Richard, definitely diff your nsd.tcl against the head version of config.tcl. There have been a few serious changes, some for performance and dealing specifically with aolserver4.5 and other feature enhancements.
security::get_https_port is used in security::https_available_p so it should be updated to consider nsopenssl v3 also. The security::locations code shows how to reference the port for nsopenssl v3.
cheers,
Torben