I've tried working through the page you provided, but I've encountered some loose ends. First, in order to use a CA cert, I installed certbot alongside Apache on Ubuntu16.04. This is an AWS EC2, so I don't have many options on which distro I can use. You recommended against Ubuntu; would you elaborate why?
This Apache is on the same machine as FS. I no longer serve verto files from Apache (they're now in S3/CloudFront), but I suspect Apache may still be needed to serve the cert for wss. But FS can probably do that itself. Anyway,
https://www.ssllabs.com/ssltest/analyze.html?d=my.domain.com shows the cert is reachable and valid. On disk, they're at:
Do these need to be renamed for FS to find them?
so that
<param name="tls-cert-dir" value="(path to certs)"/>
<param name="wss-binding" value=":7443"/>
Should
(path to certs) be replaced with
/etc/letsencrypt/live/my.domain.com/ ?
Even though I haven't finished the config above, this test suggests something is working:
sudo /opt/freeswitch/bin/fs_cli -x 'sofia status profile internal' | grep WSS-BIND-URL
WSS-BIND-URL sips:mod_sofia@(private EC2 IP):7443;transport=wss
Later steps say to create a wss.pem under /usr/local/freeswitch/certs/wss.pem but there is no certs/ after FS install; am I supposed to mkdir it?
Later steps also say to create conf/autoload_configs/verto.conf.xml but there is no conf/ Should I mkdir it?
David