Nginx SSL declarations need to be added to redirect vhosts

If you have a redirect set up in Aegir (say to redirect example.com to www.example.com), and you are using nginx_ssl, browsers will not accept the SSL certificates reporting ssl_error_rx_record_too_long.

I managed to resolve this by adding the SSL declarations to the redirect vhost. For example, this is what Aegir will produce:

server {
   listen      69.164.198.11:443;
   server_name example.com;
   rewrite ^ $scheme://www.example.com$request_uri? permanent;
}

server {
   include      /var/aegir/config/includes/fastcgi_ssl_params.conf;
   limit_conn   gulag 10; # like mod_evasive - this allows max 10 simultaneous connections from one IP address
   listen       69.164.198.11:443;
   server_name  www.example.com;
   root         /var/aegir/platforms/live/sac-7.9-16112011;
   ssl                         on;
   ssl_certificate             /var/aegir/config/server_example/ssl.d/www.example.com/openssl.crt;
   ssl_certificate_key         /var/aegir/config/server_example/ssl.d/www.example.com/openssl.key;
   ssl_protocols               SSLv3 TLSv1;
   ssl_ciphers                 HIGH:!ADH:!MD5;
   ssl_prefer_server_ciphers   on;
   keepalive_timeout           70;
   include      /var/aegir/config/includes/nginx_simple_include.conf;
}

Which doesn't work. This is what you need to do to get it to work (ie. Also add the ssl declarations to the redirect vhost)

server {
   listen      69.164.198.11:443;
   server_name example.com;
   rewrite ^ $scheme://www.example.com$request_uri? permanent;

   ssl                         on;
   ssl_certificate             /var/aegir/config/server_example/ssl.d/www.example.com/openssl.crt;
   ssl_certificate_key         /var/aegir/config/server_example/ssl.d/www.example.com/openssl.key;
   ssl_protocols               SSLv3 TLSv1;
   ssl_ciphers                 HIGH:!ADH:!MD5;
   ssl_prefer_server_ciphers   on;
}

server {
   include      /var/aegir/config/includes/fastcgi_ssl_params.conf;
   limit_conn   gulag 10; # like mod_evasive - this allows max 10 simultaneous connections from one IP address
   listen       69.164.198.11:443;
   server_name  www.example.com;
   root         /var/aegir/platforms/live/sac-7.9-16112011;
   ssl                         on;
   ssl_certificate             /var/aegir/config/server_example/ssl.d/www.example.com/openssl.crt;
   ssl_certificate_key         /var/aegir/config/server_example/ssl.d/www.example.com/openssl.key;
   ssl_protocols               SSLv3 TLSv1;
   ssl_ciphers                 HIGH:!ADH:!MD5;
   ssl_prefer_server_ciphers   on;
   keepalive_timeout           70;
   include      /var/aegir/config/includes/nginx_simple_include.conf;
}