_subVoicemail’, label ‘unavail’ already in use at priority 4
[Nov 1 12:36:49] WARNING[16338]: pbx.c:8683 ast_context_verify_includes: Context ‘ECO_Intermodal’ tries to include nonexistent context ‘ECO_ParkingLot’

ecoPBX*CLI> http show status
HTTP Server Status:
Prefix:
Server: Asterisk/15.0.0
Server Enabled and Bound to 0.0.0.0:8088

Enabled URI’s:
/httpstatus => Asterisk HTTP General Status
/phoneprov/… => Asterisk HTTP Phone Provisioning Tool
/static/… => Asterisk HTTP Static Delivery
/ari/… => Asterisk RESTful API
/ws => Asterisk HTTP WebSocket

Enabled Redirects:
None.
– Contact 0015651b1b4b/sip:0015651b1b4b@192.168.2.203:50621 is now Unknown. RTT: 0.000 msec
ecoPBX*CLI>

7

That is not much output. Is that everything? If you start asterisk with “asterisk -vvvvvvvvvgc” do you get more?

8

In my previous post I only posted where I saw errors or warnings.
I did not even know you could start asterisk the way you just said. I was used to start with ini.d/…

Console has much more now, too much to copy here,
but I think im getting there …see the following :

== Parsing ‘/etc/asterisk/http.conf’: Found
Bound HTTP server to address 0.0.0.0:0
[Nov 1 13:19:31] ERROR[18190]: tcptls.c:408 __ssl_setup: TLS/SSL error loading cert file. </etc/asterisk/keys/asterisk.pem>

9

And Im guessing the problem is ownership.
I just it in another post.

What did make a difference was ownership of the keys. It’s not really discussed, but probably most, including myself, generate them as root user. But on my system at least, asterisk runs as user asterisk. So I got that error as it couldn’t access the keys owned by root. After changing ownership to asterisk it works just as the wiki says. Incidentally, I left /etc/asterisk/keys owned as root, it didn’t seem to care about that.

10

Thanks a lot! you guys are amazing, even you cannot pinpoint the problem you give the best advice what to look at!!!

Running as user 'asterisk’
Running under group 'asterisk’
Connected to Asterisk 15.0.0 currently running on ecoPBX (pid = 19256)
ecoPBX*CLI> http show status
HTTP Server Status:
Prefix:
Server: Asterisk/15.0.0
Server Enabled and Bound to 0.0.0.0:8088

HTTPS Server Enabled and Bound to 0.0.0.0:8089

Enabled URI’s:
/httpstatus => Asterisk HTTP General Status
/phoneprov/… => Asterisk HTTP Phone Provisioning Tool
/static/… => Asterisk HTTP Static Delivery
/ari/… => Asterisk RESTful API
/ws => Asterisk HTTP WebSocket

Enabled Redirects: