Setting up SSL https for Rails3

% openssl genrsa -des3 -out server.key 1024
% openssl req -new -key server.key -out server.csr
% openssl x509 -req -days 365 -in server.csr -signkey server.key -out server.crt

-----BEGIN CERTIFICATE-----
MIIDBjCCAe4CCQDCzcL5z8chBzANBgkqhkiG9w0BAQUFADBFMQswCQYDVQQGEwJB
......+OAFfG2MvIeawg==
-----END CERTIFICATE-----

LoadModule ssl_module libexec/apache22/mod_ssl.so

Listen 80
Listen 443

<VirtualHost 192.168.10.1:80>
   ServerAdmin rupert@2rmobile.com
   ServerName foo.2rmobile.com
   ServerAlias foo.2rmobile.com
 
   DocumentRoot "/path/to/rails/app/public"
   <Directory "/path/to/rails/app/public">
      #Options Indexes MultiViews
      AllowOverride None
      Order allow,deny
      Allow from all
   </Directory>
 
   CustomLog /var/log/httpd/myapp.log combinedio
   LogLevel warn
</VirtualHost>
 
<VirtualHost 192.168.10.1:443>
   ServerAdmin rupert@2rmobile.com
   ServerName foo.2rmobile.com
   ServerAlias foo.2rmobile.com
 
   DocumentRoot "/path/to/rails/app/public"
   <Directory "/path/to/rails/app/public">
      #Options Indexes MultiViews
      AllowOverride None
      Order allow,deny
      Allow from all
   </Directory>
 
   CustomLog /var/log/httpd/myapp.log combinedio
   LogLevel warn
 
   SSLEngine on
   SSLCertificateFile /path/to/certs/server.crt
   SSLCertificateKeyFile /path/to/certs/server.key
</VirtualHost>

% /usr/local/etc/rc.d/apache22 restart #freebsd
Performing sanity check on apache22 configuration:
Syntax OK
Stopping apache22.
Waiting for PIDS: 89044.
Performing sanity check on apache22 configuration:
Syntax OK
Starting apache22.
% tail -f /var/log/apache2/httpd-access.log
...."Apache/2.2.15 (FreeBSD) mod_ssl/2.2.15 OpenSSL/0.9.8q DAV/2 PHP/5.2.14 with Suhosin-Patch Phusion_Passenger/3.0.11 (internal dummy connection)"

gem 'rack-ssl', :require => 'rack/ssl'

require 'rack/ssl'
 
Cws::Application.configure do
  config.middleware.insert_before ActionDispatch::Cookies, Rack::SSL
  #config.middleware.insert_before ActionDispatch::Cookies, Rack::SSL, :exclude => proc { |env| env['HTTPS'] != 'on' }
 
  # Settings specified here will take precedence over those in config/application.rb
 
  # The production environment is meant for finished, "live" apps.
  # Code is not reloaded between requests
  config.cache_classes = true
 
  # Full error reports are disabled and caching is turned on
  config.consider_all_requests_local       = false
  config.action_controller.perform_caching = true
 
  # Specifies the header that your server uses for sending files
  config.action_dispatch.x_sendfile_header = "X-Sendfile"
 
  # For nginx:
  # config.action_dispatch.x_sendfile_header = 'X-Accel-Redirect'
 
  # If you have no front-end server that supports something like X-Sendfile,
  # just comment this out and Rails will serve the files
 
  # See everything in the log (default is :info)
  # config.log_level = :debug
 
  # Use a different logger for distributed setups
  # config.logger = SyslogLogger.new
 
  # Use a different cache store in production
  # config.cache_store = :mem_cache_store
 
  # Disable Rails's static asset server
  # In production, Apache or nginx will already do this
  config.serve_static_assets = false
 
  # Enable serving of images, stylesheets, and javascripts from an asset server
  # config.action_controller.asset_host = "http://assets.example.com"
 
  # Disable delivery errors, bad email addresses will be ignored
  # config.action_mailer.raise_delivery_errors = false
 
  # Enable threaded mode
  # config.threadsafe!
 
  # Enable locale fallbacks for I18n (makes lookups for any locale fall back to
  # the I18n.default_locale when a translation can not be found)
  config.i18n.fallbacks = true
 
  # Send deprecation notices to registered listeners
  config.active_support.deprecation = :notify
 
  config.action_mailer.default_url_options = { :host => 'whatever' }
end

config.middleware.insert_before ActionDispatch::Cookies, Rack::SSL, :exclude => proc { |env| env['HTTPS'] != 'on' }

Safari > Reset
Safari > Empty Cache