TLS/SSL encryption in RabbitMQ - Interactive Code Practice

Practice - 5 Tasks

1fill in blank

easy

Complete the code to enable TLS in RabbitMQ configuration.

RabbitMQ

listeners.ssl.default = [1]

Drag options to blanks, or click blank then click option'

A15671

B5672

C15672

D5671

Attempts:

3 left

💡 Hint

Common Mistakes

Using port 5672 which is for non-TLS connections.

Confusing management ports with TLS ports.

Port 5671 is the default port for RabbitMQ TLS connections.

2fill in blank

medium

Complete the code to specify the path to the SSL certificate file.

RabbitMQ

ssl_options.cacertfile = "[1]"

Drag options to blanks, or click blank then click option'

A/etc/rabbitmq/ssl/ca_certificate.pem

B/etc/rabbitmq/ssl/server.key

C/etc/rabbitmq/ssl/server_certificate.pem

D/etc/rabbitmq/ssl/client_certificate.pem

Attempts:

3 left

💡 Hint

Common Mistakes

Using server key or server certificate instead of CA certificate.

Confusing client certificate with CA certificate.

The cacertfile option points to the CA certificate file used to verify client certificates.

3fill in blank

hard

Fix the error in the SSL options to enable peer verification.

RabbitMQ

ssl_options.verify = [1]

Drag options to blanks, or click blank then click option'

Averify_none

Bverify_peer

Cverify_client

Dverify_server

Attempts:

3 left

💡 Hint

Common Mistakes

Using 'verify_none' disables verification, which is insecure.

Using non-existent options like 'verify_client' or 'verify_server'.

Setting verify to verify_peer enables verification of the client's certificate.

4fill in blank

hard

Fill both blanks to configure the SSL key and certificate files.

RabbitMQ

ssl_options.keyfile = "[1]"
ssl_options.certfile = "[2]"

Drag options to blanks, or click blank then click option'

A/etc/rabbitmq/ssl/server_key.pem

B/etc/rabbitmq/ssl/ca_certificate.pem

C/etc/rabbitmq/ssl/server_certificate.pem

D/etc/rabbitmq/ssl/client_key.pem

Attempts:

3 left

💡 Hint

Common Mistakes

Mixing CA certificate with server key or certificate.

Using client key instead of server key.

The keyfile is the server's private key, and certfile is the server's certificate.

5fill in blank

hard

Fill all three blanks to set SSL options for fail_if_no_peer_cert, verify, and fail_if_no_cert.

RabbitMQ

ssl_options.fail_if_no_peer_cert = [1]
ssl_options.verify = [2]
ssl_options.fail_if_no_cert = [3]

Drag options to blanks, or click blank then click option'

Afalse

Bverify_peer

Ctrue

Dverify_none

Attempts:

3 left

💡 Hint

Common Mistakes

Setting fail_if_no_peer_cert or fail_if_no_cert to false disables security.

Using 'verify_none' disables certificate verification.

Setting fail_if_no_peer_cert and fail_if_no_cert to true enforces client certificate presence. verify must be verify_peer to check certificates.