I agree with Steve. Wouldn't it be less complicated to setup two ssl ports using nsopenssl, or maybe even one port to start with?
That symptom looks like something that happens when the aolserver ns_param hostname from the config.tcl does not match the server's fully qualified pathname (as determined by the OS, pound and/or reachable by the browser), or maybe the hostname/port supplied by OpenACS when redirecting.
