Support SRT encryption passphrases on configured paths

[rmcnew]

Add support for SRT encryption passphrases on configured MediaMTX paths.

SRT supports encryption to protect payload data. SRT Passphrases must be strings between 10 and 79 characters long. Setting a SRT passphrase means that a publisher or reader using SRT MUST use the passphrase to publish or read.

Note that setting SRT passphrases does not prevent unencrypted reading from the path using another protocol!

[codecov]

Codecov Report

Merging #2385 (4325dc7) into main (cadc6b3) will decrease coverage by 0.01%.
The diff coverage is 61.11%.

@@            Coverage Diff             @@
##             main    #2385      +/-   ##
==========================================
- Coverage   61.59%   61.58%   -0.01%     
==========================================
  Files         129      129              
  Lines       14440    14476      +36     
==========================================
+ Hits         8894     8915      +21     
- Misses       4875     4887      +12     
- Partials      671      674       +3     

Files Changed	Coverage Δ
internal/core/srt_conn.go	55.21% <40.00%> (-0.62%)	⬇️
internal/conf/path.go	28.36% <87.50%> (+3.55%)	⬆️

... and 3 files with indirect coverage changes

📣 We’re building smart automated test selection to slash your CI/CD build times. Learn more

[aler9]

Hello, this is a useful feature but this PR needs a couple of improvements:

• move checks from checkSrtPassphrase() to internal/conf/path.go
• avoid using getPathConfs() and pathConfs[pathName], pathName may not correspond to a configuration with the same name, since configurations can use regular expressions as names; use res.path.conf, that is available after addReader() and addPublisher
• fix lint errors

thanks

[rmcnew]

Thank you for the feedback. Making changes to fix those items.

[rmcnew]

Updates made based on feedback and lint output.

I was trying manually run the lint workflow, but then discovered that it runs when I pushed to main on my fork. lint.yml should be unchanged.

[rmcnew]

Added unit tests for CheckSrtPassphrase. Use safeConf to prevent race conditions.

[aler9]

i added some improvements:

• update API docs
• split configuration checks from connection checks
• add tests
• rename publishSRTPassphrase into srtPublishPassphrase, readSRTPassphrase into srtReadPassphrase
• remove redundant alias

and merged. Thanks!