Mutual TLS between services in Microservices - Interactive Code Practice

Practice - 5 Tasks

1fill in blank

easy

Complete the code to specify the protocol used for secure communication between services.

Microservices

protocol = "[1]"

Drag options to blanks, or click blank then click option'

Ahttp

Bftp

Chttps

Dsmtp

Attempts:

3 left

💡 Hint

Common Mistakes

Using 'http' which is not secure.

Confusing with other protocols like FTP or SMTP.

The protocol for secure communication using TLS is HTTPS, which encrypts data between services.

2fill in blank

medium

Complete the code to load the client certificate for mutual TLS authentication.

Microservices

client_cert = load_certificate("[1]")

Drag options to blanks, or click blank then click option'

Aclient.crt

Broot.crt

Cca.crt

Dserver.crt

Attempts:

3 left

💡 Hint

Common Mistakes

Using the server certificate instead of client certificate.

Using CA or root certificates which are for verification, not client identity.

The client certificate file is needed for the client side in mutual TLS to authenticate itself to the server.

3fill in blank

hard

Fix the error in the code to enable mutual TLS by setting the correct verification mode.

Microservices

ssl_context.verify_mode = ssl.CERT_[1]

Drag options to blanks, or click blank then click option'

ANONE

BOPTIONAL

CIGNORE

DREQUIRED

Attempts:

3 left

💡 Hint

Common Mistakes

Setting verify_mode to NONE or IGNORE disables client verification.

OPTIONAL allows clients without certificates, which is not mutual TLS.

For mutual TLS, the server must require the client certificate, so verify_mode should be CERT_REQUIRED.

4fill in blank

hard

Fill both blanks to configure the server to load the CA certificate and enable client certificate verification.

Microservices

ssl_context.load_verify_locations("[1]")
ssl_context.verify_mode = ssl.CERT_[2]

Drag options to blanks, or click blank then click option'

Aca.pem

Bclient

CREQUIRED

DOPTIONAL

Attempts:

3 left

💡 Hint

Common Mistakes

Using client certificate file instead of CA certificate file.

Setting verify_mode to OPTIONAL disables strict client verification.

The server loads the CA certificate file (ca.pem) to verify client certificates and sets verify_mode to CERT_REQUIRED to enforce verification.

5fill in blank

hard

Fill all three blanks to create a secure client connection with mutual TLS by specifying client cert, key, and CA cert files.

Microservices

connection = create_tls_connection(client_cert="[1]", client_key="[2]", ca_cert="[3]")

Drag options to blanks, or click blank then click option'

Aclient.pem

Bclient.key

Cca.pem

Dserver.pem

Attempts:

3 left

💡 Hint

Common Mistakes

Using server.pem instead of client.pem for client certificate.

Omitting the client key or CA certificate.

The client needs its certificate (client.pem), private key (client.key), and the CA certificate (ca.pem) to establish mutual TLS.