Asterisk Manager Interface Not Working

Asterisk Asterisk APIs
1

Php AMI is working in terms of login and various commands such as sip show peers and etc. But when applying some ami actions such as Redirect/ Hangup and etc, its not working. Any idea on it? or maybe, where can i find AMI logs so that i can find the errors?

2

You need to provide some technical information and diagnostic output (from the console) plus possibly the error log from your php server.

I am not sure, which PHP AMI package you are using, but I tested the most popular one a couple of years ago. This package required a lot of additional work to make it stable and run with current php versions. You might have a problem with your AMI requests, or a configuration problem, or a source code problem, or a php version problem, and, as usual, some other problem.

In the end I preferred to write my own little socket lib to communicate with AMI…

3

Stop using library, write your code from scratch is easier and you will have control of what you are doing. here you have a quick sample code.

<?php

//http:/127.0.0.1/cmd.php?cmd=queue%20show%20support

$command=$_GET['cmd'];


$socket = fsockopen("127.0.0.1","5038", $errno, $errstr,60);
      if (!$socket){
        echo "$errstr ($errno)\n";
        }else{
            fputs($socket, "Action: Login\r\n");
            fputs($socket, "UserName: arodrigue\r\n");
            fputs($socket, "Secret: mypass2\r\n\r\n");

            fputs($socket, "Action: Command\r\n");
            fputs($socket, "Command: $command\r\n\r\n");

            fputs($socket, "Action: Logoff\r\n\r\n");
           while (!feof($socket)){
               echo fgets($socket).'<br>';
            }
            fclose($socket);
            }
?>
4

Debugging AMI is pretty straight forward, just temporarily disable encryption [a] and capture the traffic between the host running the script and the Asterisk box on that port. Its plain text body messages, so it will be clear.

Same as others have said, to start, I suggest you write your own small library. It may sound couinter-intuitive, but it is the best way. Then you can use a more complete one and will have the chops to debug the library if you have to.

Cheers!

[a] manager.conf :: tlsenable=no

5

No need to disable encryption. Wireshark can decrypt captured tls traffic if given the private key ```
tlsprivatekey=/tmp/private.pem

https://wiki.wireshark.org/TLS#tls-decryption
6

Totally, I was just trying to make things simpler for him but you are correct. I was thinking about him using ngrep or something simple, but it he wants to use wireshark, then sure.

8

I thought this idea that the TLS private key is enough to decrypt the communication was too good to be true, and I was right. From the Wireshark Wiki :

Wireshark supports TLS decryption when appropriate secrets are provided. The two available methods are:

Basically, the second one is not very likely to work.

1 Like
9

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.