Updated reply: A proxy is no longer required. uWSGI can be used.
Thanks! Jen, Galaxy team
The installation that I am working on is on a production machine, so I am hesitant to change anything there. It seems I should go with the option of creating a proxy.
About that I am wondering if you think if it would be possible to test Galaxy+SSL set-up on a production machine without disrupting anything.