GOautodial Open Source Omni-channel Contact Center Suite

Hi,

i made trough this error.

But now i can't login to autodial. I got login error.
I checked all my conf and ut seems good.

It's on vps, with cerbot certificat.

If someone can help me with this thank you.

Hi,

i gonna give you more information :

I take a domain online, and goautodial is uploaded on it.
I can open the page but when i try to login i get Invalid login or password. Please try again.

I looked for a solution on the forum (lot of hour) and they said to check this :

Configuration Files

/var/www/html/php/Config.php
/var/www/html/php/goCRMAPISettings.php
/etc/kamailio/kamailio.cfg
/etc/rtpengine/rtpengine.conf

My /var/www/html/php/Config.php is the same as :

<?php
// database configuration
define('DB_USERNAME', 'goautodialu');
define('DB_PASSWORD', 'goautodialu1234');
define('DB_HOST', 'localhost');
define('DB_NAME', 'goautodial');
define('DB_PORT', '3306');
define('DB_NAME_ASTERISK', 'asterisk');
define('DB_USERNAME_KAMAILIO', 'kamailiou');
define('DB_PASSWORD_KAMAILIO', 'kamailiou1234');
define('DB_HOST_KAMAILIO', 'localhost');
define('DB_NAME_KAMAILIO', 'kamailio');
define('DB_PORT_KAMAILIO', '3306');

// other configuration parameters
define('CRM_ADMIN_EMAIL', 'admin@localhost.com');
?>

My /var/www/html/php/goCRMAPISettings.php :

<?php
define ('gourl', 'https://My public IP/goAPIv2');
define ('goUser', 'goAPI');
define ('responsetype', 'json');

?>

My /etc/kamailio/kamailio.cfg :

#!substdef "!MY_IP_ADDR!My public IP!g" 
#!substdef "!MY_DOMAIN!myDomain.com!g" 
#!substdef "!MY_WS_PORT!8080!g" 
#!substdef "!MY_WSS_PORT!4443!g" 
#!substdef "!MY_MSRP_PORT!9080!g" 
#!substdef "!MY_WS_ADDR!tcp:MY_IP_ADDR:MY_WS_PORT!g" 
#!substdef "!MY_WSS_ADDR!tls:MY_IP_ADDR:MY_WSS_PORT!g" 
#!substdef "!MY_MSRP_ADDR!tls:MY_IP_ADDR:MY_MSRP_PORT!g" 
#!substdef "!MSRP_MIN_EXPIRES!1800!g" 
#!substdef "!MSRP_MAX_EXPIRES!3600!g" 

/* add local domain aliases */
alias="My public IP" 
alias="myDomain.com" 
alias="www.myDomain.com" 

/* uncomment and configure the following line if you want Kamailio to
   bind on a specific interface/port/proto (default bind on all available) */
listen=udp:127.0.0.1:5060
listen=udp:my public IP:5060
listen=tls:my public IP:5061

# ----- rtpengine params -----
modparam("rtpengine", "rtpengine_sock", "udp:127.0.0.1:5066")
modparam("rtpengine", "rtpengine_disable_tout", 20)
#modparam("rtpengine", "db_url", DBURL)

My /etc/rtpengine/rtpengine.conf

table = 0
# no-fallback = false
### for userspace forwarding only:
# table = -1

### a single interface:
interface = My public IP
### separate multiple interfaces with semicolons:
# interface = internal/12.23.34.45;external/23.34.45.54
### for different advertised address:
# interface = 12.23.34.45!23.34.45.56

I put the generated cerbot certificat on the tls.cfg file.
All my dependencies are green when i check the status.
Really i'm lost.
If someone can see some errors on my conf.

Thank you.

Hafedh Gouaida wrote:

Hi,

i gonna give you more information :

I take a domain online, and goautodial is uploaded on it.
I can open the page but when i try to login i get Invalid login or password. Please try again.

I looked for a solution on the forum (lot of hour) and they said to check this :

Configuration Files
[...]

My /var/www/html/php/Config.php is the same as :
[...]

My /var/www/html/php/goCRMAPISettings.php :

[...]

My /etc/kamailio/kamailio.cfg :

[...]

My /etc/rtpengine/rtpengine.conf
[...]

I put the generated cerbot certificat on the tls.cfg file.
All my dependencies are green when i check the status.
Really i'm lost.
If someone can see some errors on my conf.

Thank you.

there is not the problem, to solve the libreries problem you have to avoid 2 of them.

I'm leaving you all libraryes that you really need. Start again and then you will see

yum install -y MariaDB-server MariaDB-devel php70w-mysql php70w-mcrypt php70w-devel php70w-mbstring php70w-common php70w-xml php70w-pear php70w-cli php70w-imap php70w-fpm php70w-gd php70w-opcache php70w-pdo php70w-process php70w php70w-intl php70w-pear.noarch php70w-xmlrpc asterisk-mysql-13.17.2-vici.el7.centos.x86_64 asterisk-perl-0.08-2.go.x86_64 asterisk-voicemail-plain-13.17.2-vici.el7.centos.x86_64 asterisk-devel-13.17.2-vici.el7.centos.x86_64 asterisk-voicemail-13.17.2-vici.el7.centos.x86_64 asterisk-alsa-13.17.2-vici.el7.centos.x86_64 asterisk-sip-13.17.2-vici.el7.centos.x86_64 asterisk-13.17.2-vici.el7.centos.x86_64 asterisk-iax2-13.17.2-vici.el7.centos.x86_64 asterisk-mp3-13.17.2-vici.el7.centos.x86_64 kamailio-tls kamailio kamailio-mysql kamailio-ims kamailio-utils kamailio-websocket kamailio-json perl-Math-Round perl-File-Touch perl-Switch perl-Time-Local ngcp-rtpengine ngcp-rtpengine-kernel ngcp-rtpengine-dkms dkms kernel-devel perl-DBD-mysql perl-Net-Telnet lame httpd mod_ssl screen crontabs mailx net-tools readline readline-devel ncurses ncurses-devel tk tk-devel htop perl-DBI perl-Digest-HMAC perl-YAML perl-ExtUtils-ParseXS perl-NetAddr-IP perl-Crypt-SSLeay perl-Curses perl-DBD-Pg perl-Module-ScanDeps perl-Text-CSV perl-HTML-Template perl-IO-Compress perl-Text-Glob perl-Jcode perl-Test-Script perl-Archive-Tar perl-Test-Base perl-OLE-Storage_Lite perl-Archive-Zip perl-Net-Server perl-Convert-ASN1 perl perl-Compress-Raw-Zlib perl-Digest-SHA1 perl-Data-Dumper perl-Error perl-ExtUtils-CBuilder perl-Test-Tester perl-Parse-RecDescent perl-Spiffy perl-IO-Zlib perl-Module-Build perl-HTML-Parser perl-Net-SSLeay perl-Proc-ProcessTable perl-TermReadKey perl-Term-ReadLine-Gnu perl-Digest-SHA perl-Tk perl-Net-SNMP perl-Test-NoWarnings perl-XML-Writer perl-Proc-PID-File perl-Compress-Raw-Bzip2 perl-libwww-perl perl-XML-Parser perl-File-Remove perl-Parse-CPAN-Meta perl-Set-Scalar perl-Probe-Perl perl-File-Which perl-Package-Constants perl-Module-Install perl-File-HomeDir perl-Spreadsheet-ParseExcel perl-Mail-Sendmail perl-Spreadsheet-XLSX perl-version perl-Crypt-DES perl-URI perl-Net-Daemon perl-IO-stringy perl-YAML-Tiny perl-HTML-Tagset perl-Socket6 perl-BSD-Resource perl-PlRPC perl-IPC-Run3 perl-Text-CSV_XS perl-Unicode-Map perl-Module-CoreList perl-Net-Telnet perl-PAR-Dist perl-Date-Manip perl-JSON perl-Proc-Daemon perl-Spreadsheet-WriteExcel perl-rrdtool sox ntp iftop subversion glibc.i686 mod_fcgid

i hope you can fix the problem

Thank you for your answer.

But i resolved the dependencies problem.
Now all are installed, but can't login to autodial with the default credencials

I recomend you start over again with this guide
https://goautodial.org/boards/3/topics/17752?r=17869#message-17869

is the same that i use, and i'm usin my GAD V4 in this moment with 15 agent online

Good Luck

Thank you i gonna try it again. it's gonna be the 20 times ahah.

Leopoldo Martinez wrote:

I recomend you start over again with this guide
https://goautodial.org/boards/3/topics/17752?r=17869#message-17869

is the same that i use, and i'm usin my GAD V4 in this moment with 15 agent online

Good Luck

Can you explain me this part please :

UPDATE HOSTNAME: DONE I USE NANO

hostnamectl set-hostname xxxxxx.xxxxx.xxx (WHAT I have to put here my IP ?)

vi /etc/hosts
change domain name for actual server ip (xxx.xxx.xxx.xxx complete domain name subdomain only)

127.0.0.1 localhost localhost.localdomain localhost4 localhost4.localdomain4
::1 localhost localhost.localdomain localhost6 localhost6.localdomain6

Whitch one i have to change ? can you give me an exemple plz

A big big big thank you Leopoldo.
All works now event the cert =).

thank you thank you

Your welcome, all that i say was reading this forum. we are here to be helped and help.

could you make work the cert?

Leopoldo Martinez wrote:

Your welcome, all that i say was reading this forum. we are here to be helped and help.

could you make work the cert?

Yes i made it work.
If you want to know how i did, i can put it here after.

Hafedh Gouaida wrote:

Leopoldo Martinez wrote:

Your welcome, all that i say was reading this forum. we are here to be helped and help.

could you make work the cert?

Yes i made it work.
If you want to know how i did, i can put it here after.

yes please, I have to work on it this weekend.

if u can explay step by step i will appreciate it.

Leopoldo Martinez wrote:

Hafedh Gouaida wrote:

Leopoldo Martinez wrote:

Your welcome, all that i say was reading this forum. we are here to be helped and help.

could you make work the cert?

Yes i made it work.
If you want to know how i did, i can put it here after.

yes please, I have to work on it this weekend.

if u can explay step by step i will appreciate it.

No prob gonna do it tonight or tomorrow :)

Hi Leopoldo Martinez below the step by step to install the cert :

First you have to create a new VirtualHost in /etc/httpd/conf.d/ssl.conf:

<VirtualHost *:80>
    ServerName www.FQDN
    ServerAlias FQDN
    DocumentRoot /var/www/html
</VirtualHost>

then install certbot :

sudo yum install certbot python2-certbot-apache

Launch the generation of certificate :

sudo certbot --apache

Set up automatic renew :

echo "0 0,12 * * * root python -c 'import random; import time; time.sleep(random.random() * 3600)' && certbot renew -q" | sudo tee -a /etc/crontab > /dev/null

Change conf

etc/kamailio/kamailio.cfg

modparam("rtpengine", "rtpengine_sock", "udp:"Internal IP address":5066") ---exclude "" same ip as the vps

etc/kamailio/tls.cfg

[server:default]
method = TLSv1
private_key = /etc/letsencrypt/live/DNS/privkey.pem
certificate = /etc/letsencrypt/live/DNS/cert.pem

#private_key = /etc/pki/tls/private/localhost.key --- make sure to mark off these 2 items. so that the system doesn't use them.
#certificate = /etc/pki/tls/certs/localhost.crt

/etc/rtpengine/rtpengine.conf

interface = internal IP address same as the ip of the vps

listen-ng = "Internal IP addres":5066 --- except "" same as the vps

host=+localhost+ ;change me to my FQDN
--- the host is for the registration of the phone to the asterisk. without this you will get a 407 proxy error. My setup is behind a firewall and NAT'd.

Make sure if you are using a CERT that the

vi /var/www/html/php/goCRMAPISettings.php

matches the CERT name.

I think that does it for all the CLI settings that i had to change.

This next stage is on the admin web section of the GOautodial.

Administration-->GoWebRTC DIaler Settings

WebRTC Websocket HOST/IP

External DNS/FQDN -- make sure that if you are using a certificate that the host name of the cert is what is used here. without the DNS you will get that nasty ERR_CERT

WebRTC SIP Host/IP

Internal IP address same as the vps

Kamailio Domain

Internal IP address same as the vps

After all the setting have been changed I find that a system reboot is needed. Once the system is back up check asterisk -vvvr
and see if "sip show peers" has kamailio registered.

Voilà.

If you have question tell me.

In my log i got this :
pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.163 user=root
juin 11 16:43:36 oncc.eu sshd¹¹⁴³⁵: PAM service(sshd) ignoring max retries; 6 > 3
juin 11 16:43:36 oncc.eu sshd¹¹⁴³⁵: PAM 5 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.163 user=root
juin 11 16:43:36 oncc.eu sshd¹¹⁴³⁵: Disconnecting: Too many authentication failures [preauth]
juin 11 16:43:36 oncc.eu sshd¹¹⁴³⁵: error: maximum authentication attempts exceeded for root from 222.186.175.163 port 45872 ssh2 [preauth]

it's an error i fon't know if you can help me with it. I don't know if it's because of the cert. Thank you

i forget you ave to change in kamailio/kamailio-basic.cfg the 127.0.0.1 by your ip

Hafedh Gouaida wrote:

In my log i got this :
pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.163 user=root
juin 11 16:43:36 oncc.eu sshd¹¹⁴³⁵: PAM service(sshd) ignoring max retries; 6 > 3
juin 11 16:43:36 oncc.eu sshd¹¹⁴³⁵: PAM 5 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.163 user=root
juin 11 16:43:36 oncc.eu sshd¹¹⁴³⁵: Disconnecting: Too many authentication failures [preauth]
juin 11 16:43:36 oncc.eu sshd¹¹⁴³⁵: error: maximum authentication attempts exceeded for root from 222.186.175.163 port 45872 ssh2 [preauth]

it's an error i fon't know if you can help me with it. I don't know if it's because of the cert. Thank you

I found the solution :
edit /etc/ssh/sshd_config and set MaxAuthTries 3. Also restart SSH server for the setting to take effect.

Hi Guys,

Thanks for sharing your solutions.

/etc/asterisk/sip-goautodial.conf

[host=+localhost+ ;change me to my FQDN

--- the host is for the registration of the phone to the asterisk. without this you will get a 407 proxy error. My setup is behind a firewall and NAT'd.]

What do i have to put there exactly? 127.0.0.1? My VPS ip? Mi FQDN? "localhost"? o what? that step make confuse....

Hafedh Gouaida wrote:

Hi Leopoldo Martinez below the step by step to install the cert :

First you have to create a new VirtualHost in /etc/httpd/conf.d/ssl.conf:

[...]

then install certbot :
[...]

Launch the generation of certificate :
[...]

Set up automatic renew :
[...]

Change conf

etc/kamailio/kamailio.cfg

[...]
as you followed the same tutorial to install goautodial, your internal ip is the same as the external ip of the vps.

etc/kamailio/tls.cfg
[...]

/etc/rtpengine/rtpengine.conf

[...]
/etc/asterisk/sip-goautodial.conf

[...]

Make sure if you are using a CERT that the

[...]

matches the CERT name.

I think that does it for all the CLI settings that i had to change.

This next stage is on the admin web section of the GOautodial.

Administration-->GoWebRTC DIaler Settings

WebRTC Websocket HOST/IP

External DNS/FQDN -- make sure that if you are using a certificate that the host name of the cert is what is used here. without the DNS you will get that nasty ERR_CERT

WebRTC SIP Host/IP

Internal IP address same as the vps

Kamailio Domain

Internal IP address same as the vps

After all the setting have been changed I find that a system reboot is needed. Once the system is back up check asterisk -vvvr
and see if "sip show peers" has kamailio registered.

Voilà.

If you have question tell me.

Hafedh Gouaida wrote:

Hi Leopoldo Martinez below the step by step to install the cert :

First you have to create a new VirtualHost in /etc/httpd/conf.d/ssl.conf:

[...]

then install certbot :
[...]

Launch the generation of certificate :
[...]

Set up automatic renew :
[...]

Change conf

etc/kamailio/kamailio.cfg

[...]
as you followed the same tutorial to install goautodial, your internal ip is the same as the external ip of the vps.

etc/kamailio/tls.cfg
[...]

/etc/rtpengine/rtpengine.conf

[...]
/etc/asterisk/sip-goautodial.conf

[...]

Make sure if you are using a CERT that the

[...]

matches the CERT name.

I think that does it for all the CLI settings that i had to change.

This next stage is on the admin web section of the GOautodial.

Administration-->GoWebRTC DIaler Settings

WebRTC Websocket HOST/IP

External DNS/FQDN -- make sure that if you are using a certificate that the host name of the cert is what is used here. without the DNS you will get that nasty ERR_CERT

WebRTC SIP Host/IP

Internal IP address same as the vps

Kamailio Domain

Internal IP address same as the vps

After all the setting have been changed I find that a system reboot is needed. Once the system is back up check asterisk -vvvr
and see if "sip show peers" has kamailio registered.

Voilà.

If you have question tell me.

I did each of the steps as it appears in what you left me and at the end kamailio.service fails and does not raise again, try several times and the error persists

[root@xaea12 ~]# systemctl status kamailio
kamailio.service - Kamailio (OpenSER) - the Open Source SIP Server
Loaded: loaded (/usr/lib/systemd/system/kamailio.service; enabled; vendor preset: disabled)
Active: failed (Result: start-limit) since Tue 2020-06-16 01:32:40 UTC; 31s ago
Process: 1817 ExecStart=/usr/sbin/kamailio -DD -P /var/run/kamailio/kamailio.pid -f $CFGFILE -m $SHM_MEMORY -M $PKG_MEMORY (code=exited, status=255)
Main PID: 1817 (code=exited, status=255)

Jun 16 01:32:40 xaea12.xxxxxxx.co systemd¹: Unit kamailio.service entered failed state.
Jun 16 01:32:40 xaea12.xxxxxxx.co systemd¹: kamailio.service failed.
Jun 16 01:32:40 xaea12.xxxxxxx.co systemd¹: kamailio.service holdoff time over, scheduling restart.
Jun 16 01:32:40 xaea12.xxxxxxx.co systemd¹: Stopped Kamailio (OpenSER) - the Open Source SIP Server.
Jun 16 01:32:40 xaea12.xxxxxxx.co systemd¹: start request repeated too quickly for kamailio.service
Jun 16 01:32:40 xaea12.xxxxxxx.co systemd¹: Failed to start Kamailio (OpenSER) - the Open Source SIP Server.
Jun 16 01:32:40 xaea12.xxxxxxx.co systemd¹: Unit kamailio.service entered failed state.
Jun 16 01:32:40 xaea12.xxxxxxx.co systemd¹: kamailio.service failed.
[root@xaea12 ~]# asterisk -rvvvvvvvvvvvvvvvvvvvvvv
Asterisk 13.17.2-vici, Copyright (C) 1999 - 2014, Digium, Inc. and others.
Created by Mark Spencer <markster@digium.com>
Asterisk comes with ABSOLUTELY NO WARRANTY; type 'core show warranty' for details.
This is free software, with components licensed under the GNU General Public
License version 2 and other licenses; you are welcome to redistribute it under
certain conditions. Type 'core show license' for details. =========================================================================
Connected to Asterisk 13.17.2-vici currently running on xaea12 (pid = 1823)
xaea12*CLI> sip show peers
Name/username Host Dyn Forcerport Comedia ACL Port Status Description
Soxxxxsa1/S2xxxx605174716 185.130.xxx.xxx Yes Yes 5060 OK (95 ms)
Soxxxxsa2/Sxxxxx519174700 213.192.xxx.xxx Yes Yes 5060 OK (113 ms)
kamailio 104.248.xxx.xxx Yes Yes 5060 UNREACHABLE
3 sip peers [Monitored: 2 online, 1 offline Unmonitored: 0 online, 0 offline]
xaea12*CLI> exit
Asterisk cleanly ending (0).
Executing last minute cleanups

First you have to create a new VirtualHost in /etc/httpd/conf.d/ssl.conf:

<VirtualHost FQDN:80> Here I Put my fqdn
ServerName www.FQDN XAEA12.XXXXXXXX.CO
ServerAlias FQDN *XAEA12.XXXXXXXX.CO
DocumentRoot /var/www/html
</VirtualHost>

then install certbot : DONE

sudo yum install certbot python2-certbot-apache

Launch the generation of certificate: DONE

sudo certbot --apache

Set up automatic renew: DONE

echo "0 0,12 * * * root python -c 'import random; import time; time.sleep(random.random() * 3600)' && certbot renew -q" | sudo tee -a /etc/crontab > /dev/null

Change conf DONE

etc/kamailio/kamailio.cfg

modparam("rtpengine", "rtpengine_sock", "udp:"Internal IP address":5066") ---exclude "" same ip as the vps DONE

as you followed the same tutorial to install goautodial, your internal ip is the same as the external ip of the vps.
etc/kamailio/tls.cfg

[server:default] DONE
method = TLSv1
private_key = /etc/letsencrypt/live/*XAEA12.XXXXXX.CO*/privkey.pem
certificate = /etc/letsencrypt/live/XAEA12.XXXXXX.CO*/cert.pem

#private_key = /etc/pki/tls/private/localhost.key --- make sure to mark off these 2 items. so that the system doesn't use them. DONE
#certificate = /etc/pki/tls/certs/localhost.crt

/etc/rtpengine/rtpengine.conf

interface = internal IP address same as the ip of the vps

listen-ng = "Internal IP addres":5066 --- except "" same as the vps DONE

/etc/asterisk/sip-goautodial.conf

host=*I DON'T KNOW WHAT HAVE TO PUT HERE* ;change me to my FQDN *I TRIED WITH "LOCALHOST" "104.XXX.XXX.XXX MY IP" "XAEA12.XXXXXXX.XO" AND DOES NOT WORK"
--- the host is for the registration of the phone to the asterisk. without this you will get a 407 proxy error. My setup is behind a firewall and NAT'd.
Make sure if you are using a CERT that the

kamailio/kamailio-basic.cfg the 127.0.0.1 by your ip DONE

vi /var/www/html/php/goCRMAPISettings.php
matches the CERT name. DONE

I think that does it for all the CLI settings that i had to change.

This next stage is on the admin web section of the GOautodial.

Administration-->GoWebRTC DIaler Settings

WebRTC Websocket HOST/IP

External DNS/FQDN -- make sure that if you are using a certificate that the host name of the cert is what is used here. without the DNS you will get that nasty ERR_CERT DONE

WebRTC SIP Host/IP

Internal IP address same as the vps DONE

Kamailio Domain

Internal IP address same as the vps DONE

After all the setting have been changed I find that a system reboot is needed. Once the system is back up check asterisk -vvvr
and see if "sip show peers" has kamailio registered.

Voilà. FAIL

If you have question tell me.

I NEED HELP WITH IT

Hi,

Hope the following steps may help:

dialer.company.com = to your FQDN

1. yum install certbot -y

2. sudo certbot --apache -d dialer.company.com

3. Sample Output:

Saving debug log to /var/log/letsencrypt/letsencrypt.log
Plugins selected: Authenticator apache, Installer apache
Starting new HTTPS connection (1): acme-v02.api.letsencrypt.org
Obtaining a new certificate
Performing the following challenges:
http-01 challenge for dialer.company.com
Waiting for verification...
Cleaning up challenges
Created an SSL vhost at /etc/httpd/conf.d/company-le-ssl.conf
Deploying Certificate to VirtualHost /etc/httpd/conf.d/company-le-ssl.conf

Please choose whether or not to redirect HTTP traffic to HTTPS, removing HTTP access.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
1: No redirect - Make no further changes to the webserver configuration.
2: Redirect - Make all requests redirect to secure HTTPS access. Choose this for
new sites, or if you're confident your site works on HTTPS. You can undo this
change by editing your web server's configuration.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Select the appropriate number [1-2] then [enter] (press 'c' to cancel): 2 (ni-press ko 2)
Redirecting vhost in /etc/httpd/conf.d/company.conf to ssl vhost in /etc/httpd/conf.d/company-le-ssl.conf

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Congratulations! You have successfully enabled https://dialer.company.com

You should test your configuration at:
https://www.ssllabs.com/ssltest/analyze.html?d=dialer.company.com
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

IMPORTANT NOTES:
 - Congratulations! Your certificate and chain have been saved at:
   /etc/letsencrypt/live/dialer.company.com/fullchain.pem
   Your key file has been saved at:
   /etc/letsencrypt/live/dialer.company.com/privkey.pem
   Your cert will expire on 2020-01-14. To obtain a new or tweaked
   version of this certificate in the future, simply run certbot again
   with the "certonly" option. To non-interactively renew *all* of
   your certificates, run "certbot renew" 
 - If you like Certbot, please consider supporting our work by:

   Donating to ISRG / Let's Encrypt:   https://letsencrypt.org/donate
   Donating to EFF:                    https://eff.org/donate-le
4. Set Permissions:

chmod 755 /etc/letsencrypt/archive/
chmod 755 /etc/letsencrypt/live
chmod 644 /etc/letsencrypt/live/dialer.company.com/privkey.pem
5. Edit /etc/kamailio/tls.cfg

Set the following:
private_key = /etc/letsencrypt/live/dialer.company.com/privkey.pem
certificate = /etc/letsencrypt/live/dialer.company.com/cert.pem 
6. systemctl httpd restart
5. systemctl kamailio restart

7. Let’s Encrypt recommends the automatic renew cronjob to run twice a day, to do that add the following line and then save and exit the crontab:

#automatic renew cronjob to run twice a day
* */12 * * * /usr/bin/certbot renew >/dev/null 2>&1

I have not install that package and it seems good.
asterisk-dahdi-13.17.2-vici.el7.centos.x86_64
Dahdi is for rj11 user, not use often.