1.1) Download and install Elastix 4 RC3 from this link<\/a><\/span><\/p>\n\n\n\n 1.2) We update Asterisk because the version that comes in Elastix 4 RC3 does not have ICE support<\/p>\n\n\n\n 2) INSTALL THE WEBPHONE<\/b><\/p>\n\n\n\n 2.1) Download sipml5-master.zip from https:\/\/github.com\/DoubangoTelecom\/sipml5<\/a> and place the file on the Elastix server under the path \/ var \/ www \/ html<\/span><\/span><\/p>\n\n\n\n 2.2) On the server we execute the following commands.<\/span><\/p>\n\n\n\n 3) CREATE EXTENSIONS<\/b><\/span><\/p>\n\n\n\n Ingresar a Elastix y crear 2 extensiones en el men\u00fa “PBX -> PBX Configuration -> Extensions”.<\/span><\/p>\n\n\n\n I have created 2001 and 2002, taking care to set the following 4 options.<\/span><\/p>\n\n\n\n The 2001 account I will use for the WebRTC phone and the 2002 I will configure it on a desktop softphone. In this case the BRIA.<\/p>\n\n\n\n We apply the changes.<\/p>\n\n\n\n Here comes something tricky and it is that apart from these parameters it is necessary to configure others that FreePBX does not have by default, so we will be forced to put them by hand in the configuration file \/etc\/asterisk\/sip_additional.conf<\/p>\n\n\n\n In the section corresponding to the WebRTC extension (that is, 2001 in our case) we add the following lines:<\/p>\n\n\n\n We also modify the line that configures the transport, including WSS among the available transports. The line should look like this:<\/p>\n\n\n\n [alert style = \\ "green \\"] Note here that these changes WILL BE OVERWRITTEN every time we apply the FreePBX configuration. In Elastix 4 stable we plan to solve this problem, as well as include the Asterisk RPM with ICE support. [\/ Alert]<\/p>\n\n\n\n 4) I CREATE CERTIFICATES FOR SRTP<\/b><\/span><\/p>\n\n\n\n 4.1) I create the folder where the keys will go<\/span><\/p>\n\n\n\n 4.2) I create the certificates<\/span><\/p>\n\n\n\n 4.3) Permissions<\/span><\/p>\n\n\n\n 5) CHANGES IN ASTERISK<\/b><\/span><\/p>\n\n\n\n 5.1) I create the certificates for the embedded Web server that Asterisk brings<\/span><\/p>\n\n\n\n 5.2) Edit the vim \/etc\/asterisk\/http_additionals.conf file<\/span><\/p>\n\n\n\n 5.3) I edit the file \/etc\/asterisk\/sip_general_custom.conf and add the following lines<\/span><\/p>\n\n\n\n 5.4) restart asterisk<\/span><\/p>\n\n\n\n 6) PHONE CONFIGURATION<\/b><\/span><\/p>\n\n\n\n 6.1) WEBPHONE<\/b><\/span><\/p>\n\n\n\n Point the browser to the WebRTC client http:\/\/192.168.88.106\/phone\/call.htm and configure<\/p>\n\n\n\n Note: In my case this (192.168.88.106) is the IP of my Elastix server.<\/em><\/p>\n\n\n\n We press the button that says \\ \u201dExpert mode? \\\u201d And configure the following parameters.<\/p>\n\n\n\n In the previous screen it should be noted that we are using WSS as transport, instead of WS.<\/p>\n\n\n\n\n# rpm -Uvh http:\/\/repo.elastix.org\/elastix\/4\/updates\/x86_64\/RPMS\/asterisk-11.20.0-1.el7.centos.x86_64.rpm\n<\/pre><\/pre>\n\n\n\n
\n# cd \/ var \/ www \/ html # unzip sipml5-master.zip # mv sipml5-master phone\n<\/pre><\/pre>\n\n\n\n
![\"\"](\"https:\/\/neomano.com\/wp-content\/uploads\/2021\/06\/opciones-web-rtc.png\")
<\/figure>\n\n\n\n\ndtlsenable = yes; Tell Asterisk to enable DTLS for this peer dtlsverify = no; Tell Asterisk to not verify your DTLS certs dtlscertfile = \/ etc \/ asterisk \/ keys \/ asterisk.pem; Tell Asterisk where your DTLS cert file is dtlsprivatekey = \/ etc \/ asterisk \/ keys \/ asterisk.pem; Tell Asterisk where your DTLS private key is dtlssetup = actpass; Tell Asterisk to use actpass SDP parameter when setting up DTLS\n<\/pre><\/pre>\n\n\n\n
\ntransport = wss, ws, udp, tcp, tls\n<\/pre><\/pre>\n\n\n
\n# mkdir \/ etc \/ asterisk \/ keys\n<\/pre><\/pre>\n\n\n\n
\n# \/usr\/share\/doc\/asterisk-11.20.0\/contrib\/scripts\/ast_tls_cert -C pbx.mycompany.com -O "My Super Company" -d \/ etc \/ asterisk \/ keys # \/ usr \/ share \/ doc \/ asterisk -11.20.0 \/ contrib \/ scripts \/ ast_tls_cert -m client -c \/etc\/asterisk\/keys\/ca.crt -k \/etc\/asterisk\/keys\/ca.key -C phone1.mycompany.com -O "My Super Company "-d \/ etc \/ asterisk \/ keys -o malcolm\n<\/pre><\/pre>\n\n\n\n
\n# chown -R asterisk.asterisk \/ etc \/ asterisk \/ keys\n<\/pre><\/pre>\n\n\n\n
\n# openssl req -new -x509 -days 365 -nodes -out \/tmp\/foo.pem -keyout \/tmp\/foo.pem\n<\/pre><\/pre>\n\n\n\n
\n[general] enabled = yes enablestatic = no bindaddr = 0.0.0.0 bindport = 8088 prefix = asterisk tlsenable = yes tlsbindaddr = 0.0.0.0: 8089 tlscertfile = \/ tmp \/ foo.pem tlsprivateket = \/ tmp \/ foo.pem\n<\/pre><\/pre>\n\n\n\n
\ntlsenable = yes tlsbindaddr = 0.0.0.0 tlscertfile = \/ etc \/ asterisk \/ keys \/ asterisk.pem tlscafile = \/ etc \/ asterisk \/ keys \/ ca.crt tlscipher = ALL tlsclientmethod = tlsv1\n<\/pre><\/pre>\n\n\n\n
\n# service asterisk restart\n<\/pre><\/pre>\n\n\n\n
![\"\\"Capture\"\/](\"\\"http:\/\/www.neomano.com\/wp-content\/uploads\/2015\/12\/Captura-de-pantalla-2015-12-15-a-las-23.42.34.png\\"\")
<\/a><\/figure>\n\n\n\n![\"\\"Capture\"\/](\"\\"http:\/\/www.neomano.com\/wp-content\/uploads\/2015\/12\/Captura-de-pantalla-2015-12-15-a-las-23.42.52.png\\"\")
<\/a><\/figure>\n\n\n\n
![\"\\"Capture\"\/](\"\\"http:\/\/www.neomano.com\/wp-content\/uploads\/2015\/12\/Captura-de-pantalla-2015-12-15-a-las-23.49.15.png\\"\")
<\/a><\/figure>\n\n\n