If you're having problems getting https working, it's not your fault.
The config.tcl file had two lines missing from it:
Here's my fix:
http://xarg.net/tools/cvs/change-set-details?key=14887
basically, you just need to add in:
ns_section "ns/server/${server}/module/nsopenssl/sslcontexts"
ns_param users "SSL context used for regular user access"
# ns_param admins "SSL context used for administrator access"
ns_param client "SSL context used for outgoing script socket connections"
