{"id":12366235,"date":"2026-03-13T18:23:23","date_gmt":"2026-03-13T10:23:23","guid":{"rendered":"https:\/\/www.likacloud.com\/knowledge\/%e4%b8%80%e6%96%87%e8%af%bb%e6%87%82ssl%e8%af%81%e4%b9%a6%ef%bc%9a%e7%b1%bb%e5%9e%8b%e3%80%81%e5%b7%a5%e4%bd%9c%e5%8e%9f%e7%90%86%e4%b8%8e%e5%ae%89%e8%a3%85%e9%85%8d%e7%bd%ae%e5%85%a8%e6%8c%87\/"},"modified":"2026-03-13T18:38:06","modified_gmt":"2026-03-13T10:38:06","slug":"ssl-certificate-types-how-it-works-installation-configuration-guide","status":"publish","type":"knowledge_post","link":"https:\/\/www.likacloud.com\/tr\/knowledge\/ssl-certificate\/ssl-certificate-types-how-it-works-installation-configuration-guide\/","title":{"rendered":"SSL Sertifikalar\u0131n\u0131 Anlaman\u0131z \u0130\u00e7in K\u0131sa Bir Rehber: T\u00fcrler, \u00c7al\u0131\u015fma Prensibi ve Kurulum\/Yap\u0131land\u0131rma K\u0131lavuzu"},"content":{"rendered":"

\u0130nternet d\u00fcnyas\u0131nda, verilerin g\u00fcvenli bir \u015fekilde aktar\u0131lmas\u0131, ileti\u015fim kanallar\u0131na k\u0131r\u0131lmaz bir kilit takmak gibidir. SSL sertifikas\u0131 bu kilitin \u00e7ekirde\u011fidir; sadece web sitesi adres \u00e7ubu\u011fundaki ye\u015fil kilit simgesi de\u011fil, ayn\u0131 zamanda internet g\u00fcvenli\u011finin olu\u015fturulmas\u0131, kullan\u0131c\u0131 gizlili\u011finin ve veri b\u00fct\u00fcnl\u00fc\u011f\u00fcn\u00fcn korunmas\u0131 i\u00e7in de temel bir teknolojik yap\u0131d\u0131r. SSL sertifikalar\u0131n\u0131 anlamak, her web sitesi sahibi, geli\u015ftirici ve g\u00fcvenlik uzman\u0131 i\u00e7in son derece \u00f6nemlidir.<\/p>\n\n\n\n

SSL Sertifikas\u0131n\u0131n Temel Kavramlar\u0131 ve Ana \u0130\u015flevleri<\/h2>\n\n\n\n

SSL (G\u00fcvenli Ba\u011flant\u0131 Katman\u0131) ve onun halefi TLS (\u0130letim Katman\u0131 G\u00fcvenli\u011fi) protokolleri, \u015fifreli ba\u011flant\u0131lar kurmak i\u00e7in kullan\u0131lan standart g\u00fcvenlik teknolojileridir. SSL sertifikalar\u0131 ise bu protokolleri ger\u00e7ekle\u015ftiren dijital dosyalard\u0131r ve a\u011f ileti\u015fiminde \u201cdijital pasaport\u201d g\u00f6revi g\u00f6r\u00fcr; sunucu (web sitesi) ile istemci (taray\u0131c\u0131) aras\u0131nda g\u00fcvenli ve \u015fifreli bir ba\u011flant\u0131 kurulmas\u0131n\u0131 sa\u011flar.<\/p>\n\n\n\n

Kimlik Do\u011frulama ve G\u00fcven Olu\u015fturma<\/h3>\n\n\n\n

SSL sertifikas\u0131n\u0131n temel amac\u0131, sunucunun kimli\u011fini do\u011frulamakt\u0131r. Sertifika, g\u00fcvenilir bir \u00fc\u00e7\u00fcnc\u00fc taraf kurulu\u015f taraf\u0131ndan \u2013 yani sertifika veren kurulu\u015f (CA) taraf\u0131ndan \u2013 verilir ve bu sertifika i\u00e7inde web sitesinin sahibine ait bilgiler, alan ad\u0131, sertifikan\u0131n ge\u00e7erlilik s\u00fcresi ve CA\u2019n\u0131n dijital imzas\u0131 bulunur. Kullan\u0131c\u0131lar, ge\u00e7erli bir SSL sertifikas\u0131 bulunan bir web sitesine eri\u015fti\u011finde taray\u0131c\u0131 sertifikan\u0131n ger\u00e7ekli\u011fini do\u011frular ve \u201cZiyaret etti\u011fim sitenin istedi\u011fim site oldu\u011fundan, sahte bir taklit sitesi olmad\u0131\u011f\u0131ndan\u201d emin olur. Bu durum, ziyaret\u00e7ilere kimlik g\u00fcvenli\u011fi sa\u011flar ve e-ticaret, \u00e7evrimi\u00e7i bankac\u0131l\u0131k gibi hizmetler i\u00e7in vazge\u00e7ilmez bir unsurdur.<\/p>\n

Tavsiye edilen okuma SSL sertifikas\u0131 nedir? Prensibi, t\u00fcrleri ve kullan\u0131m alanlar\u0131 hakk\u0131nda kapsaml\u0131 bir analiz.<\/a>\u3002<\/p>\n\n\n\n\n

Veri \u015eifreleme ve Gizlilik Koruma<\/h3>\n\n\n\n

SSL sertifikas\u0131n\u0131n bir di\u011fer temel i\u015flevi, veri \u015fifrelemesini sa\u011flamakt\u0131r. Asimetrik ve simetrik \u015fifreleme y\u00f6ntemlerinin birle\u015ftirilmesiyle, istemci ve sunucu aras\u0131nda benzersiz bir oturum anahtar\u0131 olu\u015fturulur. Daha sonra, her iki taraf aras\u0131nda iletilen t\u00fcm veriler (\u00f6rne\u011fin giri\u015f bilgileri, kredi kart\u0131 numaralar\u0131, ki\u015fisel bilgiler, sohbet kay\u0131tlar\u0131) bu anahtar kullan\u0131larak \u015fifrelenir. Veriler iletilirken ele ge\u00e7irilse bile, sald\u0131rgan\u0131n eline ge\u00e7en sadece okunamaz bir \u015fifrelenmi\u015f metin olur; bu da bilgilerin gizlili\u011fini sa\u011flar.<\/p>\n\n

\r\n\t\r\n\t\t\r\n\t\r\n\t
\r\n\t\t
\r\n\t\t\t\r\n\t\t\t
\r\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"Bluehost\r\n\t\t\t\t\t\t\t\t\t\r\n\t\t\t<\/div>\r\n\t\t\t\r\n\t\t\t\r\n\t\t\t
\r\n\t\t\t\t
\r\n\t\t\t\t\tBluehost SSL sertifikas\u0131.<\/strong>\r\n\t\t\t\t\t\t\t\t\t<\/div>\r\n\t\t\t<\/div>\r\n\t\t<\/div>\r\n\t\t\t\tBlueHost SSL sertifikalar\u0131, 1-2 y\u0131ll\u0131k uzatma s\u00fcresi se\u00e7enekleri sunar, RSA veya ECC algoritmalar\u0131n\u0131 destekler, 4096 bit'e kadar anahtar uzunlu\u011fu sa\u011flar ve 1,75 milyon ABD dolar\u0131na kadar garanti tutar\u0131 sunar.<\/span>\r\n\t\t\t\t
\r\n\t\t\t\r\n\t\t\t\t\t\t\r\n\t\t\t \r\n\t\t\t
\r\n\t\t\t\t\t\t\t\t
Ayl\u0131k $7,49 USD'den ba\u015flayan fiyatlarla.<\/div>\r\n\t\t\t\t\t\t\t\t\t\t\t\tBluehost SSL sertifikas\u0131na eri\u015fin \u2192<\/a>\r\n\t\t\t\t\t\t\t<\/div> \r\n\t\t<\/div>\r\n\t<\/div>\r\n\t\t\r\n\t\r\n\t
\r\n\t\t
\r\n\t\t\t\r\n\t\t\t
\r\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"hosting.com\r\n\t\t\t\t\t\t\t\t\t\r\n\t\t\t<\/div>\r\n\t\t\t\r\n\t\t\t\r\n\t\t\t
\r\n\t\t\t\t
\r\n\t\t\t\t\thosting.com SSL sertifikas\u0131.<\/strong>\r\n\t\t\t\t\t\t\t\t\t<\/div>\r\n\t\t\t<\/div>\r\n\t\t<\/div>\r\n\t\t\t\tUygun fiyatl\u0131 DV, OV, EV SSL sertifikalar\u0131, en y\u00fcksek 256 bit \u015fifreleme, 5 milyon ila 100 milyon ABD dolar\u0131 tutar\u0131nda garanti ve 7\/24 destek.<\/span>\r\n\t\t\t\t
\r\n\t\t\t\r\n\t\t\t\t\t\t\r\n\t\t\t \r\n\t\t\t
\r\n\t\t\t\t\t\t\t\t
Ayl\u0131k $2.5 USD'den ba\u015flayan fiyatlarla.<\/div>\r\n\t\t\t\t\t\t\t\t\t\t\t\tHosting.com SSL sertifikas\u0131na eri\u015fin. \u2192<\/a>\r\n\t\t\t\t\t\t\t<\/div> \r\n\t\t<\/div>\r\n\t<\/div>\r\n\t\t\r\n<\/div>\r\n\r\n\r\n\n\n\n\n\n\n\n

Veri b\u00fct\u00fcnl\u00fc\u011f\u00fcn\u00fcn korunmas\u0131<\/h3>\n\n\n\n

SSL\/TLS protokol\u00fc, \u015fifrelemenin yan\u0131 s\u0131ra Mesaj Do\u011frulama Kodu (Message Authentication Code \u2013 MAC) arac\u0131l\u0131\u011f\u0131yla verilerin b\u00fct\u00fcnl\u00fc\u011f\u00fcn\u00fc de sa\u011flar. Bu, verilerin iletim s\u0131ras\u0131nda herhangi bir \u015fekilde de\u011fi\u015ftirilmesi durumunda al\u0131c\u0131n\u0131n bunu hemen fark edebilece\u011fi anlam\u0131na gelir; b\u00f6ylece arac\u0131 sald\u0131r\u0131lar\u0131n\u0131n veriler \u00fczerinde k\u00f6t\u00fc niyetli de\u011fi\u015fiklikler yapmas\u0131n\u0131 engeller.<\/p>\n\n\n\n

SSL sertifikalar\u0131n\u0131n ana tipleri ve se\u00e7imi.<\/h2>\n\n\n\n

Do\u011frulama seviyesine ve i\u015flevsellik kapsam\u0131na g\u00f6re, SSL sertifikalar\u0131 esas olarak a\u015fa\u011f\u0131daki t\u00fcrlerde s\u0131n\u0131fland\u0131r\u0131l\u0131r ve farkl\u0131 i\u015f senaryolar\u0131 ile g\u00fcvenlik ihtiya\u00e7lar\u0131na uygun olarak kullan\u0131l\u0131r.<\/p>\n\n\n\n

Domain do\u011frulama sertifikas\u0131.<\/h3>\n\n\n\n

DV sertifikalar\u0131, en temel ve en h\u0131zl\u0131 verilen SSL sertifikalar\u0131d\u0131r. CA (Certification Authority \u2013 Sertifika Yetkilisi), ba\u015fvuru sahibinin alan ad\u0131na olan hak sahipli\u011fini do\u011frular (genellikle e-posta veya DNS \u00e7\u00f6z\u00fcmleme kay\u0131tlar\u0131 arac\u0131l\u0131\u011f\u0131yla); ancak \u015firketin veya kurulu\u015fun ger\u00e7ek kimli\u011fini do\u011frulamaz. Bu nedenle, sertifikada yaln\u0131zca alan ad\u0131 bilgileri bulunur.
\nBu sertifikalar\u0131n fiyat\u0131 d\u00fc\u015f\u00fckt\u00fcr hatta bazen \u00fccretsizdir ve ki\u015fisel bloglar, k\u00fc\u00e7\u00fck web siteleri veya test ortamlar\u0131 i\u00e7in uygundur. Temel \u015fifreleme \u00f6zellikleri sunarlar; ancak kullan\u0131c\u0131lara derinlemesine g\u00fcven olu\u015fturacak ayr\u0131nt\u0131l\u0131 kurumsal bilgiler sa\u011flayamazlar.<\/p>\n\n\n\n

Kurulu\u015f do\u011frulama sertifikas\u0131.<\/h3>\n\n\n\n

OV sertifikalar\u0131n\u0131n do\u011frulama s\u00fcreci daha kat\u0131d\u0131r. CA (Certificate Authority \u2013 Sertifika Yetkilisi), yaln\u0131zca alan ad\u0131n\u0131n sahipli\u011fini do\u011frulamakla kalmaz; ayn\u0131 zamanda ba\u015fvuran \u015firketin ger\u00e7ek varl\u0131\u011f\u0131n\u0131 da kontrol eder; bu kontrol \u015firket ad\u0131, adres, telefon numaras\u0131 gibi bilgileri de i\u00e7erir. Bu bilgiler, kullan\u0131c\u0131lar\u0131n incelemesi i\u00e7in sertifika detaylar\u0131nda yer al\u0131r.
\nOV sertifikas\u0131, web sitelerinin g\u00fcvenilirli\u011fini \u00f6nemli \u00f6l\u00e7\u00fcde art\u0131rmaktad\u0131r ve \u015firket resmi web siteleri, genel e-ticaret siteleri ve yasal bir kurulu\u015fun kimli\u011fini g\u00f6stermesi gereken \u00e7evrimi\u00e7i hizmet platformlar\u0131 i\u00e7in uygundur.<\/p>\n

Tavsiye edilen okuma SSL sertifikalar\u0131n\u0131n kapsaml\u0131 analizi: ilkenden kurulumaya kadar, 10 dakika i\u00e7inde web sitenizin g\u00fcvenli\u011fi ve g\u00fcvenilirli\u011fi sorunlar\u0131n\u0131 \u00e7\u00f6z\u00fcn.<\/a>\u3002<\/p>\n\n\n\n\n

Geni\u015fletilmi\u015f do\u011frulama sertifikas\u0131.<\/h3>\n\n\n\n

EV sertifikalar\u0131 en y\u00fcksek seviyede do\u011frulama ve g\u00fcvenlik sa\u011flar. CA\u2019lar (Certificate Authorities), k\u00fcresel olarak kabul edilen standartlara uygun en s\u0131k\u0131 inceleme s\u00fcre\u00e7lerini uygular ve \u015firketlerin yasal ve fiziksel varl\u0131klar\u0131n\u0131 ayr\u0131nt\u0131l\u0131 bir \u015fekilde kontrol eder. EV sertifikas\u0131 bulunan web siteleri, \u00e7o\u011fu pop\u00fcler taray\u0131c\u0131da sadece g\u00fcvenlik kiliti simgesi yerine, \u015firket ad\u0131 da do\u011frudan ye\u015fil renkte g\u00f6sterilir.
\nBu sertifika, finans kurulu\u015flar\u0131, b\u00fcy\u00fck e-ticaret platformlar\u0131, h\u00fck\u00fcmet kurumlar\u0131 gibi g\u00fcvenlik ve g\u00fcven konusunda \u00e7ok y\u00fcksek gereksinimleri olan kurulu\u015flar i\u00e7in tercih edilir ve kullan\u0131c\u0131lar\u0131n sahte web siteleri konusundaki endi\u015felerini en aza indirir.<\/p>\n\n\n\n

\u0130\u015flevsel kapsama g\u00f6re s\u0131n\u0131fland\u0131rma: Tek alan ad\u0131, \u00e7ok alan ad\u0131 ve joker karakter i\u00e7eren sertifikalar<\/h3>\n\n\n\n

Do\u011frulama seviyelerinin yan\u0131 s\u0131ra, sertifikalar kapsad\u0131klar\u0131 alan ad\u0131 say\u0131s\u0131na g\u00f6re de s\u0131n\u0131fland\u0131r\u0131labilir. Tek alan adl\u0131 sertifikalar yaln\u0131zca belirli bir alan ad\u0131n\u0131 (\u00f6rne\u011fin www.example.com) korur. \u00c7ok alan adl\u0131 sertifikalar, tek bir sertifika ile birbirleriyle tamamen ilgisiz olan birden fazla alan ad\u0131n\u0131 korumaya olanak tan\u0131r. Jenerik (wildcard) sertifikalar ise bir ana alan ad\u0131n\u0131 ve ayn\u0131 seviyedeki t\u00fcm alt alan adlar\u0131n\u0131 (\u00f6rne\u011fin *.example.com) koruyabilir; bu da \u00e7ok say\u0131da alt sitesi olan \u015firketler i\u00e7in olduk\u00e7a uygundur ve y\u00f6netimi daha kolay ve verimlidir.<\/p>\n\n\n\n

SSL\/TLS Protokol\u00fcn\u00fcn \u00c7al\u0131\u015fma Prensibi ve El S\u0131kma (Handshake) S\u00fcreci<\/h2>\n\n\n\n

SSL sertifikas\u0131n\u0131n \u00e7al\u0131\u015fma mekanizmas\u0131, SSL\/TLS protokol\u00fc \u00fczerine kuruludur ve bu s\u00fcrecin temel k\u0131sm\u0131na \u201cSSL el s\u0131k\u0131\u015fmas\u0131\u201d (SSL handshake) ad\u0131 verilir. Bu, istemci ile sunucu aras\u0131nda resmi \u015fifreli ileti\u015fim kurulmadan \u00f6nce ger\u00e7ekle\u015fen, karma\u015f\u0131k ve verimli bir mesaj al\u0131\u015fveri\u015fi s\u00fcrecidir.<\/p>\n\n\n

\n\n
\n UltaHost SSL sertifikas\u0131.<\/strong>\n
DV, EV, OV sertifikalar\u0131, en fazla $1, 750.000 ABD dolar\u0131 teminat tutar\u0131n\u0131 destekler, s\u0131n\u0131rs\u0131z alt alan ad\u0131n\u0131 destekler, iOS ve Android uygulamalar\u0131n\u0131 destekler ve 20%'den ba\u015flayan ayl\u0131k $15,95 ABD dolar\u0131 fiyatla 30 g\u00fcnl\u00fck para iade garantisi sunar.<\/div>\n <\/div>\n\n
\n \n \n \"SSL\n \n \n <\/a>\n \n \n UltaHost'u ziyaret edin. <\/a>\n <\/div>\n <\/div>\n\n \n\n\n\n\n\n\n

El s\u0131kma s\u00fcreci detayl\u0131 olarak a\u00e7\u0131klanm\u0131\u015ft\u0131r.<\/h3>\n\n\n\n

1. M\u00fc\u015fteri Taraf\u0131 Selamla\u015fmas\u0131: M\u00fc\u015fteri taraf\u0131 (taray\u0131c\u0131), sunucuya \u201cClientHello\u201d mesaj\u0131 g\u00f6nderir. Bu mesajda, m\u00fc\u015fteri taraf\u0131n\u0131n destekledi\u011fi TLS s\u00fcr\u00fcmleri, desteklenen \u015fifreleme paketleri listesi ve rastgele bir say\u0131 bulunur.
\n2. Sunucu Selam\u0131 ve Sertifika: Sunucu, \u201cServerHello\u201d mesaj\u0131n\u0131 g\u00f6ndererek her iki taraf\u0131n da destekledi\u011fi TLS s\u00fcr\u00fcm\u00fcn\u00fc ve \u015fifreleme paketini se\u00e7er ve kendi rastgele say\u0131s\u0131n\u0131 iletir. Ard\u0131ndan, sunucu SSL sertifikas\u0131n\u0131 (kamu anahtar\u0131 i\u00e7eren) istemciye g\u00f6nderir.
\n3. Sertifika Do\u011frulama ve Anahtar De\u011fi\u015fimi: \u0130stemci, sertifikay\u0131 ald\u0131ktan sonra, i\u00e7inde bulunan g\u00fcvenilir CA (Certificate Authority \u2013 Sertifika Yetkilisi) k\u00f6k sertifika k\u00fct\u00fcphanesini kullanarak sunucu sertifikan\u0131n ger\u00e7ekli\u011fini ve ge\u00e7erlili\u011fini do\u011frular. Do\u011frulama ba\u015far\u0131l\u0131 olduktan sonra, istemci bir \u201c\u00f6n anahtar\u201d (pre-master key) olu\u015fturur ve bu \u00f6n anahtar\u0131 sunucu sertifikas\u0131ndaki a\u00e7\u0131k anahtar kullanarak \u015fifreler; ard\u0131ndan \u015fifrelenmi\u015f \u00f6n anahtar\u0131 sunucuya g\u00f6nderir.
\n4. Oturum Anahtar\u0131n\u0131n Olu\u015fturulmas\u0131 ve El S\u0131k\u0131\u015fma \u0130\u015fleminin Tamamlanmas\u0131: Sunucu, kendi \u00f6zel anahtar\u0131 kullanarak \u00f6nceden belirlenmi\u015f ana anahtar\u0131 \u015fifreler. Bu a\u015famada hem istemci hem de sunucu \u00fc\u00e7 elemana sahiptir: istemcinin rastgele say\u0131s\u0131, sunucunun rastgele say\u0131s\u0131 ve \u00f6nceden belirlenmi\u015f ana anahtar. Her iki taraf da ayn\u0131 algoritmay\u0131 kullanarak, bu \u00fc\u00e7 parametreye dayanarak ayn\u0131 \u201coturum anahtar\u0131n\u0131\u201d ba\u011f\u0131ms\u0131z olarak olu\u015fturur. Daha sonra, her iki taraf da \u201cFinished\u201d mesaj\u0131n\u0131 de\u011fi\u015ftirir ve bu mesaj\u0131 yeni olu\u015fturulan oturum anahtar\u0131 ile \u015fifreler; bu i\u015flem, el s\u0131k\u0131\u015fma s\u00fcrecinin ba\u015far\u0131l\u0131 oldu\u011funu ve anahtarlar\u0131n e\u015fle\u015fti\u011fini do\u011frular.<\/p>\n\n\n\n

Bu noktada, g\u00fcvenli ileti\u015fim kanal\u0131 kurulmu\u015ftur. Bundan sonra t\u00fcm uygulama katman\u0131 verileri (HTTP verileri), bu verimli simetrik oturum anahtar\u0131 kullan\u0131larak \u015fifrelenerek iletilir; bu da ileti\u015fimin g\u00fcvenli\u011fini ve performans dengesini sa\u011flar.<\/p>\n\n\n\n

SSL Sertifikas\u0131n\u0131n Edinilmesi, Kurulmas\u0131 ve Yap\u0131land\u0131r\u0131lmas\u0131 Uygulamalar\u0131<\/h2>\n\n\n\n

Bir web sitesine SSL sertifikas\u0131 da\u011f\u0131tmak sistematik bir s\u00fcre\u00e7tir ve esas olarak sertifika ba\u015fvurusu, do\u011frulama, kurulum ve sonraki bak\u0131m ad\u0131mlar\u0131n\u0131 i\u00e7erir.<\/p>\n

Tavsiye edilen okuma SSL sertifikalar\u0131 hakk\u0131nda daha fazla bilgi edinin: \u00c7al\u0131\u015fma prensibi, tip se\u00e7imi ve da\u011f\u0131t\u0131m rehberi<\/a>\u3002<\/p>\n\n\n\n\n

Sertifika Ba\u015fvuru ve Do\u011frulama S\u00fcreci<\/h3>\n\n\n\n

\u00d6ncelikle, CA\u2019dan veya onun acentelerinden \u00fccretsiz bir sertifika sat\u0131n alman\u0131z veya talep etmeniz gerekmektedir. Ba\u015fvuru s\u00fcrecinde, bir \u201cSertifika \u0130mza \u0130steksi\u201d (Certificate Signing Request \u2013 CSR) dosyas\u0131 olu\u015fturman\u0131z gerekmektedir. CSR, sizin a\u00e7\u0131k anahtar\u0131n\u0131z\u0131 ve sertifikaya eklenecek kurulu\u015f bilgilerinizi i\u00e7erir. CSR\u2019yi g\u00f6nderdikten sonra, CA talep etti\u011finiz sertifika t\u00fcr\u00fcne (DV\/OV\/EV) g\u00f6re ilgili do\u011frulama s\u00fcrecini ba\u015flatacakt\u0131r.
\nDV sertifikalar\u0131 i\u00e7in do\u011frulama genellikle birka\u00e7 dakika ile birka\u00e7 saat aras\u0131nda basit bir \u015fekilde tamamlan\u0131r. OV ve EV sertifikalar\u0131 i\u00e7in ise i\u015fletme lisans\u0131 gibi yasal belgelerin sunulmas\u0131 gerekmektedir ve manuel inceleme a\u015famalar\u0131 olabilir; bu s\u00fcre\u00e7 birka\u00e7 g\u00fcn ile birka\u00e7 hafta aras\u0131nda de\u011fi\u015febilir. Do\u011frulama ba\u015far\u0131l\u0131 olduktan sonra, CA (Sertifika Yetkilisi) sertifika dosyalar\u0131n\u0131 (genellikle .crt dosyas\u0131 ve olas\u0131 ara sertifika zincirini i\u00e7eren) indirmeniz i\u00e7in size g\u00f6nderir.<\/p>\n\n\n\n

Sunucu Kurulumu ve Yap\u0131land\u0131rmas\u0131<\/h3>\n\n\n\n

Y\u00fckleme ad\u0131mlar\u0131, kullan\u0131lan sunucu yaz\u0131l\u0131m\u0131na g\u00f6re de\u011fi\u015fir. Yayg\u0131n olan Nginx ve Apache \u00f6rneklerini ele alal\u0131m:
\nNginx: \u0130ndirdi\u011finiz sertifika dosyas\u0131n\u0131 (.crt) ve \u00f6zel anahtar dosyas\u0131n\u0131 (.key) sunucunun belirtilen dizinine y\u00fcklemeniz, ard\u0131ndan web sitesinin yap\u0131land\u0131rma dosyas\u0131n\u0131 de\u011fi\u015ftirmeniz gerekir. server<\/code> Blok, belirtilmi\u015f ssl_certificate<\/code> \u548c ssl_certificate_key<\/code> Belirtilen yol \u00fczerinden \u00e7al\u0131\u015f\u0131r ve 443 numaral\u0131 portu dinler.
\nApache: Sertifika ve \u00f6zel anahtar\u0131n y\u00fcklenmesi de gereklidir, ard\u0131ndan SSL motoru sanal sunucu yap\u0131land\u0131rmas\u0131nda etkinle\u015ftirilmeli ve SSLCertificateFile<\/code> \u548c SSLCertificateKeyFile<\/code> Komut, dosya yolunu belirtir.<\/p>\n\n\n\n

Y\u00fckleme i\u015flemi tamamland\u0131ktan sonra, t\u00fcm HTTP trafi\u011finin HTTPS\u2019ye zorunlu olarak y\u00f6nlendirilmesini sa\u011flay\u0131n; b\u00f6ylece t\u00fcm eri\u015fimler g\u00fcvenli bir ba\u011flant\u0131 \u00fczerinden ger\u00e7ekle\u015fir. Ayr\u0131ca, HSTS (HTTP Strict Security Transport) ba\u015fl\u0131klar\u0131n\u0131 yap\u0131land\u0131rarak taray\u0131c\u0131lar\u0131n gelecekte belirli bir s\u00fcre boyunca do\u011frudan HTTPS kullanmas\u0131n\u0131 sa\u011flayabilir ve g\u00fcvenli\u011fi daha da art\u0131rabilirsiniz.<\/p>\n\n\n\n

Sertifika Y\u00f6netimi ve Yenileme \u0130\u015flemleri<\/h3>\n\n\n\n

SSL\u8bc1\u4e66\u6709\u660e\u786e\u7684\u6709\u6548\u671f\uff08\u76ee\u524d\u6700\u957f\u4e3a13\u4e2a\u6708\uff09\u3002\u8fc7\u671f\u672a\u7eed\u671f\u7684\u8bc1\u4e66\u4f1a\u5bfc\u81f4\u6d4f\u89c8\u5668\u663e\u793a\u4e25\u91cd\u7684\u5b89\u5168\u8b66\u544a\uff0c\u4e2d\u65ad\u7f51\u7ad9\u670d\u52a1\u3002\u56e0\u6b64\uff0c\u8bbe\u7f6e\u8bc1\u4e66\u5230\u671f\u63d0\u9192\u81f3\u5173\u91cd\u8981\u3002\u8bb8\u591a\u8bc1\u4e66\u63d0\u4f9b\u5546\u548c\u670d\u52a1\u5668\u7ba1\u7406\u5de5\u5177\u652f\u6301\u81ea\u52a8\u7eed\u671f\u529f\u80fd\uff0c\u5bf9\u4e8e\u652f\u6301ACME\u534f\u8bae\u7684DV\u8bc1\u4e66\uff0c\u53ef\u4ee5\u4f7f\u7528Let\u2018s Encrypt\u7b49\u514d\u8d39CA\u914d\u5408Certbot\u7b49\u5de5\u5177\u5b9e\u73b0\u5168\u81ea\u52a8\u5316\u7684\u7533\u8bf7\u3001\u5b89\u88c5\u548c\u7eed\u671f\uff0c\u6781\u5927\u5730\u7b80\u5316\u4e86\u7ef4\u62a4\u5de5\u4f5c\u3002<\/p>\n\n\n\n

\u00d6zetle.<\/h2>\n\n\n\n

SSL sertifikalar\u0131, ba\u015flang\u0131\u00e7ta iste\u011fe ba\u011fl\u0131 bir geli\u015fmi\u015f \u00f6zellik iken, g\u00fcn\u00fcm\u00fczde modern web sitelerinin i\u015fletilmesi i\u00e7in standart bir gereklilik ve internet g\u00fcvenli\u011finin temel bir par\u00e7as\u0131 haline gelmi\u015ftir. SSL, kat\u0131 kimlik do\u011frulama mekanizmalar\u0131 arac\u0131l\u0131\u011f\u0131yla web siteleri ile ziyaret\u00e7iler aras\u0131nda g\u00fcven olu\u015fturur ve g\u00fc\u00e7l\u00fc asimetrik ve simetrik \u015fifreleme teknolojileri kullanarak veri aktar\u0131m\u0131n\u0131n gizlili\u011fini ve b\u00fct\u00fcnl\u00fc\u011f\u00fcn\u00fc sa\u011flar. Ki\u015fisel bloglar i\u00e7in \u00fccretsiz DV sertifikalar\u0131 se\u00e7mekten, b\u00fcy\u00fck kurumsal platformlar i\u00e7in ye\u015fil adres \u00e7ubu\u011funa sahip EV sertifikalar\u0131 kurmaya kadar, farkl\u0131 t\u00fcrdeki SSL sertifikalar\u0131n\u0131n \u00f6zelliklerini anlamak do\u011fru bir se\u00e7im yapman\u0131n \u00f6n ko\u015fuludur. Ayr\u0131ca, SSL sertifikalar\u0131n\u0131n arkas\u0131ndaki i\u015fleyi\u015f prensiplerini bilmek ve ba\u015fvuru, do\u011frulama ve kurulum s\u00fcre\u00e7lerinin tamam\u0131na a\u015fina olmak, her teknik uzman\u0131n a\u011f hizmetlerinin g\u00fcvenli, g\u00fcvenilir ve g\u00fcvenilir olmas\u0131n\u0131 sa\u011flamak i\u00e7in sahip olmas\u0131 gereken temel becerilerdir. Giderek artan gizlilik ve g\u00fcvenlik \u00f6nlemleriyle dolu dijital \u00e7a\u011fda, SSL sertifikalar\u0131n\u0131 do\u011fru bir \u015fekilde da\u011f\u0131tmak ve bak\u0131m\u0131n\u0131 yapmak, kullan\u0131c\u0131lara kar\u015f\u0131 en temel sorumluluktur ve ayn\u0131 zamanda i\u015fletmelerin uzun vadeli geli\u015fimi i\u00e7in sa\u011flam bir koruma kalkan\u0131d\u0131r.<\/p>\n\n\n\n

S\u0131k\u00e7a Sorulan Sorular.<\/h2>\n\n\n\n

\u00dccretsiz SSL sertifikalar\u0131n\u0131n \u00fccretli olanlardan ne fark\u0131 var?<\/h3>\n\n\n\n

\u514d\u8d39\u8bc1\u4e66\uff08\u5982Let\u2018s Encrypt\u7b7e\u53d1\uff09\u901a\u5e38\u4ec5\u662f\u57df\u540d\u9a8c\u8bc1\u578b\u8bc1\u4e66\uff0c\u4ec5\u63d0\u4f9b\u57fa\u7840\u7684\u52a0\u5bc6\u529f\u80fd\uff0c\u6709\u6548\u671f\u8f83\u77ed\uff0890\u5929\uff09\uff0c\u9700\u8981\u9891\u7e41\u7eed\u671f\uff0c\u4f46\u53ef\u901a\u8fc7\u81ea\u52a8\u5316\u5de5\u5177\u89e3\u51b3\u3002\u4ed8\u8d39\u8bc1\u4e66\u5219\u63d0\u4f9b\u66f4\u4e30\u5bcc\u7684\u9009\u62e9\uff0c\u5305\u62ecOV\u548cEV\u8bc1\u4e66\uff0c\u63d0\u4f9b\u66f4\u4e25\u683c\u7684\u8eab\u4efd\u9a8c\u8bc1\u548c\u66f4\u9ad8\u7684\u4fe1\u4efb\u5c55\u793a\uff08\u5982\u7eff\u8272\u5730\u5740\u680f\uff09\uff0c\u540c\u65f6\u63d0\u4f9b\u66f4\u957f\u7684\u6709\u6548\u671f\u3001\u66f4\u9ad8\u7684\u4fdd\u4fee\u91d1\u989d\u4ee5\u53ca\u4e13\u4e1a\u7684\u4eba\u5de5\u6280\u672f\u652f\u6301\u670d\u52a1\u3002<\/p>\n\n\n\n

SSL sertifikas\u0131 kuruldu\u011funda sistem mutlaka g\u00fcvende midir?<\/h3>\n\n\n\n

Hay\u0131r. SSL sertifikas\u0131 esas olarak verilerin aktar\u0131m s\u0131ras\u0131ndaki g\u00fcvenli\u011fini (\u015fifreleme ve b\u00fct\u00fcnl\u00fc\u011f\u00fcn\u00fc) sa\u011flar. Web sitesi sunucusunun kendisinin hackerlar taraf\u0131ndan sald\u0131r\u0131ya u\u011framas\u0131n\u0131 (\u00f6rne\u011fin, bir g\u00fcvenlik a\u00e7\u0131\u011f\u0131ndan truva at\u0131 y\u00fcklenmesi) engellemez, DDoS sald\u0131r\u0131lar\u0131n\u0131 \u00f6nleyemez ve web sitesi kodunun g\u00fcvenlik a\u00e7\u0131klar\u0131ndan ar\u0131nd\u0131r\u0131ld\u0131\u011f\u0131ndan da emin olamaz. Web sitesi g\u00fcvenli\u011fi, \u00e7ok katmanl\u0131 ve kapsaml\u0131 bir sistemdir; SSL sertifikas\u0131 bu sistemin \u00e7ok \u00f6nemli bir par\u00e7as\u0131d\u0131r, ancak tek ba\u015f\u0131na t\u00fcm g\u00fcvenli\u011fi sa\u011flamaz.<\/p>\n\n\n\n

Neden web sitemize SSL sertifikas\u0131 y\u00fckl\u00fc olmas\u0131na ra\u011fmen taray\u0131c\u0131 hala \u201cg\u00fcvenli de\u011fil\u201d diyor?<\/h3>\n\n\n\n

Bunun bir\u00e7ok farkl\u0131 nedeni olabilir. En yayg\u0131n neden, web sayfas\u0131nda HTTP protokol\u00fc kullanan kaynaklar\u0131n (resimler, betikler, stil \u015femalar\u0131 vb.) kar\u0131\u015f\u0131k bir \u015fekilde y\u00fcklenmesidir; bu kaynaklar HTTPS ile \u015fifrelenmeden aktar\u0131ld\u0131\u011f\u0131 i\u00e7in t\u00fcm sayfa g\u00fcvensiz olarak i\u015faretlenir. \u00c7\u00f6z\u00fcm, t\u00fcm kaynak ba\u011flant\u0131lar\u0131n\u0131n HTTPS kullanarak yap\u0131lmas\u0131n\u0131 sa\u011flamakt\u0131r. Di\u011fer nedenler aras\u0131nda sertifikan\u0131n s\u00fcresinin dolmas\u0131, sertifikan\u0131n eri\u015filen alan ad\u0131yla e\u015fle\u015fmemesi veya ara sertifika zincirinin eksik olmas\u0131 yer al\u0131r.<\/p>\n\n\n\n

\u00c7ok alan adl\u0131 sertifika (Multi-Domain Certificate) m\u0131 yoksa joker karakter i\u00e7eren sertifika (Wildcard Certificate) m\u0131 daha iyidir?<\/h3>\n\n\n\n

Bu, spesifik ihtiya\u00e7lara ba\u011fl\u0131d\u0131r. E\u011fer birden fazla tamamen farkl\u0131 ana alan ad\u0131n\u0131 (\u00f6rne\u011fin example.com ve anothersite.net) koruman\u0131z gerekiyorsa, \u00e7oklu alan ad\u0131 sertifikalar\u0131 tek se\u00e7enektir. E\u011fer bir ana alan ad\u0131n\u0131 ve t\u00fcm alt alan adlar\u0131n\u0131 (\u00f6rne\u011fin shop.example.com, blog.example.com, mail.example.com) koruman\u0131z gerekiyorsa, joker karakter i\u00e7eren sertifikalar (*.example.com) y\u00f6netim ve maliyet a\u00e7\u0131s\u0131ndan genellikle daha avantajl\u0131d\u0131r; \u00e7\u00fcnk\u00fc tek bir sertifika t\u00fcm alt alan adlar\u0131n\u0131 kapsar.<\/p>\n\n\n\n

SSL sertifikas\u0131 s\u00fcresi doldu\u011funda ne olur?<\/h3>\n\n\n\n

SSL sertifikas\u0131 s\u00fcresi doldu\u011funda, taray\u0131c\u0131lar ve istemciler web sitesine eri\u015firken \u201cg\u00fcvenli de\u011fil\u201d uyar\u0131s\u0131 al\u0131rlar. Bu uyar\u0131, ba\u011flant\u0131n\u0131n g\u00fcvenli olmad\u0131\u011f\u0131n\u0131 belirtir ve kullan\u0131c\u0131lar\u0131n eri\u015fimine devam etmesini engelleyebilir. Bu durum, web sitesinin g\u00fcvenilirli\u011finin h\u0131zla d\u00fc\u015fmesine, kullan\u0131c\u0131 deneyiminin bozulmas\u0131na ve i\u015f s\u00fcre\u00e7lerinin aksamas\u0131na neden olabilir. Bu nedenle, sertifikalar\u0131n s\u00fcresi dolmadan \u00f6nce g\u00fcncellenmesini sa\u011flamak i\u00e7in etkili bir izleme ve yenileme mekanizmas\u0131 kurulmas\u0131 gerekmektedir.<\/p>","protected":false},"excerpt":{"rendered":"

SSL sertifikalar\u0131, web sitelerinin HTTPS \u015fifrelemesini ve kimlik do\u011frulamas\u0131n\u0131 sa\u011flaman\u0131n temelini olu\u015fturur. Bu makalede, SSL sertifikalar\u0131n\u0131n temel i\u015flevleri (kimlik do\u011frulama, veri \u015fifreleme ve veri b\u00fct\u00fcnl\u00fc\u011f\u00fcn\u00fcn korunmas\u0131) ayr\u0131nt\u0131l\u0131 bir \u015fekilde a\u00e7\u0131klanmaktad\u0131r. Ayr\u0131ca, DV, OV, EV gibi ana SSL sertifika t\u00fcrlerinin farkl\u0131l\u0131klar\u0131 ve uygun kullan\u0131m senaryolar\u0131 derinlemesine incelenmi\u015f; SSL\/TLS protokol\u00fcn\u00fcn \u00e7al\u0131\u015fma prensipleri ve el s\u0131kma (handshake) s\u00fcreci de a\u00e7\u0131klanm\u0131\u015ft\u0131r. T\u00fcm bunlar, web sitelerinin g\u00fcvenli bir \u015fekilde kurulmas\u0131 i\u00e7in kapsaml\u0131 bir rehber niteli\u011fi ta\u015f\u0131maktad\u0131r.<\/p>","protected":false},"author":7,"featured_media":0,"template":"","meta":{"_acf_changed":false,"footnotes":""},"tags":[11,336,338],"knowledge_category":[277],"class_list":["post-12366235","knowledge_post","type-knowledge_post","status-publish","hentry","tag-ssl-certificate","tag-encryption-technology","tag-cybersecurity","knowledge_category-ssl-certificate"],"acf":{"site_seo_keywords":"SSL\u8bc1\u4e66,TLS\u534f\u8bae,\u8bc1\u4e66\u7c7b\u578b,HTTPS\u52a0\u5bc6,\u7f51\u7ad9\u5b89\u5168,SSL\u63e1\u624b\u8fc7\u7a0b,\u901a\u914d\u7b26\u8bc1\u4e66,OV\u8bc1\u4e66\u9a8c\u8bc1"},"_links":{"self":[{"href":"https:\/\/www.likacloud.com\/tr\/wp-json\/wp\/v2\/knowledge_posts\/12366235","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.likacloud.com\/tr\/wp-json\/wp\/v2\/knowledge_posts"}],"about":[{"href":"https:\/\/www.likacloud.com\/tr\/wp-json\/wp\/v2\/types\/knowledge_post"}],"author":[{"embeddable":true,"href":"https:\/\/www.likacloud.com\/tr\/wp-json\/wp\/v2\/users\/7"}],"version-history":[{"count":0,"href":"https:\/\/www.likacloud.com\/tr\/wp-json\/wp\/v2\/knowledge_posts\/12366235\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.likacloud.com\/tr\/wp-json\/wp\/v2\/media?parent=12366235"}],"wp:term":[{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.likacloud.com\/tr\/wp-json\/wp\/v2\/tags?post=12366235"},{"taxonomy":"knowledge_category","embeddable":true,"href":"https:\/\/www.likacloud.com\/tr\/wp-json\/wp\/v2\/knowledge_category?post=12366235"}],"curies":[{"name":"WP","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}