From Ape Wiki

[edit] SSL with APE

The APE Server doesn't support SSL yet, but if you need SSL you can do it with stunnel.

<quote> Stunnel is a program that allows you to encrypt arbitrary TCP connections inside SSL (Secure Sockets Layer) available on both Unix and Windows. Stunnel can allow you to secure non-SSL aware daemons and protocols (like POP, IMAP, LDAP, etc) by having Stunnel provide the encryption, requiring no changes to the daemon's code. </quote>

[edit] Setup stunnel

Install stunnel on your distribution with your favorite package system.

Warning you have to use Stunnel prior to 4.30 because version > 4.30 will close connection to ape after succesfull site opening causing close timeout of 60 sec!

On debian :

APE:~# apt-get install stunnel4

Then configure stunnel create the configuration file in /etc/stunnel/ape.conf

cert = /etc/stunnel/stunnel.pem
sslVersion = SSLv3
 
debug = 7
output = /var/log/stunnel4/stunnel.log
 
[ape]
accept = 443
connect = 87.98.169.115:80

This configuration accept secure connection on port 443 (but you can use any other free port) and forward it to the IP 87.98.169.115 on port 80 (replace it with the IP:Port of your APE Server)

In order to make it work you have to put your certificate file in /etc/stunnel/stunnel.pem

Finally, run the following command to check for errors:

APE:~# stunnel4 /etc/stunnel/ape.conf

[edit] Configure APE JSF

The SSL support was added to APE JSF on github (version 1.0 do not support it), update the APE JSF to the lastest github version.

Here is the configuration to make the APE JSF work with SSL :

APE.Config.server = 'ape.ape-project.org:443';
APE.Config.secure = true;