How can you detect a legacy ssl client and send it to http?

Question

Nginx

The problem is that they turned on tls 1.1+ And there were complaints about the inability to connect.
In all cases, these were old NT 5.1 clients and others and $schema https.
How is it possible in case of connection failure via https - to redirect to http
Or at least log these failures.

Answer 1

$ssl_protocol : returns the protocol of an established SSL connection

Answer 2

1. Write the output of the command
Perhaps the problem is that you have nginx built with openssl < 1.0.2 and as a result there is no ALPN support, and the browser on your old NT 5.1 is probably new, which no longer supports NPN
2. What ciphers are configured in nginx? Write what you have written in ssl_ciphers. Perhaps you are opening your site in a browser that does not support the cipher suite that is registered in your nginx.
Test the site at https://www.ssllabs.com/ssltest/index.html
P.S. If you wrote exactly what version of Windows you have and what browser, then you would have to guess less.