{"id":12374418,"date":"2026-03-17T15:45:33","date_gmt":"2026-03-17T07:45:33","guid":{"rendered":"https:\/\/www.likacloud.com\/knowledge\/%e4%bb%8e%e5%85%a5%e9%97%a8%e5%88%b0%e7%b2%be%e9%80%9a%ef%bc%9a%e5%85%a8%e6%96%b9%e4%bd%8d%e8%a7%a3%e6%9e%90ssl%e8%af%81%e4%b9%a6%e7%9a%84%e4%bd%9c%e7%94%a8%e3%80%81%e7%b1%bb%e5%9e%8b%e4%b8%8e\/"},"modified":"2026-03-17T15:51:20","modified_gmt":"2026-03-17T07:51:20","slug":"ssl-certificate-guide-types-application-deployment-tutorial","status":"publish","type":"knowledge_post","link":"https:\/\/www.likacloud.com\/tr\/knowledge\/ssl-certificate\/ssl-certificate-guide-types-application-deployment-tutorial\/","title":{"rendered":"Ba\u015flang\u0131\u00e7tan Uzmanl\u0131\u011fa: SSL Sertifikalar\u0131n\u0131n \u0130\u015flevleri, T\u00fcrleri ve Talep-Deplasman K\u0131lavuzunun Kapsaml\u0131 Analizi"},"content":{"rendered":"

G\u00fcn\u00fcm\u00fcz internet ortam\u0131nda, web sitesi g\u00fcvenli\u011fi g\u00f6z ard\u0131 edilemeyecek bir temel haline gelmi\u015ftir. G\u00fcvenli ve g\u00fcvenilir bir web sitesi, sadece kullan\u0131c\u0131 verilerini korumakla kalmaz, ayn\u0131 zamanda ziyaret\u00e7ilerin g\u00fcvenini de kazan\u0131r. Bu hedefe ula\u015fman\u0131n temel teknolojilerinden biri de SSL\/TLS protokol\u00fc ve dijital sertifikalar\u0131d\u0131r. SSL sertifikas\u0131, web sitesinin \u201cdijital kimlik kart\u0131\u201d ve \u201cg\u00fcvenli \u015fifreleme zarf\u0131\u201d gibidir; kullan\u0131c\u0131 taray\u0131c\u0131s\u0131 ile web sitesi sunucusu aras\u0131nda \u015fifreli bir ileti\u015fim kanal\u0131 olu\u015fturur.<\/p>\n\n\n\n

SSL Sertifikas\u0131n\u0131n Temel \u0130\u015flevi ve De\u011feri<\/h2>\n\n\n\n

SSL sertifikas\u0131, sadece adres \u00e7ubu\u011funda k\u00fc\u00e7\u00fck bir kilit simgesinin g\u00f6r\u00fcnmesinden \u00e7ok daha fazlas\u0131d\u0131r. Web siteleri ve kullan\u0131c\u0131lar i\u00e7in \u00e7oklu koruma sa\u011flayan kapsaml\u0131 bir g\u00fcvenlik mekanizmas\u0131d\u0131r.<\/p>\n\n\n\n

Veri \u015fifreli aktar\u0131m\u0131n\u0131 ger\u00e7ekle\u015ftirin.<\/h3>\n\n\n\n

Kullan\u0131c\u0131lar, SSL sertifikas\u0131 bulunan bir web sitesini ziyaret etti\u011finde, taray\u0131c\u0131lar\u0131 sunucu ile bir \u201cel s\u0131k\u0131\u015fma\u201d (handshake) i\u015flemi ger\u00e7ekle\u015ftirir ve \u015fifreli bir ba\u011flant\u0131 kurulur. Bundan sonra, aralar\u0131nda iletilen t\u00fcm veriler \u2013 giri\u015f bilgileri, kredi kart\u0131 numaralar\u0131, ki\u015fisel bilgiler, sohbet i\u00e7erikleri vb. \u2013 \u015fifreli bi\u00e7imde aktar\u0131l\u0131r. Veriler aktar\u0131m s\u0131ras\u0131nda \u00fc\u00e7\u00fcnc\u00fc bir taraf taraf\u0131ndan ele ge\u00e7irilse bile, ilgili \u00f6zel anahtar olmadan bu veriler \u015fifrelenmi\u015f halde kal\u0131r ve bu da bilgi gizlili\u011finin ve arac\u0131 sald\u0131r\u0131lar\u0131n\u0131n \u00f6nlenmesini sa\u011flar.<\/p>\n

Tavsiye edilen okuma SSL Sertifikalar\u0131n\u0131 Anlama: T\u00fcrler, Ba\u015fvuru S\u00fcreci ve Web Sitesi G\u00fcvenlik Ayarlamalar\u0131 Kapsaml\u0131 Analizi<\/a>\u3002<\/p>\n\n\n\n\n

Web sitesinin ger\u00e7ek kimli\u011fini do\u011frulay\u0131n.<\/h3>\n\n\n\n

SSL sertifikalar\u0131, g\u00fcvenilir \u00fc\u00e7\u00fcnc\u00fc parti kurulu\u015flar taraf\u0131ndan \u2013 yani sertifika veren kurulu\u015flar (Certificate Authorities \u2013 CA\u2019lar) taraf\u0131ndan \u2013 verilir. CA\u2019lar, sertifika vermeden \u00f6nce ba\u015fvuru sahibinin kimli\u011fini titiz bir \u015fekilde inceler. Bu nedenle, bir kullan\u0131c\u0131 ge\u00e7erli bir SSL sertifikas\u0131na sahip bir web sitesini ziyaret etti\u011finde, taray\u0131c\u0131 \u201cziyaret edilen web sitesinin ger\u00e7ekten iddia etti\u011fi kurulu\u015f oldu\u011fundan\u201d emin olabilir; doland\u0131r\u0131c\u0131l\u0131k ama\u00e7l\u0131 bir site veya taklit edilmi\u015f bir site de\u011fildir. Bu durum, kullan\u0131c\u0131lar\u0131n web sitesine olan g\u00fcvenini art\u0131rmaya yard\u0131mc\u0131 olur.<\/p>\n\n

\r\n\t\r\n\t\t\r\n\t\r\n\t
\r\n\t\t
\r\n\t\t\t\r\n\t\t\t
\r\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"Bluehost\r\n\t\t\t\t\t\t\t\t\t\r\n\t\t\t<\/div>\r\n\t\t\t\r\n\t\t\t\r\n\t\t\t
\r\n\t\t\t\t
\r\n\t\t\t\t\tBluehost SSL sertifikas\u0131.<\/strong>\r\n\t\t\t\t\t\t\t\t\t<\/div>\r\n\t\t\t<\/div>\r\n\t\t<\/div>\r\n\t\t\t\tBlueHost SSL sertifikalar\u0131, 1-2 y\u0131ll\u0131k uzatma s\u00fcresi se\u00e7enekleri sunar, RSA veya ECC algoritmalar\u0131n\u0131 destekler, 4096 bit'e kadar anahtar uzunlu\u011fu sa\u011flar ve 1,75 milyon ABD dolar\u0131na kadar garanti tutar\u0131 sunar.<\/span>\r\n\t\t\t\t
\r\n\t\t\t\r\n\t\t\t\t\t\t\r\n\t\t\t \r\n\t\t\t
\r\n\t\t\t\t\t\t\t\t
Ayl\u0131k $7,49 USD'den ba\u015flayan fiyatlarla.<\/div>\r\n\t\t\t\t\t\t\t\t\t\t\t\tBluehost SSL sertifikas\u0131na eri\u015fin \u2192<\/a>\r\n\t\t\t\t\t\t\t<\/div> \r\n\t\t<\/div>\r\n\t<\/div>\r\n\t\t\r\n\t\r\n\t
\r\n\t\t
\r\n\t\t\t\r\n\t\t\t
\r\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"hosting.com\r\n\t\t\t\t\t\t\t\t\t\r\n\t\t\t<\/div>\r\n\t\t\t\r\n\t\t\t\r\n\t\t\t
\r\n\t\t\t\t
\r\n\t\t\t\t\thosting.com SSL sertifikas\u0131.<\/strong>\r\n\t\t\t\t\t\t\t\t\t<\/div>\r\n\t\t\t<\/div>\r\n\t\t<\/div>\r\n\t\t\t\tUygun fiyatl\u0131 DV, OV, EV SSL sertifikalar\u0131, en y\u00fcksek 256 bit \u015fifreleme, 5 milyon ila 100 milyon ABD dolar\u0131 tutar\u0131nda garanti ve 7\/24 destek.<\/span>\r\n\t\t\t\t
\r\n\t\t\t\r\n\t\t\t\t\t\t\r\n\t\t\t \r\n\t\t\t
\r\n\t\t\t\t\t\t\t\t
Ayl\u0131k $2.5 USD'den ba\u015flayan fiyatlarla.<\/div>\r\n\t\t\t\t\t\t\t\t\t\t\t\tHosting.com SSL sertifikas\u0131na eri\u015fin. \u2192<\/a>\r\n\t\t\t\t\t\t\t<\/div> \r\n\t\t<\/div>\r\n\t<\/div>\r\n\t\t\r\n<\/div>\r\n\r\n\r\n\n\n\n\n\n\n\n

Arama motoru s\u0131ralamalar\u0131n\u0131 ve kullan\u0131c\u0131 g\u00fcvenini art\u0131rmak<\/h3>\n\n\n\n

Google gibi \u00f6nde gelen arama motorlar\u0131, HTTPS\u2019yi uzun zamand\u0131r olumlu bir s\u0131ralama kriteri olarak kullanmaktad\u0131r. HTTPS kullanan web siteleri, arama sonu\u00e7lar\u0131nda genellikle daha \u00f6ncelikli bir \u015fekilde g\u00f6sterilir. Ayn\u0131 zamanda, modern taray\u0131c\u0131lar (Chrome, Safari gibi) HTTPS kullanmayan web sitelerini \u201cg\u00fcvenli de\u011fil\u201d olarak i\u015faretler; bu da kullan\u0131c\u0131lar\u0131n sayfadan \u00e7\u0131kma oranlar\u0131n\u0131 \u00f6nemli \u00f6l\u00e7\u00fcde art\u0131r\u0131r. Buna kar\u015f\u0131l\u0131k, ye\u015fil g\u00fcvenlik kilidi ve \u201cg\u00fcvenli\u201d i\u015fareti, kullan\u0131c\u0131lar\u0131n g\u00f6z atma iste\u011fini ve sat\u0131n alma niyetini do\u011frudan art\u0131r\u0131r.<\/p>\n\n\n\n

SSL Sertifikalar\u0131n\u0131n Ana T\u00fcrleri ve Uygulama Senaryolar\u0131<\/h2>\n\n\n\n

Do\u011frulama seviyesine ve i\u015flevlerine g\u00f6re, SSL sertifikalar\u0131 farkl\u0131 \u00f6l\u00e7ek ve t\u00fcrdeki web sitelerinin ihtiya\u00e7lar\u0131n\u0131 kar\u015f\u0131lamak i\u00e7in a\u015fa\u011f\u0131daki kategorilere ayr\u0131l\u0131r:<\/p>\n\n\n\n

Domain do\u011frulama sertifikas\u0131.<\/h3>\n\n\n\n

DV sertifikas\u0131, do\u011frulama seviyesi en d\u00fc\u015f\u00fck ve verilme h\u0131z\u0131 en h\u0131zl\u0131 sertifika t\u00fcr\u00fcd\u00fcr. CA (Certificate Authority \u2013 Sertifika Yetkilisi), ba\u015fvuru sahibinin alan ad\u0131na sahip oldu\u011funu yaln\u0131zca alan ad\u0131 \u00e7\u00f6z\u00fcmleme kay\u0131tlar\u0131n\u0131 do\u011frulayarak veya belirtilen e-posta adresini kontrol ederek teyit eder. Bireysel web siteleri, bloglar, test ortamlar\u0131 veya yaln\u0131zca temel \u015fifreleme \u00f6zelliklerinin gerekti\u011fi durumlar i\u00e7in \u00e7ok uygundur. \u00d6zellikleri aras\u0131nda d\u00fc\u015f\u00fck maliyet ve an\u0131nda verilme s\u00fcresi bulunmaktad\u0131r.<\/p>\n\n\n\n

Kurulu\u015f do\u011frulama sertifikas\u0131.<\/h3>\n\n\n\n

OV sertifikalar\u0131, DV sertifikalar\u0131na k\u0131yasla daha y\u00fcksek d\u00fczeyde g\u00fcven sa\u011flar. Sertifika veren kurulu\u015f (CA \u2013 Certificate Authority), yaln\u0131zca alan ad\u0131n\u0131n sahipli\u011fini do\u011frulamakla kalmaz; ayn\u0131 zamanda ba\u015fvuru yapan kurulu\u015fun ger\u00e7ek varl\u0131\u011f\u0131n\u0131 da kontrol eder (\u00f6rne\u011fin ticaret sicil belgesi gibi yasal belgeleri inceleyerek). Sertifika detaylar\u0131nda ba\u015fvuru yapan \u015firketin ad\u0131 da yer al\u0131r. Bu sertifikalar, kurumsal web siteleri, organizasyon portallar\u0131 ve kurumsal g\u00fcvenilirli\u011fin g\u00f6sterilmesi gereken di\u011fer ticari web siteleri i\u00e7in uygundur.<\/p>\n

Tavsiye edilen okuma SSL Sertifikas\u0131 Ayr\u0131nt\u0131l\u0131 \u0130ncelemesi: \u00c7al\u0131\u015fma Prensibi, T\u00fcr Se\u00e7imi ve HTTPS Yap\u0131land\u0131rma K\u0131lavuzu<\/a>\u3002<\/p>\n\n\n\n\n

Geni\u015fletilmi\u015f do\u011frulama sertifikas\u0131.<\/h3>\n\n\n\n

EV sertifikalar\u0131, en s\u0131k\u0131 do\u011frulama s\u00fcre\u00e7lerinden ge\u00e7en ve en y\u00fcksek g\u00fcven seviyesine sahip sertifikalard\u0131r. CA\u2019lar (Certification Authorities), kurulu\u015flar\u0131n yasal, fiziksel ve operasyonel varl\u0131klar\u0131n\u0131 do\u011frulamay\u0131 i\u00e7eren kat\u0131 inceleme s\u00fcre\u00e7leri uygularlar. Taray\u0131c\u0131lar da EV sertifikalar\u0131n\u0131 \u00f6zellikle vurgular; adres \u00e7ubu\u011funda \u015firket ad\u0131 do\u011frudan ye\u015fil renkte g\u00f6sterilir. Bu, finans, e-ticaret ve b\u00fcy\u00fck \u015firketler gibi y\u00fcksek g\u00fcven gereksinimleri olan web siteleri i\u00e7in standart bir \u00f6zellikti. Modern taray\u0131c\u0131 aray\u00fczleri de\u011fi\u015fse de, arkas\u0131ndaki kat\u0131 inceleme standartlar\u0131 h\u00e2l\u00e2 en y\u00fcksek seviyededir.<\/p>\n\n\n\n

\u00c7oklu alan ad\u0131 ve joker karakter sertifikas\u0131.<\/h3>\n\n\n\n

Yukar\u0131daki \u00fc\u00e7 sertifika t\u00fcr\u00fc de kapsama alanlar\u0131na g\u00f6re daha da ayr\u0131labilir. Tek alan ad\u0131 sertifikalar\u0131 yaln\u0131zca belirli bir alan ad\u0131n\u0131 korur (\u00f6rne\u011fin www.example.com). \u00c7ok alan ad\u0131 sertifikalar\u0131, tek bir sertifika i\u00e7inde birbirleriyle hi\u00e7bir ilgisi olmayan birden fazla alan ad\u0131n\u0131 koruyabilir (\u00f6rne\u011fin example.com, example.net, shop.othersite.com). Jenerik (wildcard) sertifikalar ise bir ana alan ad\u0131n\u0131 ve t\u00fcm alt alan adlar\u0131n\u0131 koruyabilir (\u00f6rne\u011fin *.example.com; blog.example.com, shop.example.com, mail.example.com gibi adresleri kapsar) ve birden fazla alt alan ad\u0131na sahip \u015firketler i\u00e7in \u00e7ok uygundur.<\/p>\n\n\n\n

SSL sertifikas\u0131 nas\u0131l talep edilir ve al\u0131n\u0131r?<\/h2>\n\n\n\n

SSL sertifikas\u0131n\u0131 edinme s\u00fcreci olduk\u00e7a a\u00e7\u0131kt\u0131r ve birka\u00e7 ad\u0131mdan olu\u015fur.<\/p>\n\n\n

\n\n
\n UltaHost SSL sertifikas\u0131.<\/strong>\n
DV, EV, OV sertifikalar\u0131, en fazla $1, 750.000 ABD dolar\u0131 teminat tutar\u0131n\u0131 destekler, s\u0131n\u0131rs\u0131z alt alan ad\u0131n\u0131 destekler, iOS ve Android uygulamalar\u0131n\u0131 destekler ve 20%'den ba\u015flayan ayl\u0131k $15,95 ABD dolar\u0131 fiyatla 30 g\u00fcnl\u00fck para iade garantisi sunar.<\/div>\n <\/div>\n\n
\n \n \n \"SSL\n \n \n <\/a>\n \n \n UltaHost'u ziyaret edin. <\/a>\n <\/div>\n <\/div>\n\n \n\n\n\n\n\n\n

\u0130lk ad\u0131m: Sertifika imza iste\u011fi olu\u015fturun.<\/h3>\n\n\n\n

Sunucunuzda (Nginx, Apache, Tomcat vb.) ilk ad\u0131m, bir anahtar \u00e7ifti (\u00f6zel anahtar ve genel anahtar) ile bir sertifika imza iste\u011fi (CSR \u2013 Certificate Signing Request) dosyas\u0131 olu\u015fturmakt\u0131r. CSR dosyas\u0131nda genel anahtar\u0131n\u0131z, alan ad\u0131n\u0131z, \u015firket bilgileriniz vb. bulunur. \u00d6zel anahtar\u0131n sunucuda g\u00fcvenli bir \u015fekilde saklanmas\u0131 gerekir ve kesinlikle if\u015fa edilmemelidir.<\/p>\n\n\n\n

\u0130kinci ad\u0131m: CA'y\u0131 se\u00e7in ve ba\u015fvuruyu g\u00f6nderin.<\/h3>\n\n\n\n

\u0130htiya\u00e7lar\u0131n\u0131za (do\u011frulama t\u00fcr\u00fc, marka, b\u00fct\u00e7e vb.) g\u00f6re g\u00fcvenilir bir CA (Sertifika Yetkilisi) veya onun acentesini se\u00e7in. Ba\u015fvurunuzu ilgili web sitesinden yap\u0131n ve olu\u015fturulan CSR (Certificate Signing Request) dosyas\u0131n\u0131n i\u00e7eri\u011fini belirtilen yere yap\u0131\u015ft\u0131r\u0131n. OV (Organizational Validation) ve EV (Extended Validation) sertifikalar\u0131 i\u00e7in ayr\u0131ca gerekli kurumsal belgeleri de talep edildi\u011fi \u015fekilde sunman\u0131z gerekmektedir.<\/p>\n\n\n\n

\u00dc\u00e7\u00fcnc\u00fc Ad\u0131m: Alan Ad\u0131\/Organizasyon Do\u011frulamas\u0131n\u0131 Tamamlay\u0131n<\/h3>\n\n\n\n

CA, ba\u015fvurdu\u011funuz sertifika t\u00fcr\u00fcne g\u00f6re do\u011frulama s\u00fcrecini ba\u015flatacakt\u0131r. DV sertifikalar\u0131 i\u00e7in, belirtilen DNS kay\u0131tlar\u0131n\u0131 ayarlayarak veya do\u011frulama e-postalar\u0131n\u0131 alarak alan ad\u0131 kontrol hakk\u0131n\u0131z\u0131 onaylaman\u0131z gerekebilir. OV\/EV sertifikalar\u0131 i\u00e7in ise, CA kurulu\u015f bilgilerini telefon yoluyla, \u00fc\u00e7\u00fcnc\u00fc parti veritabanlar\u0131 arac\u0131l\u0131\u011f\u0131yla veya benzeri y\u00f6ntemlerle do\u011frulayabilir.<\/p>\n

Tavsiye edilen okuma SSL Sertifikas\u0131 Kullan\u0131m K\u0131lavuzu: Bir Web Sitesinin G\u00fcvenli \u015eifrelemesini Nas\u0131l Se\u00e7er, Kurar ve Do\u011frulars\u0131n\u0131z?<\/a>\u3002<\/p>\n\n\n\n\n

D\u00f6rd\u00fcnc\u00fc Ad\u0131m: Sertifikay\u0131 \u0130mzalay\u0131n ve \u0130ndirin<\/h3>\n\n\n\n

Do\u011frulama i\u015flemi tamamland\u0131ktan sonra, CA (Sertifika Yetkilisi) sertifikay\u0131 verir. Sunucu sertifikas\u0131n\u0131 (ve muhtemelen ara sertifikalar\u0131 da) i\u00e7eren sertifika paketini CA\u2019n\u0131n konsolundan indirebilirsiniz. Sertifika dosyalar\u0131 genellikle .crt, .cer, .pem gibi uzant\u0131lara sahiptir.<\/p>\n\n\n\n

\u00dccretsiz sertifika se\u00e7enekleri<\/h3>\n\n\n\n

\u5bf9\u4e8e\u4e2a\u4eba\u6216\u9884\u7b97\u6709\u9650\u7684\u7528\u6237\uff0cLet\u2018s Encrypt\u662f\u4e00\u4e2a\u4f18\u79c0\u7684\u514d\u8d39CA\u9009\u62e9\u3002\u5b83\u63d0\u4f9b\u81ea\u52a8\u7b7e\u53d1\u7684DV\u8bc1\u4e66\uff0c\u6709\u6548\u671f90\u5929\uff0c\u53ef\u4ee5\u901a\u8fc7Certbot\u7b49\u5de5\u5177\u5b9e\u73b0\u81ea\u52a8\u5316\u7eed\u671f\uff0c\u5b8c\u5168\u514d\u8d39\u4e14\u6d41\u7a0b\u9ad8\u5ea6\u81ea\u52a8\u5316\uff0c\u6781\u5927\u5730\u63a8\u52a8\u4e86HTTPS\u7684\u666e\u53ca\u3002<\/p>\n\n\n\n

Sunucuda SSL sertifikas\u0131n\u0131 da\u011f\u0131tma ve yap\u0131land\u0131rma<\/h2>\n\n\n\n

Sertifika dosyas\u0131n\u0131 ald\u0131ktan sonra, bir sonraki \u00f6nemli ad\u0131m onu web sunucunuza do\u011fru bir \u015fekilde da\u011f\u0131tmakt\u0131r. A\u015fa\u011f\u0131da, yayg\u0131n olarak kullan\u0131lan Nginx ve Apache sunucular\u0131 \u00f6rnek olarak verilmi\u015ftir.<\/p>\n\n\n\n

Nginx sunucu yap\u0131land\u0131rmas\u0131.<\/h3>\n\n\n\n

Indirdi\u011finiz sunucu sertifikas\u0131n\u0131 (genellikle \u201cserver_certificate.pem\u201d veya benzeri bir adla adland\u0131r\u0131l\u0131r)\u2026 your_domain.crt<\/code>) ve \u00f6zel anahtar (your_domain.key<\/code>Sunucudaki g\u00fcvenli bir kataloga y\u00fcklenir (\u00f6rne\u011fin: \/path\/to\/secure\/directory) \/etc\/ssl\/<\/code>Ard\u0131ndan, web sitenizin Nginx yap\u0131land\u0131rma dosyas\u0131n\u0131 d\u00fczenleyin (genellikle ... adresinde bulunur). \/etc\/nginx\/sites-available\/<\/code> A\u015fa\u011f\u0131daki).
\nOrijinalin \u00fczerine\u2026 listen 80;<\/code> Mevcut sunucu blo\u011funun yan\u0131na, 443 portunu (HTTPS\u2019nin varsay\u0131lan portu) dinlemek i\u00e7in yeni bir sunucu blo\u011fu ekleyin. Temel yap\u0131land\u0131rma komutlar\u0131 aras\u0131nda, SSL sertifikas\u0131n\u0131n ve \u00f6zel anahtar\u0131n\u0131n yolunu belirtmek ve g\u00fcvenli\u011fi art\u0131rmak i\u00e7in uygun SSL protokol\u00fcn\u00fc ve \u015fifreleme paketini se\u00e7mek yer al\u0131r. Yap\u0131land\u0131rma tamamland\u0131ktan sonra, kullan\u0131n. nginx -t<\/code> Test konfig\u00fcrasyonunun dilbilgisini kontrol edin; hatalar yoksa onaylay\u0131n. systemctl reload nginx<\/code> Yap\u0131land\u0131rmay\u0131 yeniden y\u00fckle.<\/p>\n\n\n\n

Apache sunucusu yap\u0131land\u0131rmas\u0131.<\/h3>\n\n\n\n

Apache sunucusu i\u00e7in de sertifika ve \u00f6zel anahtar dosyalar\u0131n\u0131 y\u00fcklemeniz gerekmektedir. Daha sonra, sanal sunucu yap\u0131land\u0131rma dosyan\u0131z\u0131 (\u00f6rne\u011fin\u2026) d\u00fczenleyin. \/etc\/apache2\/sites-available\/your-site.conf<\/code>\uff09\u3002
\nSSL mod\u00fcl\u00fc etkinle\u015ftirildikten sonra, sanal sunucu ayarlar\u0131na ekleyin. SSLEngine on<\/code> Komutu al\u0131n ve uygulay\u0131n. SSLCertificateFile<\/code> \u548c SSLCertificateKeyFile<\/code> Komutlar s\u0131ras\u0131yla sertifika dosyas\u0131n\u0131n ve \u00f6zel anahtar dosyas\u0131n\u0131n yolunu belirtir. Ayn\u0131 zamanda g\u00fc\u00e7lendirilmi\u015f SSL protokol\u00fcn\u00fcn de yap\u0131land\u0131r\u0131lmas\u0131 gerekmektedir. De\u011fi\u015fiklikleri kaydettikten sonra, kullan\u0131n. apachectl configtest<\/code> Test edin ve ard\u0131ndan Apache servisini yeniden ba\u015flat\u0131n.<\/p>\n\n\n\n

Zorunlu HTTPS y\u00f6nlendirmesi ve HSTS (HTTP Strict Transport Security)<\/h3>\n\n\n\n

Da\u011f\u0131t\u0131m tamamland\u0131ktan sonra, t\u00fcm trafi\u011fin g\u00fcvenli HTTPS kanal\u0131 \u00fczerinden y\u00f6nlendirildi\u011finden emin olmak i\u00e7in HTTP\u2019den HTTPS\u2019ye 301 yeniden y\u00f6nlendirmesi yap\u0131land\u0131r\u0131lmal\u0131d\u0131r. Bu, sunucunun 80. portundaki dinleme blo\u011funa bir yeniden yazma kural\u0131 ekleyerek ger\u00e7ekle\u015ftirilebilir.
\nDaha da ileri giderek, HSTS (HTTP Strict Transport Security) \u00f6zelli\u011fini etkinle\u015ftirebilirsiniz. Bir yan\u0131t ba\u015fl\u0131\u011f\u0131 arac\u0131l\u0131\u011f\u0131yla taray\u0131c\u0131ya, belirli bir s\u00fcre boyunca (\u00f6rne\u011fin bir y\u0131l) bu siteye yap\u0131lan t\u00fcm eri\u015fimlerin HTTPS kullan\u0131larak yap\u0131lmas\u0131 gerekti\u011fini bildirebilirsiniz. Bu, SSL \u00e7\u0131karma (SSL stripping) sald\u0131r\u0131lar\u0131n\u0131 etkili bir \u015fekilde \u00f6nleyebilir. Ancak l\u00fctfen dikkat edin: HTTPS\u2019nin tamamen d\u00fczg\u00fcn \u00e7al\u0131\u015ft\u0131\u011f\u0131ndan emin olmadan bu \u00f6zelli\u011fi kolayca etkinle\u015ftirmeyin; aksi takdirde yap\u0131lan bir ayar hatas\u0131 kullan\u0131c\u0131lar\u0131n siteye uzun s\u00fcre eri\u015fememesine neden olabilir.<\/p>\n\n\n\n

Y\u00fcklemeden sonra yap\u0131lan do\u011frulama<\/h3>\n\n\n\n

Da\u011f\u0131t\u0131m\u0131n ard\u0131ndan, HTTPS adresinize mutlaka bir taray\u0131c\u0131 arac\u0131l\u0131\u011f\u0131yla eri\u015fin. Adres \u00e7ubu\u011fundaki kilit simgesinin do\u011fru \u00e7al\u0131\u015f\u0131p \u00e7al\u0131\u015fmad\u0131\u011f\u0131n\u0131 kontrol edin ve sertifika ayr\u0131nt\u0131lar\u0131n\u0131n bilgilerinizle e\u015fle\u015fip e\u015fle\u015fmedi\u011fini inceleyin. Ayr\u0131ca, yap\u0131land\u0131rman\u0131z\u0131n kapsaml\u0131 bir g\u00fcvenlik de\u011ferlendirmesini yapmak i\u00e7in \u00e7evrimi\u00e7i SSL denetim ara\u00e7lar\u0131 (\u00f6rne\u011fin SSL Labs\u2019\u0131n SSL Test arac\u0131) kullanman\u0131z\u0131 \u015fiddetle \u00f6neririz. Bu ara\u00e7lar, g\u00fcvenli olmayan protokoller, zay\u0131f \u015fifreleme paketleri gibi yap\u0131land\u0131rmadaki olas\u0131 g\u00fcvenlik a\u00e7\u0131klar\u0131n\u0131 belirleyecektir.<\/p>\n\n\n\n

\u00d6zetle.<\/h2>\n\n\n\n

SSL sertifikalar\u0131, a\u011f ileti\u015fiminin g\u00fcvenli\u011fini sa\u011flamak ve kullan\u0131c\u0131lar\u0131n g\u00fcvenini kazanmak i\u00e7in gereklidir. Temel DV sertifikalar\u0131ndan y\u00fcksek g\u00fcvence sa\u011flayan EV sertifikalar\u0131na, tek bir alan ad\u0131ndan joker karakterlere kadar \u00e7e\u015fitli t\u00fcrler, farkl\u0131 senaryolar\u0131n ihtiya\u00e7lar\u0131n\u0131 kar\u015f\u0131layabilir. Ba\u015fvuru s\u00fcre\u00e7leri giderek basitle\u015fmekte ve otomatikle\u015fmektedir; \u00f6zellikle \u00fccretsiz sertifikalar\u0131n yayg\u0131nla\u015fmas\u0131, web sitelerinin HTTPS\u2019yi kullanmas\u0131n\u0131n \u00f6n\u00fcndeki engelleri b\u00fcy\u00fck \u00f6l\u00e7\u00fcde azaltm\u0131\u015ft\u0131r. Ba\u015far\u0131l\u0131 bir da\u011f\u0131t\u0131m sadece kurulumla s\u0131n\u0131rl\u0131 de\u011fildir; ayn\u0131 zamanda do\u011fru yap\u0131land\u0131rma ve sonraki bak\u0131mlar da \u00f6nemlidir (HTTPS y\u00f6nlendirmelerinin zorunlu hale getirilmesi, HSTS\u2019nin etkinle\u015ftirilmesi ve sertifikalar\u0131n d\u00fczenli olarak yenilenmesi gibi). HTTPS\u2019yi benimsemek, sadece teknolojik trendleri takip etmekle kalmaz; ayn\u0131 zamanda kullan\u0131c\u0131 g\u00fcvenli\u011fi ve kendi marka itibar\u0131n\u0131za kar\u015f\u0131 da sorumlu bir tutumdur.<\/p>\n\n\n\n

S\u0131k\u00e7a Sorulan Sorular.<\/h2>\n\n\n\n

SSL sertifikalar\u0131 ve TLS sertifikalar\u0131 ayn\u0131 \u015fey mi?<\/h3>\n\n\n\n

Esasen ayn\u0131 teknolojiyi ifade eder. SSL (Secure Sockets Layer), daha eski bir protokol s\u00fcr\u00fcm\u00fcd\u00fcr ve yerini daha g\u00fcvenli ve modern olan TLS (Transport Layer Security) protokol\u00fcne b\u0131rakm\u0131\u015ft\u0131r. Ancak tarihi al\u0131\u015fkanl\u0131klar nedeniyle \u201cSSL sertifikas\u0131\u201d ad\u0131 hala yayg\u0131n olarak kullan\u0131lmaktad\u0131r; g\u00fcn\u00fcm\u00fcz piyasas\u0131nda bahsedilen SSL sertifikalar\u0131 asl\u0131nda TLS protokol\u00fcn\u00fc destekleyen sertifikalard\u0131r.<\/p>\n\n\n\n

\u00dccretsiz SSL sertifikalar\u0131n\u0131n \u00fccretli olanlardan ne fark\u0131 var?<\/h3>\n\n\n\n

\u4e3b\u8981\u533a\u522b\u5728\u4e8e\u9a8c\u8bc1\u7ea7\u522b\u3001\u529f\u80fd\u3001\u4fdd\u969c\u548c\u670d\u52a1\u3002\u514d\u8d39\u8bc1\u4e66\uff08\u5982Let\u2018s Encrypt\uff09\u901a\u5e38\u662fDV\u8bc1\u4e66\uff0c\u4ec5\u9a8c\u8bc1\u57df\u540d\u6240\u6709\u6743\uff0c\u9002\u5408\u4e2a\u4eba\u6216\u975e\u5546\u4e1a\u9879\u76ee\u3002\u4ed8\u8d39\u8bc1\u4e66\u63d0\u4f9bOV\u3001EV\u7b49\u66f4\u9ad8\u7ea7\u522b\u7684\u9a8c\u8bc1\uff0c\u80fd\u5c55\u793a\u516c\u53f8\u4fe1\u606f\uff0c\u63d0\u5347\u4fe1\u4efb\u5ea6\uff1b\u901a\u5e38\u63d0\u4f9b\u66f4\u9ad8\u7684\u4fdd\u4fee\u91d1\u989d\uff08\u5982\u767e\u4e07\u7f8e\u5143\u7ea7\u4fdd\u969c\uff09\uff0c\u5728\u8bc1\u4e66\u88ab\u76d7\u6216\u8bef\u7b7e\u53d1\u5bfc\u81f4\u635f\u5931\u65f6\u63d0\u4f9b\u8d54\u507f\uff1b\u5e76\u4e14\u62e5\u6709\u4e13\u4e1a\u7684\u6280\u672f\u652f\u6301\u670d\u52a1\u3002<\/p>\n\n\n\n

Sertifika da\u011f\u0131t\u0131ld\u0131ktan sonra, neden taray\u0131c\u0131 hala g\u00fcvensiz olarak g\u00f6steriliyor?<\/h3>\n\n\n\n

Bunun bir\u00e7ok nedeni olabilir: 1. Web sitesi sayfas\u0131nda HTTP protokol\u00fcne ait kaynaklar (\u00f6rne\u011fin resimler, JS, CSS dosyalar\u0131) kar\u0131\u015f\u0131k bir \u015fekilde y\u00fckleniyor ve t\u00fcm kaynak ba\u011flant\u0131lar\u0131n\u0131n HTTPS'ye d\u00f6n\u00fc\u015ft\u00fcr\u00fclmesi gerekiyor. 2. Sertifika zinciri eksik ve sunucu ara sertifikalar\u0131 do\u011fru \u015fekilde yap\u0131land\u0131r\u0131lmam\u0131\u015f. 3. Sertifikan\u0131n alan ad\u0131, mevcut eri\u015fim alan ad\u0131yla e\u015fle\u015fmiyor. 4. Sertifika s\u00fcresi dolmu\u015f. Taray\u0131c\u0131 taraf\u0131ndan verilen \u00f6zel hata mesajlar\u0131na g\u00f6re sorunu gidermeniz gerekir.<\/p>\n\n\n\n

SSL sertifikalar\u0131 ne s\u0131kl\u0131kta yenilenmelidir?<\/h3>\n\n\n\n

\u76ee\u524d\uff0c\u4e3b\u6d41CA\u7b7e\u53d1\u7684SSL\u8bc1\u4e66\u6700\u957f\u6709\u6548\u671f\u4e3a398\u5929\uff08\u7ea613\u4e2a\u6708\uff09\uff0c\u8fd9\u662f\u884c\u4e1a\u6807\u51c6\u59d4\u5458\u4f1a\u5f3a\u5236\u89c4\u5b9a\u7684\u3002\u514d\u8d39\u8bc1\u4e66\u5982Let\u2018s Encrypt\u6709\u6548\u671f\u66f4\u77ed\uff0c\u4e3a90\u5929\u3002\u56e0\u6b64\uff0c\u60a8\u9700\u8981\u5b9a\u671f\u5728\u8bc1\u4e66\u8fc7\u671f\u524d\u8fdb\u884c\u7eed\u671f\u64cd\u4f5c\uff0c\u5426\u5219\u8fc7\u671f\u540e\u7f51\u7ad9\u8bbf\u95ee\u5c06\u56e0\u5b89\u5168\u8b66\u544a\u800c\u4e2d\u65ad\u3002\u5efa\u8bae\u8bbe\u7f6e\u81ea\u52a8\u7eed\u671f\u6216\u63d0\u524d\u7eed\u671f\u63d0\u9192\u3002<\/p>\n\n\n\n

Bir SSL sertifikas\u0131 birden fazla sunucuda kullan\u0131labilir mi?<\/h3>\n\n\n\n

Tabii ki, ancak do\u011fru y\u00f6ntemi kullanmak \u00f6nemlidir. E\u011fer ayn\u0131 hizmeti sa\u011flayan birden fazla sunucunuz varsa (\u00f6rne\u011fin bir y\u00fck dengeleme k\u00fcmesi), ayn\u0131 sertifikay\u0131 ve \u00f6zel anahtar\u0131 her bir sunucuya da\u011f\u0131tabilirsiniz. Daha iyi bir \u00e7\u00f6z\u00fcm ise, birden fazla sunucuda da\u011f\u0131t\u0131m\u0131 destekleyen sertifika t\u00fcrlerini kullanmakt\u0131r (baz\u0131 sertifikalar birden fazla sunucu IP adresini belirtmenize izin verir) veya sertifika da\u011f\u0131t\u0131m\u0131 ve y\u00f6netimi i\u00e7in \u00f6zel ara\u00e7lar kullanmakt\u0131r. \u00d6nemli olan, \u00f6zel anahtar\u0131n g\u00fcvenli bir \u015fekilde y\u00f6netilmesidir.<\/p>","protected":false},"excerpt":{"rendered":"

Bu makalede, SSL sertifikalar\u0131n\u0131n veri \u015fifreleme, kimlik do\u011frulama ve arama s\u0131ralamalar\u0131n\u0131 iyile\u015ftirme konusundaki rol\u00fc sistematik bir \u015fekilde a\u00e7\u0131klanmaktad\u0131r. DV, OV, EV ve \u00e7ok alan adl\u0131 sertifika t\u00fcrleri detayl\u0131 bir \u015fekilde kar\u015f\u0131la\u015ft\u0131r\u0131lm\u0131\u015ft\u0131r ve bir CSR (Certificate Signing Request) olu\u015fturulmas\u0131ndan do\u011frulaman\u0131n tamamlanmas\u0131na kadar olan s\u00fcreci kapsayan eksiksiz bir ba\u015fvuru ve da\u011f\u0131t\u0131m rehberi sunulmaktad\u0131r; ayr\u0131ca \u00fccretsiz sertifika se\u00e7enekleri de ele al\u0131nmaktad\u0131r.<\/p>","protected":false},"author":7,"featured_media":0,"template":"","meta":{"_acf_changed":false,"footnotes":""},"tags":[326,11,416,319,338],"knowledge_category":[277],"class_list":["post-12374418","knowledge_post","type-knowledge_post","status-publish","hentry","tag-https-guide","tag-ssl-certificate","tag-encrypted-transmission","tag-website-security","tag-cybersecurity","knowledge_category-ssl-certificate"],"acf":{"site_seo_keywords":"SSL\u8bc1\u4e66,HTTPS\u52a0\u5bc6,SSL\u8bc1\u4e66\u7533\u8bf7,SSL\u8bc1\u4e66\u7c7b\u578b,SSL\u90e8\u7f72\u6559\u7a0b,\u7f51\u7ad9\u5b89\u5168\u8bc1\u4e66,\u901a\u914d\u7b26SSL\u8bc1\u4e66"},"_links":{"self":[{"href":"https:\/\/www.likacloud.com\/tr\/wp-json\/wp\/v2\/knowledge_posts\/12374418","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.likacloud.com\/tr\/wp-json\/wp\/v2\/knowledge_posts"}],"about":[{"href":"https:\/\/www.likacloud.com\/tr\/wp-json\/wp\/v2\/types\/knowledge_post"}],"author":[{"embeddable":true,"href":"https:\/\/www.likacloud.com\/tr\/wp-json\/wp\/v2\/users\/7"}],"version-history":[{"count":0,"href":"https:\/\/www.likacloud.com\/tr\/wp-json\/wp\/v2\/knowledge_posts\/12374418\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.likacloud.com\/tr\/wp-json\/wp\/v2\/media?parent=12374418"}],"wp:term":[{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.likacloud.com\/tr\/wp-json\/wp\/v2\/tags?post=12374418"},{"taxonomy":"knowledge_category","embeddable":true,"href":"https:\/\/www.likacloud.com\/tr\/wp-json\/wp\/v2\/knowledge_category?post=12374418"}],"curies":[{"name":"WP","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}