Rewrite/redirect before SSL handshake

We have an interesting scenario that would all go away if we could just get rid of this old legacy system, but for now it's here to stay.   We have an application that is using IIS basic authentic...