Create a Certificate and Enable HTTPS

Before enabling VitXi WebRTC, ensure that your VitalPBX server is configured with a valid Fully Qualified Domain Name (FQDN) and a trusted SSL certificate.
These steps are crucial for secure communication and for WebRTC to function properly within modern browsers.

Verify Hostname Configuration #

Your server’s hostname must match the FQDN that will be used to generate the SSL certificate.

1. Go to Admin → Network → Network Settings.
2. Under Hostname, enter the same FQDN you plan to use for your certificate (e.g., pbx.yourdomain.com).
3. Save your changes.

⚠️ Important: If the hostname and FQDN do not match, the SSL certificate will not validate correctly and VitXi WebRTC may fail to connect securely.

Generate or Install an SSL Certificate #

Once the hostname is set correctly:

1. Navigate to Admin → System Settings → Certificates.
2. Create or import your SSL certificate.
   • You can generate a Let’s Encrypt certificate for automatic validation, or
   • Upload a custom certificate issued by your preferred Certificate Authority.
3. Save the configuration once the certificate has been created successfully.

Enable HTTPS for the Web Interface #

Next, configure the web server to use HTTPS:

1. Go to Admin → System Settings → HTTP Server.
2. Enable the Force HTTPS Connection option.
3. Select the certificate you created in the previous step.
4. Save and Apply Changes.

Configure the Mini HTTP Server for WebRTC #

To allow VitXi WebRTC to communicate with PJSIP WebSocket, you must also configure the Mini HTTP Server:

1. Navigate to Settings → PBX Settings → Mini HTTP Server.
2. Enable the Mini HTTP service (if not already).
3. Select the same SSL certificate you generated earlier.
4. Save the configuration and click Apply Changes.

Verify the Mini HTTP Server #

Once configured, you can confirm that the Mini HTTP Server is running properly by visiting the following URL in your browser: https://your-domain:8089/httpstatus

If everything is configured correctly, you should see a status page similar to this:

Troubleshooting: Mini HTTP Server Not Accessible #

If the status page does not load or shows an error, perform the following checks:

1. Verify that the Mini HTTP Server service and port 8089 are allowed in the firewall:
   • Go to Admin → Firewall → Services and confirm that the Mini HTTP service is listed and enabled.
   • Then go to Admin → Firewall → Rules and ensure the corresponding rule allows traffic on port 8089.
   • If you have an external firewall, make sure TCP port 8089 is open there as well.
2. If the port is still blocked after these checks, run the following commands from your VitalPBX server terminal to manually enable it:

firewall-cmd --permanent --zone=public --add-port=8089/tcp
firewall-cmd --reload

After applying these commands, reload your browser and revisit https://your-domain:8089/httpstatus. The Mini HTTP Server should now be enabled and working properly.