http: add ssl conflict

CMK-21637

Change-Id: I85e4d21f2c3771527aed6d8e8bc2711cb76fc22f

Author: SoloJacobs

cmk/update_config/http/conflicts.py

@@ -99,6 +99,12 @@ def detect_conflicts(
                 mode_fields=["add_headers"],
                 host_fields=[],
             )
+        if mode.ssl in ["ssl_1", "ssl_2", "ssl_3"]:
+            return Conflict(
+                type_="ssl_incompatible",
+                mode_fields=["ssl"],
+                host_fields=[],
+            )
     return MigratableValue.model_validate(value.model_dump())
 
 

cmk/update_config/http/v1_scheme.py

@@ -71,9 +71,9 @@ class V1Url(BaseModel, extra="forbid"):
             "auto",  # use with auto-negotiation
             "ssl_1_2",  # enforce TLS 1.2
             "ssl_1_3",  # enforce TLS 1.3
-            # "ssl_1",  # enforce TLS 1.0, not supported in V2
-            # "ssl_2",  # enforce SSL 2.0, not supported in V2
-            # "ssl_3",  # enforce SSL 3.0, not supported in V2
+            "ssl_1",  # enforce TLS 1.0
+            "ssl_2",  # enforce SSL 2.0
+            "ssl_3",  # enforce SSL 3.0
         ]
         | None
     ) = None

tests/unit/cmk/update_config/http/test_migrate.py

@@ -991,9 +991,6 @@ def test_migrate_ssl(rule_value: Mapping[str, object], expected: str) -> None:
         EXAMPLE_13,
         EXAMPLE_14,
         EXAMPLE_20,
-        EXAMPLE_22,
-        EXAMPLE_23,
-        EXAMPLE_24,
         EXAMPLE_33,
         EXAMPLE_44,
         EXAMPLE_49,
@@ -1025,6 +1022,30 @@ def test_non_migrateable_rules(rule_value: Mapping[str, object]) -> None:
                 host_fields=[],
             ),
         ),
+        (
+            EXAMPLE_22,
+            Conflict(
+                type_="ssl_incompatible",
+                mode_fields=["ssl"],
+                host_fields=[],
+            ),
+        ),
+        (
+            EXAMPLE_23,
+            Conflict(
+                type_="ssl_incompatible",
+                mode_fields=["ssl"],
+                host_fields=[],
+            ),
+        ),
+        (
+            EXAMPLE_24,
+            Conflict(
+                type_="ssl_incompatible",
+                mode_fields=["ssl"],
+                host_fields=[],
+            ),
+        ),
     ],
 )
 def test_detect_conflicts(rule_value: Mapping[str, object], conflict: Conflict) -> None: