{"id":12362766,"date":"2026-03-12T13:40:44","date_gmt":"2026-03-12T05:40:44","guid":{"rendered":"https:\/\/www.likacloud.com\/knowledge\/ssl%e8%af%81%e4%b9%a6%e7%a9%b6%e7%ab%9f%e6%98%af%e4%bb%80%e4%b9%88%ef%bc%9f%e4%bb%8e%e5%8e%9f%e7%90%86%e5%88%b0%e9%83%a8%e7%bd%b2%e7%9a%84%e5%ae%8c%e6%95%b4%e6%8c%87%e5%8d%97%e4%b8%8e%e5%ae%9e\/"},"modified":"2026-03-12T17:43:25","modified_gmt":"2026-03-12T09:43:25","slug":"ssl-certificate-guide-principles-deployment-best-practices","status":"publish","type":"knowledge_post","link":"https:\/\/www.likacloud.com\/tr\/knowledge\/ssl-certificate\/ssl-certificate-guide-principles-deployment-best-practices\/","title":{"rendered":"SSL sertifikas\u0131 nedir? Prensibinden da\u011f\u0131t\u0131m\u0131na kadar kapsaml\u0131 bir rehber ve pratik \u00f6neriler"},"content":{"rendered":"

G\u00fcn\u00fcm\u00fcz internet \u00e7a\u011f\u0131nda, veri g\u00fcvenli\u011fi ve gizlilik korumas\u0131 son derece \u00f6nemli hale gelmi\u015ftir. Bir web sitesine girdi\u011finizde adres \u00e7ubu\u011funun \u00f6n\u00fcnde k\u00fc\u00e7\u00fck bir kilit i\u015fareti g\u00f6rd\u00fc\u011f\u00fcn\u00fczde, ileti\u015fim g\u00fcvenli\u011finizi koruyan as\u0131l ara\u00e7 SSL sertifikas\u0131d\u0131r. SSL sertifikas\u0131, sadece web sitesinin g\u00fcvenilirli\u011finin bir g\u00f6stergesi de\u011fil; ayn\u0131 zamanda bilgi aktar\u0131m\u0131n\u0131n \u201c\u015fifrelenmi\u015f kanal\u0131\u201dd\u0131r. Bu sayede hassas verilerin aktar\u0131m s\u0131ras\u0131nda \u00e7al\u0131nmas\u0131 veya de\u011fi\u015ftirilmesi engellenir ve modern g\u00fcvenli a\u011f ileti\u015fiminin temelini olu\u015fturur.<\/p>\n\n\n\n

SSL\/TLS Sertifikalar\u0131n\u0131n Temel Prensibi<\/h2>\n\n\n\n

SSL sertifikas\u0131n\u0131n temel amac\u0131 \u201c\u015fifreleme\u201d ve \u201cdo\u011frulama\u201d i\u015flemlerini ger\u00e7ekle\u015ftirmektir. Kamu anahtarlar\u0131 altyap\u0131s\u0131 (PKI \u2013 Public Key Infrastructure) arac\u0131l\u0131\u011f\u0131yla, sunucu ile istemci (\u00f6rne\u011fin bir taray\u0131c\u0131) aras\u0131nda g\u00fcvenli ve \u015fifreli bir ba\u011flant\u0131 kurar.<\/p>\n\n\n\n

SSL\/TLS Protokol\u00fcn\u00fcn \u0130\u015fleyi\u015f S\u00fcreci<\/h3>\n\n\n\n

Taray\u0131c\u0131n\u0131za \u201chttps\u201d ile ba\u015flayan bir web adresi girdi\u011finizde, hemen bir \u201cel s\u0131kma\u201d (handshake) i\u015flemi ba\u015flar. \u00d6ncelikle taray\u0131c\u0131n\u0131z, g\u00fcvenli bir ba\u011flant\u0131 kurmak i\u00e7in sunucuya bir istek g\u00f6nderir. Daha sonra sunucu, SSL sertifikas\u0131n\u0131 (kamu anahtar\u0131 i\u00e7eren) taray\u0131c\u0131ya g\u00f6nderir. Taray\u0131c\u0131, bu sertifikan\u0131n vereninin g\u00fcvenilir olup olmad\u0131\u011f\u0131n\u0131, sertifikan\u0131n ge\u00e7erlilik s\u00fcresi i\u00e7inde olup olmad\u0131\u011f\u0131n\u0131 ve sertifikadaki alan ad\u0131n\u0131n ziyaret etti\u011finiz alan ad\u0131yla e\u015fle\u015fip e\u015fle\u015fmedi\u011fini do\u011frular.<\/p>\n\n\n\n

Do\u011frulama i\u015flemi tamamland\u0131ktan sonra, taray\u0131c\u0131 rastgele bir \u201coturum anahtar\u0131\u201d olu\u015fturur ve bu anahtar\u0131 sunucunun genel anahtar\u0131 ile \u015fifreleyerek sunucuya g\u00f6nderir. Sunucu, kendi sahip oldu\u011fu \u00f6zel anahtar ile bu anahtar\u0131 \u00e7\u00f6zerek oturum anahtar\u0131n\u0131 elde eder. B\u00f6ylece her iki taraf da yaln\u0131zca kendilerinin bildi\u011fi bir ortak ana\u011fa sahip olur. Bundan sonra t\u00fcm ileti\u015fim i\u00e7erikleri, bu etkili simetrik oturum anahtar\u0131 kullan\u0131larak \u015fifrelenir ve \u015fifresi \u00e7\u00f6z\u00fcl\u00fcr; bu da iletilen verilerin gizlili\u011fini ve b\u00fct\u00fcnl\u00fc\u011f\u00fcn\u00fc sa\u011flar.<\/p>\n\n\n\n

Sertifikan\u0131n temel bile\u015fenleri<\/h3>\n\n\n\n

Standard bir SSL sertifikas\u0131, a\u015fa\u011f\u0131daki temel bilgileri i\u00e7erir: sertifikan\u0131n verildi\u011fi ki\u015fi (web sitesi alan ad\u0131 veya kurulu\u015f ad\u0131), sertifikan\u0131n verildi\u011fi yetkili kurulu\u015f (sertifika yetkilisi CA), genel anahtar dizisi, sertifikan\u0131n ge\u00e7erlilik tarihleri ve CA'n\u0131n sertifika bilgileri i\u00e7in olu\u015fturdu\u011fu dijital imza. Bu imza, sertifikan\u0131n d\u00fczenlenmesinden sonra de\u011fi\u015ftirilemeyecek \u015fekilde \u00f6nemlidir.<\/p>\n\n

\r\n\t\r\n\t\t\r\n\t\r\n\t
\r\n\t\t
\r\n\t\t\t\r\n\t\t\t
\r\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"Bluehost\r\n\t\t\t\t\t\t\t\t\t\r\n\t\t\t<\/div>\r\n\t\t\t\r\n\t\t\t\r\n\t\t\t
\r\n\t\t\t\t
\r\n\t\t\t\t\tBluehost SSL sertifikas\u0131.<\/strong>\r\n\t\t\t\t\t\t\t\t\t<\/div>\r\n\t\t\t<\/div>\r\n\t\t<\/div>\r\n\t\t\t\tBlueHost SSL sertifikalar\u0131, 1-2 y\u0131ll\u0131k uzatma s\u00fcresi se\u00e7enekleri sunar, RSA veya ECC algoritmalar\u0131n\u0131 destekler, 4096 bit'e kadar anahtar uzunlu\u011fu sa\u011flar ve 1,75 milyon ABD dolar\u0131na kadar garanti tutar\u0131 sunar.<\/span>\r\n\t\t\t\t
\r\n\t\t\t\r\n\t\t\t\t\t\t\r\n\t\t\t \r\n\t\t\t
\r\n\t\t\t\t\t\t\t\t
Ayl\u0131k $7,49 USD'den ba\u015flayan fiyatlarla.<\/div>\r\n\t\t\t\t\t\t\t\t\t\t\t\tBluehost SSL sertifikas\u0131na eri\u015fin \u2192<\/a>\r\n\t\t\t\t\t\t\t<\/div> \r\n\t\t<\/div>\r\n\t<\/div>\r\n\t\t\r\n\t\r\n\t
\r\n\t\t
\r\n\t\t\t\r\n\t\t\t
\r\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"hosting.com\r\n\t\t\t\t\t\t\t\t\t\r\n\t\t\t<\/div>\r\n\t\t\t\r\n\t\t\t\r\n\t\t\t
\r\n\t\t\t\t
\r\n\t\t\t\t\thosting.com SSL sertifikas\u0131.<\/strong>\r\n\t\t\t\t\t\t\t\t\t<\/div>\r\n\t\t\t<\/div>\r\n\t\t<\/div>\r\n\t\t\t\tUygun fiyatl\u0131 DV, OV, EV SSL sertifikalar\u0131, en y\u00fcksek 256 bit \u015fifreleme, 5 milyon ila 100 milyon ABD dolar\u0131 tutar\u0131nda garanti ve 7\/24 destek.<\/span>\r\n\t\t\t\t
\r\n\t\t\t\r\n\t\t\t\t\t\t\r\n\t\t\t \r\n\t\t\t
\r\n\t\t\t\t\t\t\t\t
Ayl\u0131k $2.5 USD'den ba\u015flayan fiyatlarla.<\/div>\r\n\t\t\t\t\t\t\t\t\t\t\t\tHosting.com SSL sertifikas\u0131na eri\u015fin. \u2192<\/a>\r\n\t\t\t\t\t\t\t<\/div> \r\n\t\t<\/div>\r\n\t<\/div>\r\n\t\t\r\n<\/div>\r\n\r\n\r\n\n\n\n\n\n\n\n

SSL Sertifikalar\u0131n\u0131n Ana T\u00fcrleri ve Se\u00e7imi<\/h2>\n\n\n\n

Piyasadaki \u00e7e\u015fitli sertifikalar kar\u015f\u0131s\u0131nda, bunlar\u0131n farkl\u0131 t\u00fcrlerini anlamak do\u011fru se\u00e7imi yapman\u0131n ilk ad\u0131m\u0131d\u0131r. Sertifikalar esas olarak do\u011frulama seviyesine ve kapsad\u0131klar\u0131 alan ad\u0131 say\u0131s\u0131na g\u00f6re s\u0131n\u0131fland\u0131r\u0131labilir.<\/p>\n\n\n\n

Do\u011frulama seviyesine g\u00f6re s\u0131n\u0131fland\u0131r\u0131lm\u0131\u015f<\/h3>\n\n\n\n

1. Alan Ad\u0131 Do\u011frulamal\u0131 Sertifika: Bu, en temel sertifika t\u00fcr\u00fcd\u00fcr. CA (Certification Authority \u2013 Sertifika Yetkilisi), ba\u015fvuru sahibinin alan ad\u0131 \u00fczerindeki kontrol haklar\u0131n\u0131 yaln\u0131zca do\u011frular (\u00f6rne\u011fin e-posta veya DNS \u00e7\u00f6z\u00fcmleme yoluyla). \u0130mza s\u00fcreci h\u0131zl\u0131d\u0131r ve maliyeti d\u00fc\u015f\u00fckt\u00fcr; bireysel web siteleri, bloglar veya test ortamlar\u0131 i\u00e7in uygundur ve temel \u015fifreleme i\u015flevlerini sa\u011flar.
\n2. Kurumsal Do\u011frulamal\u0131 Sertifikalar: DV (Domain Validation) do\u011frulamas\u0131n\u0131n yan\u0131 s\u0131ra, CA (Certificate Authority \u2013 Sertifika Yetkilisi) ba\u015fvuran kurulu\u015fun ger\u00e7ek varl\u0131\u011f\u0131n\u0131 (\u00f6rne\u011fin i\u015fletme lisans\u0131 vb.) kontrol eder. Sertifikada kurulu\u015fun ad\u0131 yer al\u0131r ve bu da kullan\u0131c\u0131 g\u00fcvenini etkili bir \u015fekilde art\u0131r\u0131r; \u015firket web siteleri ve genel ticari web siteleri i\u00e7in uygundur.
\n3. Geni\u015fletilmi\u015f do\u011frulama tipi sertifikalar: Bu, en s\u0131k\u0131 do\u011frulama s\u00fcre\u00e7lerine ve en y\u00fcksek g\u00fcvenlik seviyelerine sahip sertifikalard\u0131r. CA (Certificate Authority \u2013 Sertifika Yetkilisi), kurulu\u015flar\u0131 kapsaml\u0131 bir \u015fekilde yerinde incelemektedir. En \u00f6nemli \u00f6zelli\u011fi, bu t\u00fcr web sitelerine eri\u015fildi\u011finde, pop\u00fcler taray\u0131c\u0131lar\u0131n adres \u00e7ubu\u011funda do\u011frudan \u015firketin ad\u0131n\u0131n ye\u015fil renkte g\u00f6r\u00fcnmesidir; bu da kullan\u0131c\u0131lara en y\u00fcksek seviyede kimlik do\u011frulama sa\u011flar. Genellikle finans kurulu\u015flar\u0131, b\u00fcy\u00fck e-ticaret platformlar\u0131 gibi yerlerde kullan\u0131l\u0131r.<\/p>\n\n\n\n

\u00d6rt\u00fclen alan adlar\u0131na g\u00f6re s\u0131n\u0131fland\u0131r\u0131lm\u0131\u015f<\/h3>\n\n\n\n

1. Tek Alan Ad\u0131 Sertifikas\u0131: Yaln\u0131zca belirli bir alan ad\u0131n\u0131 (\u00f6rne\u011fin www.example.com) korur.
\n2. \u00c7oklu Alan Ad\u0131 Sertifikas\u0131: Bir sertifika, tamamen farkl\u0131 bir\u00e7ok alan ad\u0131n\u0131 koruyabilir ve birden fazla web sitesini y\u00f6neten \u015firketler i\u00e7in kullan\u0131m\u0131 kolayd\u0131r.
\n3. Jenerik (wildcard) sertifikalar: Bir ana alan ad\u0131n\u0131 ve t\u00fcm ayn\u0131 seviyedeki alt alan adlar\u0131n\u0131 koruyabilir (\u00f6rne\u011fin, *.example.com blog.example.com, shop.example.com vb. alan adlar\u0131n\u0131 koruyabilir). Alt alan ad\u0131 say\u0131s\u0131 \u00e7ok fazla oldu\u011funda, jenerik sertifikalar y\u00f6netimi b\u00fcy\u00fck \u00f6l\u00e7\u00fcde kolayla\u015ft\u0131r\u0131r ve maliyetleri d\u00fc\u015f\u00fcr\u00fcr.<\/p>\n\n\n\n

SSL sertifikalar\u0131n\u0131 nas\u0131l edinebilir ve da\u011f\u0131tabilirsiniz?<\/h2>\n\n\n\n

SSL sertifikalar\u0131n\u0131 edinme ve y\u00fckleme s\u00fcreci giderek daha standart hale gelmekte ve daha kolayla\u015fmaktad\u0131r.<\/p>\n\n\n\n

Sertifika Edinme S\u00fcreci<\/h3>\n\n\n\n

\u9996\u5148\uff0c\u60a8\u9700\u8981\u5728\u60a8\u7684\u670d\u52a1\u5668\u6216\u6258\u7ba1\u5e73\u53f0\u4e0a\u751f\u6210\u4e00\u4e2a\u201c\u8bc1\u4e66\u7b7e\u540d\u8bf7\u6c42\u201d\u6587\u4ef6\u3002\u8fd9\u4e2aCSR\u6587\u4ef6\u5305\u542b\u4e86\u60a8\u7684\u516c\u94a5\u548c\u7ec4\u7ec7\u4fe1\u606f\u3002\u7136\u540e\uff0c\u5411CA\uff08\u5982DigiCert\u3001Sectigo\uff0c\u6216\u514d\u8d39\u7684Let's Encrypt\uff09\u63d0\u4ea4CSR\u8fdb\u884c\u9a8c\u8bc1\u3002\u6839\u636e\u60a8\u7533\u8bf7\u7684\u8bc1\u4e66\u7c7b\u578b\uff0c\u5b8c\u6210\u76f8\u5e94\u7684\u57df\u540d\u6216\u7ec4\u7ec7\u9a8c\u8bc1\u3002\u9a8c\u8bc1\u901a\u8fc7\u540e\uff0cCA\u4f1a\u7b7e\u53d1\u8bc1\u4e66\u6587\u4ef6\uff08\u901a\u5e38\u5305\u542b.crt\u6216.pem\u6587\u4ef6\u4ee5\u53ca\u53ef\u80fd\u7684\u4e2d\u95f4\u8bc1\u4e66\u94fe\uff09\uff0c\u4f9b\u60a8\u4e0b\u8f7d\u3002<\/p>\n\n\n\n

Sunucu Da\u011f\u0131t\u0131m Ad\u0131mlar\u0131<\/h3>\n\n\n\n

Da\u011f\u0131t\u0131m s\u00fcreci, kullan\u0131lan sunucu yaz\u0131l\u0131m\u0131na ba\u011fl\u0131d\u0131r. Yayg\u0131n olarak kullan\u0131lan Nginx \u00f6rne\u011fini ele al\u0131rsak, indirdi\u011finiz sertifika dosyalar\u0131n\u0131 (sunucu sertifikas\u0131 ve CA ara sertifikas\u0131) ve daha \u00f6nce olu\u015fturdu\u011funuz \u00f6zel anahtar dosyas\u0131n\u0131 sunucunun belirtilen dizinine y\u00fcklemeniz gerekir. Daha sonra, Nginx\u2019in site yap\u0131land\u0131rma dosyas\u0131n\u0131 de\u011fi\u015ftirerek, 443 numaral\u0131 portu dinleyen sunucu blo\u011funda sertifika ve \u00f6zel anahtar dosyalar\u0131n\u0131n yolunu do\u011fru bir \u015fekilde belirtmelisiniz. De\u011fi\u015fikliklerin etkin olmas\u0131 i\u00e7in Nginx yap\u0131land\u0131rmas\u0131n\u0131 yeniden y\u00fcklemeniz gerekir. Da\u011f\u0131t\u0131m i\u015fleminden sonra, sertifikan\u0131n do\u011fru bir \u015fekilde y\u00fcklendi\u011fini, zincirin eksiksiz oldu\u011funu ve herhangi bir g\u00fcvenlik a\u00e7\u0131\u011f\u0131 bulunmad\u0131\u011f\u0131n\u0131 kontrol etmek i\u00e7in \u00e7evrimi\u00e7i ara\u00e7lar kullanmal\u0131s\u0131n\u0131z.<\/p>\n\n\n\n

Otomasyon ve \u00dccretsiz Sertifikalar<\/h3>\n\n\n\n

\u5bf9\u4e8e\u5e0c\u671b\u7b80\u5316\u6d41\u7a0b\u7684\u7528\u6237\uff0c\u53ef\u4ee5\u5229\u7528\u81ea\u52a8\u5316\u5de5\u5177\u3002\u4f8b\u5982\uff0cLet's Encrypt\u63d0\u4f9b\u7684Certbot\u5ba2\u6237\u7aef\uff0c\u53ef\u4ee5\u81ea\u52a8\u5b8c\u6210\u4ece\u7533\u8bf7\u3001\u9a8c\u8bc1\u5230\u90e8\u7f72\u3001\u7eed\u671f\u7684\u5168\u8fc7\u7a0b\uff0c\u6781\u5927\u5730\u964d\u4f4e\u4e86\u4f7f\u7528HTTPS\u7684\u95e8\u69db\uff0c\u63a8\u52a8\u4e86\u5168\u7f51\u7684\u52a0\u5bc6\u5316\u8fdb\u7a0b\u3002<\/p>\n\n\n\n

SSL Sertifikas\u0131 Y\u00f6netiminin En \u0130yi Uygulamalar\u0131<\/h2>\n\n\n\n

Sertifikalar\u0131n da\u011f\u0131t\u0131lmas\u0131 bir kez yap\u0131lan bir i\u015flem de\u011fildir; s\u00fcrekli ve etkili bir y\u00f6netim, uzun vadeli g\u00fcvenli\u011fin sa\u011flanmas\u0131n\u0131n anahtar\u0131d\u0131r.<\/p>\n\n\n

\n\n
\n UltaHost SSL sertifikas\u0131.<\/strong>\n
DV, EV, OV sertifikalar\u0131, en fazla $1, 750.000 ABD dolar\u0131 teminat tutar\u0131n\u0131 destekler, s\u0131n\u0131rs\u0131z alt alan ad\u0131n\u0131 destekler, iOS ve Android uygulamalar\u0131n\u0131 destekler ve 20%'den ba\u015flayan ayl\u0131k $15,95 ABD dolar\u0131 fiyatla 30 g\u00fcnl\u00fck para iade garantisi sunar.<\/div>\n <\/div>\n\n
\n \n \n \"SSL\n \n \n <\/a>\n \n \n UltaHost'u ziyaret edin. <\/a>\n <\/div>\n <\/div>\n\n \n\n\n\n\n\n\n

Zaman\u0131nda izleme ve yenileme<\/h3>\n\n\n\n

SSL sertifikalar\u0131n\u0131n belirgin bir ge\u00e7erlilik s\u00fcresi vard\u0131r (\u015fu anki en uzun s\u00fcre 13 ayd\u0131r; bu s\u00fcre CA\/B forumlar\u0131 taraf\u0131ndan belirlenmi\u015ftir). Sertifikan\u0131n s\u00fcresinin dolmas\u0131, web sitesinin eri\u015filemez hale gelmesine ve g\u00fcvenlik uyar\u0131lar\u0131n\u0131n \u00e7\u0131kmas\u0131na neden olur; bu da itibar\u0131 ciddi \u015fekilde zarar verir. En iyi uygulama, en az sertifikan\u0131n s\u00fcresi dolmadan 30 g\u00fcn \u00f6nce yenileme i\u015flemini ba\u015flatan bir izleme ve uyar\u0131 mekanizmas\u0131 kurmakt\u0131r. Otomatikle\u015ftirilmi\u015f ara\u00e7lar, sertifikan\u0131n s\u00fcresinin dolmas\u0131n\u0131 tamamen \u00f6nlemek i\u00e7in otomatik yenileme i\u015flemlerini ger\u00e7ekle\u015ftirebilir.<\/p>\n\n\n\n

G\u00fc\u00e7l\u00fc \u015fifreleme paketleri ve protokolleri kullan\u0131n.<\/h3>\n\n\n\n

Sadece sertifikalar\u0131 y\u00fcklemek yeterli de\u011fildir; ayn\u0131 zamanda sunucunun g\u00fc\u00e7l\u00fc \u015fifreleme algoritmalar\u0131 ve g\u00fcvenli protokol s\u00fcr\u00fcmlerini kulland\u0131\u011f\u0131ndan emin olman\u0131z gerekir. Eski ve g\u00fcvenli olmayan SSL protokolleri (\u00f6rne\u011fin SSL 2.0\/3.0) devre d\u0131\u015f\u0131 b\u0131rak\u0131lmal\u0131, tercihen TLS 1.2 veya TLS 1.3 kullan\u0131lmal\u0131 ve bilinen g\u00fcvenlik a\u00e7\u0131klar\u0131na kar\u015f\u0131 korunmak i\u00e7in g\u00fc\u00e7l\u00fc \u015fifreleme paketleri yap\u0131land\u0131r\u0131lmal\u0131d\u0131r.<\/p>\n\n\n\n

HTTP Strict Transport Security (HTTS) uygulamas\u0131<\/h3>\n\n\n\n

HSTS (HTTP Strict Security Policy), \u00f6nemli bir g\u00fcvenlik politikas\u0131 mekanizmas\u0131d\u0131r. Bir yan\u0131t ba\u015fl\u0131\u011f\u0131 arac\u0131l\u0131\u011f\u0131yla taray\u0131c\u0131ya, belirtilen s\u00fcre boyunca s\u00f6z konusu web sitesinin t\u00fcm ba\u011flant\u0131lar\u0131n\u0131n HTTPS kullanmas\u0131 gerekti\u011fi bildirilir. Bu, d\u00fc\u015f\u00fcrme (downgrade) sald\u0131r\u0131lar\u0131n\u0131 ve protokol ka\u00e7\u0131rmalar\u0131n\u0131 (protocol hijacking) etkili bir \u015fekilde \u00f6nleyerek g\u00fcvenli\u011fi daha da art\u0131r\u0131r. Web sitenizi taray\u0131c\u0131n\u0131n HSTS \u00f6nceden y\u00fckleme (preloading) listesine ekleyerek daha kapsaml\u0131 bir koruma sa\u011flayabilirsiniz.<\/p>\n\n\n\n

\u00d6zetle.<\/h2>\n\n\n\n

SSL sertifikalar\u0131, g\u00fcvenilir ve g\u00fcvenli bir a\u011f ortam\u0131 olu\u015fturman\u0131n temel ta\u015f\u0131d\u0131r. Hassas asimetrik ve simetrik \u015fifreleme tekniklerinin birle\u015ftirilmesiyle, veri aktar\u0131m\u0131n\u0131n gizlili\u011fini, b\u00fct\u00fcnl\u00fc\u011f\u00fcn\u00fc ve sunucunun kimli\u011finin do\u011frulu\u011funu sa\u011flar. \u0130lkelerini anlamaktan, ihtiya\u00e7lara uygun sertifika t\u00fcr\u00fcn\u00fc se\u00e7meye, do\u011fru bir \u015fekilde da\u011f\u0131tmaktan ve uzun vadeli y\u00f6netimi sa\u011flamaya kadar her ad\u0131m son derece \u00f6nemlidir. G\u00fcn\u00fcm\u00fczde a\u011f g\u00fcvenli\u011fi standartlar\u0131n\u0131n giderek artt\u0131\u011f\u0131 bir ortamda, web siteleri i\u00e7in SSL sertifikalar\u0131n\u0131 da\u011f\u0131tmak ve bunlar\u0131 uygun \u015fekilde y\u00f6netmek, art\u0131k sadece bir \u201cart\u0131 puan\u201d olmaktan \u00e7\u0131k\u0131p g\u00f6z ard\u0131 edilemeyecek bir \u201ctemel gereklilik\u201d ve zorunlu bir sorumluluk haline gelmi\u015ftir.<\/p>\n\n\n\n

S\u0131k\u00e7a Sorulan Sorular.<\/h2>\n\n\n\n

HTTPS ve SSL ayn\u0131 \u015fey midir?<\/h3>\n\n\n\n

HTTPS, \u201cHTTP \u00fczerinden SSL\/TLS\u201d anlam\u0131na gelir. Daha teknik bir ifadeyle, SSL\/TLS iletim katman\u0131 ile uygulama katman\u0131 aras\u0131nda kullan\u0131lan bir \u015fifreleme protokol\u00fcd\u00fcr; HTTPS ise bu SSL\/TLS g\u00fcvenlik t\u00fcnelinin \u00fczerinde \u00e7al\u0131\u015fan HTTP protokol\u00fcd\u00fcr. Genellikle \u201cbir web sitesinin SSL kurdu\u011fundan\u201d bahsetti\u011fimizde, bu web sitesinin HTTPS eri\u015fimini destekledi\u011fi anlam\u0131na gelir.<\/p>\n\n\n\n

\u00dccretsiz SSL sertifikalar\u0131n\u0131n \u00fccretli olanlardan ne fark\u0131 var?<\/h3>\n\n\n\n

\u4e3b\u8981\u533a\u522b\u5728\u4e8e\u9a8c\u8bc1\u7ea7\u522b\u3001\u4fdd\u9669\u8d54\u4ed8\u3001\u6280\u672f\u652f\u6301\u548c\u670d\u52a1\u7b49\u7ea7\u534f\u8bae\u3002\u514d\u8d39\u8bc1\u4e66\uff08\u5982Let's Encrypt\uff09\u901a\u5e38\u53ea\u63d0\u4f9b\u57df\u540d\u9a8c\u8bc1\uff0c\u7b7e\u53d1\u81ea\u52a8\u5316\uff0c\u9002\u5408\u57fa\u7840\u52a0\u5bc6\u9700\u6c42\u3002\u4ed8\u8d39\u8bc1\u4e66\u5219\u63d0\u4f9b\u7ec4\u7ec7\u9a8c\u8bc1\u6216\u6269\u5c55\u9a8c\u8bc1\uff0c\u5305\u542b\u66f4\u9ad8\u7684\u8eab\u4efd\u62c5\u4fdd\u3001\u6d4f\u89c8\u5668\u5730\u5740\u680f\u7684\u663e\u8457\u6807\u8bc6\uff08\u5982\u7eff\u8272\u516c\u53f8\u540d\uff09\u3001\u4ee5\u53ca\u56e0\u8bc1\u4e66\u95ee\u9898\u5bfc\u81f4\u635f\u5931\u7684\u7ecf\u6d4e\u8d54\u507f\u4fdd\u969c\u548c\u6280\u672f\u652f\u6301\u670d\u52a1\u3002<\/p>\n\n\n\n

Web siteme SSL sertifikas\u0131 y\u00fcklenmesine ra\u011fmen taray\u0131c\u0131 hala g\u00fcvensiz olarak g\u00f6steriyor?<\/h3>\n\n\n\n

Bunun bir\u00e7ok nedeni olabilir. En yayg\u0131n neden, web sayfas\u0131nda HTTP protokol\u00fc kullanan kaynaklar\u0131n (resimler, betikler, stil \u015femalar\u0131 gibi) kar\u0131\u015f\u0131k bir \u015fekilde y\u00fcklenmesidir. Taray\u0131c\u0131, bunlar\u0131 g\u00fcvenli olmayan i\u00e7erik olarak de\u011ferlendirir ve bu nedenle bir uyar\u0131 g\u00f6r\u00fcnt\u00fcler. Web sayfas\u0131ndaki t\u00fcm kaynak ba\u011flant\u0131lar\u0131n\u0131n HTTPS kullanarak olu\u015fturuldu\u011fundan emin olman\u0131z gerekir. Di\u011fer olas\u0131 nedenler aras\u0131nda sertifikan\u0131n s\u00fcresinin dolmas\u0131, sertifikan\u0131n alan ad\u0131yla e\u015fle\u015fmemesi veya ara sertifika zincirinin eksik olmas\u0131 yer alabilir.<\/p>\n\n\n\n

Jenerik (wildcard) sertifikalar, \u00e7ok katmanl\u0131 alt alan adlar\u0131n\u0131 (subdomains) koruyabilir mi?<\/h3>\n\n\n\n

Standart joker karakterli sertifikalar (\u00f6rne\u011fin *.example.com), yaln\u0131zca birinci seviye alt alan adlar\u0131n\u0131 koruyabilir; \u00f6rne\u011fin blog.example.com veya shop.example.com. dev.www.example.com gibi ikinci seviye alt alan adlar\u0131n\u0131 koruyamaz. Birden fazla seviyeli alt alan adlar\u0131n\u0131 korumak gerekiyorsa, genellikle belirli alt alan adlar\u0131n\u0131 i\u00e7eren \u00e7ok alan adl\u0131 bir sertifika talep etmek veya farkl\u0131 seviyeler i\u00e7in ayr\u0131 ayr\u0131 joker karakterli sertifikalar almak gerekir.<\/p>\n\n\n\n

SSL sertifikalar\u0131 her y\u0131l yeniden sat\u0131n al\u0131nmak zorunda m\u0131d\u0131r?<\/h3>\n\n\n\n

SSL sertifikalar\u0131n\u0131n belirli bir ge\u00e7erlilik s\u00fcresi vard\u0131r; bu nedenle her y\u0131l yeniden sat\u0131n almak yerine d\u00fczenli olarak yenilenmeleri gerekir. Eski sertifikan\u0131n s\u00fcresi dolmadan \u00f6nce, orijinal CA\u2019dan (Certificate Authority) veya ba\u015fka bir CA\u2019dan yeni bir sertifika talep edebilirsiniz. Sekt\u00f6rdeki mevcut e\u011filim, g\u00fcvenli\u011fi art\u0131rmak amac\u0131yla sertifika ge\u00e7erlilik s\u00fcrelerinin s\u00fcrekli k\u0131salt\u0131lmas\u0131 y\u00f6n\u00fcndedir. Bu nedenle, otomatik yenileme ve y\u00f6netim ara\u00e7lar\u0131n\u0131n kullan\u0131m\u0131 son derece \u00f6nemlidir.<\/p>","protected":false},"excerpt":{"rendered":"

SSL sertifikalar\u0131, HTTPS \u015fifrelemesinin ve web sitelerinin kimlik do\u011frulamas\u0131n\u0131n ger\u00e7ekle\u015ftirilmesinde kilit bir rol oynar. Bu makalede, SSL sertifikalar\u0131n\u0131n \u00e7al\u0131\u015fma prensipleri ve el s\u0131kma (handshake) s\u00fcreci ayr\u0131nt\u0131l\u0131 bir \u015fekilde a\u00e7\u0131klanmaktad\u0131r. Ayr\u0131ca, farkl\u0131 do\u011frulama seviyelerine ve kapsamlar\u0131na sahip sertifika t\u00fcrleri kar\u015f\u0131la\u015ft\u0131r\u0131lmaktad\u0131r. Ayr\u0131ca, ba\u015fvuru, da\u011f\u0131t\u0131m, otomatik yenileme ve g\u00fcvenlik ayarlamalar\u0131na kadar olan s\u00fcreci kapsayan kapsaml\u0131 bir uygulama rehberi sunulmaktad\u0131r; bu rehber, kullan\u0131c\u0131lar\u0131n web sitelerinin ileti\u015fim g\u00fcvenli\u011fini etkili bir \u015fekilde sa\u011flamalar\u0131na yard\u0131mc\u0131 olur.<\/p>","protected":false},"author":7,"featured_media":0,"template":"","meta":{"_acf_changed":false,"footnotes":""},"tags":[],"knowledge_category":[277],"class_list":["post-12362766","knowledge_post","type-knowledge_post","status-publish","hentry","knowledge_category-ssl-certificate"],"acf":{"site_seo_keywords":"SSL\u8bc1\u4e66,TLS\u52a0\u5bc6,HTTPS\u90e8\u7f72,\u8bc1\u4e66\u7c7b\u578b,\u8bc1\u4e66\u7533\u8bf7,SSL\u8bc1\u4e66\u7ba1\u7406,SSL\u8bc1\u4e66\u6700\u4f73\u5b9e\u8df5,\u901a\u914d\u7b26\u8bc1\u4e66"},"_links":{"self":[{"href":"https:\/\/www.likacloud.com\/tr\/wp-json\/wp\/v2\/knowledge_posts\/12362766","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.likacloud.com\/tr\/wp-json\/wp\/v2\/knowledge_posts"}],"about":[{"href":"https:\/\/www.likacloud.com\/tr\/wp-json\/wp\/v2\/types\/knowledge_post"}],"author":[{"embeddable":true,"href":"https:\/\/www.likacloud.com\/tr\/wp-json\/wp\/v2\/users\/7"}],"version-history":[{"count":0,"href":"https:\/\/www.likacloud.com\/tr\/wp-json\/wp\/v2\/knowledge_posts\/12362766\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.likacloud.com\/tr\/wp-json\/wp\/v2\/media?parent=12362766"}],"wp:term":[{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.likacloud.com\/tr\/wp-json\/wp\/v2\/tags?post=12362766"},{"taxonomy":"knowledge_category","embeddable":true,"href":"https:\/\/www.likacloud.com\/tr\/wp-json\/wp\/v2\/knowledge_category?post=12362766"}],"curies":[{"name":"WP","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}