SSL protocol and cipher configuration in Nginx - Interactive Code Practice

Practice - 5 Tasks

1fill in blank

easy

Complete the code to enable only TLS protocols in nginx.

Nginx

ssl_protocols [1];

Drag options to blanks, or click blank then click option'

ATLSv1 TLSv1.1 TLSv1.2 TLSv1.3

BSSLv3 TLSv1

CSSLv2 SSLv3

DTLSv1.2 SSLv3

Attempts:

3 left

💡 Hint

Common Mistakes

Including SSLv3 or SSLv2 which are insecure.

Forgetting to include TLSv1.3.

The ssl_protocols directive specifies which SSL/TLS protocols nginx will accept. Modern best practice is to enable only TLS versions, excluding SSL versions.

2fill in blank

medium

Complete the code to set a strong cipher suite in nginx.

Nginx

ssl_ciphers [1];

Drag options to blanks, or click blank then click option'

A"EXP:!aNULL:!MD5"

B"HIGH:!aNULL:!MD5"

C"ALL"

D"LOW:!aNULL:!MD5"

Attempts:

3 left

💡 Hint

Common Mistakes

Using 'ALL' which includes weak ciphers.

Including 'LOW' or 'EXP' which are weak or export ciphers.

The ssl_ciphers directive defines which encryption algorithms nginx will allow. "HIGH:!aNULL:!MD5" enables strong ciphers and excludes anonymous and weak ones.

3fill in blank

hard

Fix the error in the ssl_prefer_server_ciphers directive to prefer server ciphers.

Nginx

ssl_prefer_server_ciphers [1];

Drag options to blanks, or click blank then click option'

Ayes

Btrue

Coff

Don

Attempts:

3 left

💡 Hint

Common Mistakes

Using 'true' or 'yes' instead of 'on'.

Leaving the directive off which disables server cipher preference.

The correct value to enable server cipher preference in nginx is on. Values like 'true' or 'yes' are invalid here.

4fill in blank

hard

Fill both blanks to configure nginx to use only TLSv1.2 and TLSv1.3 and prefer server ciphers.

Nginx

ssl_protocols [1];
ssl_prefer_server_ciphers [2];

Drag options to blanks, or click blank then click option'

ATLSv1.2 TLSv1.3

Boff

Con

DSSLv3

Attempts:

3 left

💡 Hint

Common Mistakes

Including SSLv3 in protocols.

Using 'off' for server cipher preference.

Setting ssl_protocols to only TLSv1.2 and TLSv1.3 ensures modern secure protocols. Setting ssl_prefer_server_ciphers to on makes nginx choose the server's preferred ciphers.

5fill in blank

hard

Fill all three blanks to configure nginx with strong ciphers, enable TLSv1.2 and TLSv1.3, and prefer server ciphers.

Nginx

ssl_ciphers [1];
ssl_protocols [2];
ssl_prefer_server_ciphers [3];

Drag options to blanks, or click blank then click option'

A"HIGH:!aNULL:!MD5"

BTLSv1.2 TLSv1.3

Con

Doff

Attempts:

3 left

💡 Hint

Common Mistakes

Using weak cipher strings.

Including SSL protocols.

Disabling server cipher preference.

This configuration sets strong ciphers, limits protocols to TLSv1.2 and TLSv1.3, and enables server cipher preference for better security.