bad ssl practice in controller logic

bad_ssl_controller.rb

class BadSslController < ApplicationController

  before_filter :enforce_https
  
  def enforce_https
    if use_ssl?
      if request.protocol != 'https://'
        redirect_to url_for(controller: controller_name, action: action_name, protocol: 'https') and return
      end
    else
      if request.protocol != 'http://'
        redirect_to url_for(controller: controller_name, action: action_name, protocol: 'http') and return
      end
    end
  end
  
  def use_ssl?
    if controller_name=='orders'
      if action_name=='index' || action_name=='show'
        true
      else
        false
      end
    elsif controller_name=='troops'
      if action_name=='index' || action_name=='show'
        true
      else
        false
      end
    elsif controller_name=='generals'
      true
    end
    false
  end

end