SSL directive configuration in Nginx - Interactive Code Practice

Practice - 5 Tasks

1fill in blank

easy

Complete the code to enable SSL in the server block.

Nginx

server {
    listen 443 ssl;
    ssl_certificate [1];
}

Drag options to blanks, or click blank then click option'

A/usr/share/nginx/html

B/var/www/html/index.html

C/etc/nginx/nginx.conf

D/etc/ssl/certs/server.crt

Attempts:

3 left

💡 Hint

Common Mistakes

Using a directory path instead of a certificate file.

Confusing the certificate file with the private key file.

The ssl_certificate directive specifies the path to the SSL certificate file.

2fill in blank

medium

Complete the code to specify the SSL private key file.

Nginx

server {
    listen 443 ssl;
    ssl_certificate /etc/ssl/certs/server.crt;
    ssl_certificate_key [1];
}

Drag options to blanks, or click blank then click option'

A/etc/ssl/certs/server.crt

B/etc/ssl/private/server.key

C/var/log/nginx/error.log

D/usr/share/nginx/html/index.html

Attempts:

3 left

💡 Hint

Common Mistakes

Using the certificate file path instead of the key file.

Using a log file or HTML file path by mistake.

The ssl_certificate_key directive points to the private key file matching the SSL certificate.

3fill in blank

hard

Fix the error in the SSL protocol configuration line.

Nginx

server {
    listen 443 ssl;
    ssl_protocols [1];
}

Drag options to blanks, or click blank then click option'

ATLSv1.3 TLSv1.2

BTLSv1 TLSv1.1 TLSv1.2

CSSLv3 TLSv1

DHTTP/2 HTTPS

Attempts:

3 left

💡 Hint

Common Mistakes

Including insecure protocols like SSLv3.

Using unrelated protocols like HTTP/2 in ssl_protocols.

The ssl_protocols directive should list secure TLS versions like TLSv1.2 and TLSv1.3. Older protocols like SSLv3 are insecure and should be avoided.

4fill in blank

hard

Fill both blanks to enable strong ciphers and prefer server ciphers.

Nginx

server {
    listen 443 ssl;
    ssl_ciphers [1];
    ssl_prefer_server_ciphers [2];
}

Drag options to blanks, or click blank then click option'

A"HIGH:!aNULL:!MD5"

Bon

Coff

D"LOW:!SSLv2"

Attempts:

3 left

💡 Hint

Common Mistakes

Using weak cipher strings.

Turning off server cipher preference.

ssl_ciphers sets strong cipher suites, and ssl_prefer_server_ciphers on; tells Nginx to use server's cipher preference.

5fill in blank

hard

Fill all three blanks to configure SSL session cache and timeout.

Nginx

server {
    listen 443 ssl;
    ssl_session_cache [1];
    ssl_session_timeout [2];
    ssl_session_tickets [3];
}

Drag options to blanks, or click blank then click option'

Ashared:SSL:10m

B5m

Coff

Don

Attempts:

3 left

💡 Hint

Common Mistakes

Using incorrect cache names or sizes.

Setting timeout too high or too low.

Leaving session tickets enabled when not needed.

ssl_session_cache shared:SSL:10m; enables shared cache for SSL sessions, ssl_session_timeout 5m; sets session timeout to 5 minutes, and ssl_session_tickets off; disables session tickets for better security.