Decouple stream bypass from TLS encrypted bypass v9.2

[lukashino]

Following up on #12573

Redmine ticket: https://redmine.openinfosecfoundation.org/issues/6788

Describe changes:
v9.2:

• rebased

v9.1:

• separated mixed changes into their respective commits

v9:

• changed mutex to atomicu8 for SSH encryption handling choice
• rebased

v8.1:

• specify the correct SV test

v8:

• rebased
• re: QA results: Expected behavior change, the QA needs to set ssh encryption handling to bypass to reproduce the same results. There is no middle-ground solution to have the defaults set exactly as before. See comments in Decouple stream bypass from TLS encrypted bypass v7 #12249

v7

• Style guide changes as suggested in the prev PR
• Encryption Handling has now three states, similar to TLS
• rebased

v6

• rebased

v5

• rebased
• added upgrade section
• fixed docs - Thanks Juliana
• SV tests should pass now

v4

• rebased
• changed SSH bypass defaults to hopefully be in sync with the previous settings

v3

• added SSH app-layer option encryption-handling allowing to choose whether to continue inspection on SSH once it turns encrypted
• added SV tests
• minor docs updates

SV_BRANCH=OISF/suricata-verify#2315

[lukashino]

digging up a comment from PR #12388 :

@catenacyber wrote:

@victorjulien could I review this ? (asking since you self-assigned yourself)

I want to dig into the QA diff and the explanation of it in the previous version especially...

[codecov]

Codecov Report

Attention: Patch coverage is 80.00000% with 8 lines in your changes missing coverage. Please review.

Project coverage is 80.77%. Comparing base (3bc2a14) to head (0008355).

Additional details and impacted files

@@           Coverage Diff           @@
##           master   #12655   +/-   ##
=======================================
  Coverage   80.77%   80.77%           
=======================================
  Files         932      932           
  Lines      259517   259549   +32     
=======================================
+ Hits       209629   209661   +32     
  Misses      49888    49888           

Flag	Coverage Δ
fuzzcorpus	56.97% <42.50%> (-0.02%)	⬇️
livemode	19.36% <12.50%> (-0.01%)	⬇️
pcap	44.15% <42.50%> (-0.01%)	⬇️
suricata-verify	63.51% <82.05%> (+<0.01%)	⬆️
unittests	58.31% <42.50%> (-0.01%)	⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

[suricata-qa]

WARNING:

field	baseline	test	%
	SURI_TLPR1_stats_chk
.uptime	637	670	105.18%
.flow.end.state.local_bypassed	26015	17671	67.93%
	IPS_AFP_stats_chk
.flow.end.state.local_bypassed	1080	0	-
.flow_bypassed.local_pkts	25920	0	-
.flow_bypassed.local_bytes	2833920	0	-

Pipeline 24863