Aegir no longer seems to be adding SSL info to apache config files for sites
Is there any particular reason why you're using the legacy option, and not Aegir HTTPS?

The legacy option is no longer supported so my recommendation would be to follow the documentation to switch.