Valid SSL Certificate Installation Guide Request

Added by Rohit Mathur about 3 years ago

Hi Team,

I would to start by saying AMAZING WORK. GO4 looks like future of Open Source Predictive Dialers.

Now most of us around the world are able to manage GO4 installation using Official Scratch install Wiki

But most of us are struggling when it comes to installation and configuration of a VALID SSL CERTIFICATE.

We all would really appreciate if we can get an official wiki article on for this too. Or some tested step by step instruction in the forum will also help.

I wish you and your product a big success!



Replies (2)

RE: Valid SSL Certificate Installation Guide Request - Added by Steve Turner about 3 years ago

To install Letsencrypt:

yum-config-manager --enable rhui-REGION-rhel-server-extras rhui-REGION-rhel-server-optional
yum install -y certbot python2-certbot-apache
certbot --apache

echo "0 0,12 * * * root python -c 'import random; import time; time.sleep(random.random() * 3600)' && certbot renew" | sudo tee -a /etc/crontab > /dev/null

vi /etc/httpd/conf.d
  • at lines 100. 107 and 116 be sure to have the correct location of the SSL cert, privkey and fullchain (example: SSLCertificateFile /etc/letsencrypt/live/***YOUR FQDN***/cert.pem)
vi /etc/kamailio/tls.cfg
  • at lines 20 and 21 change the cert and privkey locations to the correct ones

REBOOT server

CHECK KAMAILIO is using the correct SSL:
systemctl status kamailio
  • should say active and green. IF red and error/inactive you will need to change the permissions on the /etc/letsencrypt folders and files to allow Kamailio to read the certs.
    Then systemctl restart kamailio and be sure is active and green.

AFTER installing the new SSL certs, you will need to delete the users and phones and recreate all for them to use the new SSL certs.

Good Luck.

RE: Valid SSL Certificate Installation Guide Request - Added by Enzo Zazzaro about 3 years ago

yum install epel-release
yum install certbot python2-certbot-apache mod_ssl
certbot --authenticator webroot --installer apache

remeber this:

chmod 755 /etc/letsencrypt/archive/
chmod 755 /etc/letsencrypt/live
chmod 644 /etc/letsencrypt/live/XXX/privkey.pem

and in kamailio.cfg only

    Go to top