Only use opt-out policy if supported

Author: WillChilds-Klein

http-clients/aws-crt-client/src/main/java/software/amazon/awssdk/http/crt/internal/AwsCrtConfigurationUtils.java

@@ -54,7 +54,8 @@ public static SocketOptions buildSocketOptions(TcpKeepAliveConfiguration tcpKeep
     public static TlsCipherPreference resolveCipherPreference(Boolean postQuantumTlsEnabled) {
         // As of of v0.39.3, aws-crt-java prefers PQ by default, so only return the pre-PQ-default policy
         // below if the caller explicitly disables PQ by passing in false.
-        if (Boolean.FALSE.equals(postQuantumTlsEnabled)) {
+        if (Boolean.FALSE.equals(postQuantumTlsEnabled)
+                && TlsCipherPreference.TLS_CIPHER_PREF_TLSv1_0_2023.isSupported()) {
             return TlsCipherPreference.TLS_CIPHER_PREF_TLSv1_0_2023;
         }
         return TlsCipherPreference.TLS_CIPHER_SYSTEM_DEFAULT;