Might as well fix Xplico while we're at it!

# Xplico
/etc/apache2/sites-available/xplico
/var/lib/gems/1.8/bin/fpm -s dir -t deb -n securityonion-xplico-ssl -v 20111202 
/etc/apache2/sites-available/xplico

# Update shortcuts
sed -i 's|http://localhost|https://localhost|g' 
/etc/skel/Desktop/securityonion-squert.desktop
sed -i 's|http://localhost|https://localhost|g' 
/usr/share/applications/securityonion-squert.desktop
sed -i 's|http://localhost|https://localhost|g' 
/usr/share/applications/securityonion-xplico-web.desktop
/var/lib/gems/1.8/bin/fpm -s dir -t deb -n securityonion-menu -v 20111202 
/etc/xdg/xdg-xubuntu/menus/xfce-applications.menu 
/usr/share/desktop-directories/securityonion* 
/usr/share/applications/securityonion* /etc/skel/Desktop/*.desktop

#########################
# Added to security-onion-upgrade.sh
#########################

    FILE=securityonion-xplico-ssl_"$NEW"_i386.deb
    echo "* Installing $FILE"               | $LOGGER
    wget -q http://sourceforge.net/projects/security-onion/files/$NEW/$FILE -O $FILE | $LOGGER
    dpkg -i --force-overwrite $FILE             | $LOGGER

    FILE=securityonion-menu_"$NEW"_i386.deb
    echo "* Installing $FILE"               | $LOGGER
    wget -q http://sourceforge.net/projects/security-onion/files/$NEW/$FILE -O $FILE | $LOGGER
    dpkg -i --force-overwrite $FILE             | $LOGGER

    echo "* Fixing existing Desktop shortcuts"      | $LOGGER
    sed -i 's|http://localhost|https://localhost|g' /home/*/Desktop/securityonion-squert.desktop

    if ufw status | grep ALLOW | grep 80/tcp > /dev/null
    then
        echo "* Closing port 80 and opening port 443 in firewall" | $LOGGER
        ufw delete allow 80/tcp             | $LOGGER
        ufw allow 443/tcp               | $LOGGER
    fi

    echo "* Disabling HTTP and enabling HTTPS"      | $LOGGER
    FILE=/etc/apache2/ports.conf
    sed -i 's|NameVirtualHost *:80|#NameVirtualHost *:80|g' $FILE
    sed -i 's|Listen 80|#Listen 80|g' $FILE
    a2enmod ssl                     | $LOGGER
    a2ensite default-ssl                    | $LOGGER
    a2dissite default                   | $LOGGER
    /etc/init.d/apache2 restart             | $LOGGER

Changed this:
    sed -i 's|NameVirtualHost *:80|#NameVirtualHost *:80|g' $FILE

to this:
    sed -i 's|NameVirtualHost \*:80|#NameVirtualHost \*:80|g' $FILE

Published:
http://securityonion.blogspot.com/2011/12/security-onion-20111202-now-available.
html