OCSP stapling in Nginx - Interactive Code Practice

Practice - 5 Tasks

1fill in blank

easy

Complete the code to enable OCSP stapling in the nginx server block.

Nginx

ssl_stapling [1];

Drag options to blanks, or click blank then click option'

Aon

Benable

Coff

Dtrue

Attempts:

3 left

💡 Hint

Common Mistakes

Using 'off' disables stapling.

Using 'enable' or 'true' are not valid nginx directive values.

Setting ssl_stapling on; enables OCSP stapling in nginx.

2fill in blank

medium

Complete the code to specify the trusted certificate for OCSP stapling.

Nginx

ssl_trusted_certificate [1];

Drag options to blanks, or click blank then click option'

A/etc/ssl/certs/ca-bundle.crt

B/var/log/nginx/access.log

C/etc/nginx/ssl/server.crt

D/etc/nginx/ssl/server.key

Attempts:

3 left

💡 Hint

Common Mistakes

Using the server private key or certificate instead of the CA bundle.

Using log file paths.

The ssl_trusted_certificate directive must point to the CA bundle file that nginx uses to verify OCSP responses.

3fill in blank

hard

Fix the error in the directive to enable OCSP stapling with verification.

Nginx

ssl_stapling_verify [1];

Drag options to blanks, or click blank then click option'

Afalse

Boff

Con

Ddisable

Attempts:

3 left

💡 Hint

Common Mistakes

Using 'off' disables verification.

Using 'disable' or 'false' are invalid values.

To enable OCSP stapling verification, use ssl_stapling_verify on;.

4fill in blank

hard

Fill both blanks to complete the OCSP stapling configuration in nginx.

Nginx

ssl_stapling [1];
ssl_stapling_verify [2];

Drag options to blanks, or click blank then click option'

Aon

Boff

Cdisable

Dtrue

Attempts:

3 left

💡 Hint

Common Mistakes

Turning off stapling disables the feature.

Using invalid values like 'disable' or 'true'.

Enable OCSP stapling with ssl_stapling on; and disable verification with ssl_stapling_verify off;.

5fill in blank

hard

Fill all three blanks to complete the nginx server block snippet for OCSP stapling.

Nginx

server {
    listen 443 ssl;
    ssl_certificate [1];
    ssl_certificate_key [2];
    ssl_trusted_certificate [3];
    ssl_stapling on;
    ssl_stapling_verify on;
}

Drag options to blanks, or click blank then click option'

A/etc/nginx/ssl/server.crt

B/etc/nginx/ssl/server.key

C/etc/ssl/certs/ca-bundle.crt

D/var/www/html/index.html

Attempts:

3 left

💡 Hint

Common Mistakes

Mixing up certificate and key file paths.

Using unrelated file paths like web root files.

The ssl_certificate and ssl_certificate_key directives specify your server's certificate and private key. The ssl_trusted_certificate points to the CA bundle for OCSP verification.