llvm / llvm/llvm-project

gRPC over TLS support in clangd

Open
#221,311 1 comment 0 reactions 0 assignees View on GitHub
clangd
Dominant language
LLVM
Stars
40.5k
Forks
18.7k
PR merge metrics
PR metrics pending

Description

@ArcsinX, as discussed in https://discourse.llvm.org/t/rfc-clangd-tls-and-kerberos-auth-for-remote-index-client/91413/7 to use `clangd-index-server` in corporate scenarios traffic between `clangd` and `clangd-index-server` have to be encrypted and the peer verified.

Supposed interface changes.

On client side: `--remote-index-cacert=/etc/ssl/trusted-ca.cer`
On server side: `--tls-cert=/etc/ssl/server.pem`

Contributor guide

Open the contributing guide

Research direction

Start by reading the linked RFC and tracing the remote index client in clangd and the corresponding clangd-index-server entry points. The proposed client and server flags define the visible scope; done means traffic is encrypted and the peer is verified for both sides.

Written by the indexing model from the issue text.

Assessment

Tech stack
cpp, grpc
Domain
networking, security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Active
Clarity
Needs clarification
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.