Add Zabbix SSL checker

tests/test_ssl_check_basic.py

@@ -0,0 +1,62 @@
+from __future__ import annotations
+
+import json
+import socket
+import sys
+from pathlib import Path
+
+ROOT = Path(__file__).resolve().parents[1]
+sys.path.insert(0, str(ROOT / "scripts"))
+
+from ssl_check import Target, main, run_check  # noqa: E402
+
+
+def unused_local_port() -> int:
+    sock = socket.socket()
+    sock.bind(("127.0.0.1", 0))
+    port = int(sock.getsockname()[1])
+    sock.close()
+    return port
+
+
+def test_ssl_check_unreachable_returns_stable_json() -> None:
+    target = Target(
+        name="Unreachable",
+        host="127.0.0.1",
+        port=unused_local_port(),
+        owner="tests",
+        profile="relaxed",
+        expected_hostname="127.0.0.1",
+        timeout=0.5,
+    )
+
+    result = run_check(target)
+
+    assert result["reachable"] is False
+    assert result["error"]
+    assert result["target"] == "127.0.0.1"
+    assert "warnings" in result
+
+
+def test_main_prints_json_for_unreachable_target(capsys) -> None:  # type: ignore[no-untyped-def]
+    port = unused_local_port()
+
+    exit_code = main(
+        [
+            "--host",
+            "127.0.0.1",
+            "--port",
+            str(port),
+            "--expected-hostname",
+            "127.0.0.1",
+            "--timeout",
+            "0.5",
+        ]
+    )
+
+    captured = capsys.readouterr()
+    payload = json.loads(captured.out)
+
+    assert exit_code == 0
+    assert payload["reachable"] is False
+    assert payload["error"]