{"id":12376360,"date":"2026-03-18T16:57:31","date_gmt":"2026-03-18T08:57:31","guid":{"rendered":"https:\/\/www.likacloud.com\/knowledge\/%e5%85%a8%e9%9d%a2%e8%a7%a3%e6%9e%90ssl%e8%af%81%e4%b9%a6%ef%bc%9a%e4%bb%8e%e5%8e%9f%e7%90%86%e5%88%b0%e9%83%a8%e7%bd%b2%e7%9a%84%e5%ae%8c%e6%95%b4%e6%8c%87%e5%8d%97\/"},"modified":"2026-03-18T17:08:46","modified_gmt":"2026-03-18T09:08:46","slug":"complete-guide-to-ssl-certificates-from-principles-to-deployment","status":"publish","type":"knowledge_post","link":"https:\/\/www.likacloud.com\/tr\/knowledge\/ssl-certificate\/complete-guide-to-ssl-certificates-from-principles-to-deployment\/","title":{"rendered":"SSL sertifikalar\u0131n\u0131n kapsaml\u0131 analizi: ilkenden uygulamaya kadar eksiksiz bir rehber."},"content":{"rendered":"

G\u00fcn\u00fcm\u00fcz internet ortam\u0131nda, veri g\u00fcvenli\u011finin sa\u011flanmas\u0131 web sitelerinin i\u015fleyi\u015finin temelini olu\u015fturur. SSL sertifikalar\u0131, HTTPS \u015fifrelemesini ger\u00e7ekle\u015ftirmede kilit bir teknoloji olarak kullan\u0131lmakta ve art\u0131k yaln\u0131zca b\u00fcy\u00fck web sitelerinin \u00f6zel bir \u00f6zelli\u011fi de\u011fil, t\u00fcm web sitelerinin temel bir yap\u0131land\u0131rmas\u0131 haline gelmi\u015ftir. SSL sertifikalar\u0131, web sitelerinin bir nevi \u201cdijital kilidi\u201d gibidir ve ziyaret\u00e7iler ile sunucular aras\u0131ndaki ileti\u015fim i\u00e7in \u015fifreli bir kanal olu\u015fturarak verilerin dinlenmesini veya de\u011fi\u015ftirilmesini engeller.<\/p>\n\n\n\n

SSL\/TLS Protokol\u00fcn\u00fcn \u00c7al\u0131\u015fma Prensibi<\/h2>\n\n\n\n

SSL sertifikalar\u0131n\u0131n \u00e7al\u0131\u015fmas\u0131, SSL\/TLS protokol\u00fcne ba\u011fl\u0131d\u0131r. Bu protokol\u00fcn nas\u0131l \u00e7al\u0131\u015ft\u0131\u011f\u0131n\u0131 anlamak, \u00f6nemini daha iyi kavramam\u0131za yard\u0131mc\u0131 olur. Protokol\u00fcn temel amac\u0131, ileti\u015fimin gizlili\u011fini, b\u00fct\u00fcnl\u00fc\u011f\u00fcn\u00fc ve kimlik do\u011frulamas\u0131n\u0131 sa\u011flamakt\u0131r.<\/p>\n\n\n\n

Asimetrik \u015fifreleme ile simetrik \u015fifrelemenin birle\u015ftirilmesi<\/h3>\n\n\n\n

SSL\/TLS protokol\u00fc, iki farkl\u0131 \u015fifreleme y\u00f6ntemini ustaca bir araya getirir. Ba\u015flang\u0131\u00e7taki \u201cel s\u0131k\u0131\u015fma\u201d (handshake) a\u015famas\u0131nda, asimetrik \u015fifreleme (\u00f6rne\u011fin RSA, ECC) kullan\u0131l\u0131r. Sunucu \u00f6zel anahtara sahiptir ve i\u00e7inde genel anahtar\u0131n bulundu\u011fu SSL sertifikas\u0131 taray\u0131c\u0131ya g\u00f6nderilir. Taray\u0131c\u0131, rastgele olu\u015fturulan bir \u201c\u00f6n anahtar\u201d\u0131 (pre-master key) genel anahtar kullanarak \u015fifreler ve bu \u015fifreli anahtar\u0131 sunucuya geri g\u00f6nderir; yaln\u0131zca ilgili \u00f6zel anahtara sahip olan sunucu bu anahtar\u0131 \u00e7\u00f6zebilir. Bu s\u00fcre\u00e7, anahtar de\u011fi\u015fiminin g\u00fcvenli\u011fini sa\u011flar.<\/p>\n

Tavsiye edilen okuma SSL Sertifikas\u0131 nedir? Prensibinden ba\u015fvuru ve kurulumuna kadar kapsaml\u0131 bir giri\u015f rehberi<\/a>\u3002<\/p>\n\n\n\n\n

El s\u0131k\u0131\u015fma i\u015flemi ba\u015far\u0131l\u0131 olduktan sonra, taraflar bu \u201c\u00f6n anahtar\u201d kullanarak ayn\u0131 \u201coturum anahtar\u0131n\u0131\u201d olu\u015ftururlar ve sonraki t\u00fcm veri aktar\u0131mlar\u0131 simetrik \u015fifreleme (\u00f6rne\u011fin AES) y\u00f6ntemiyle ger\u00e7ekle\u015ftirilir. Simetrik \u015fifreleme, hem \u015fifreleme hem de \u015fifre \u00e7\u00f6zme i\u015flemlerini h\u0131zl\u0131 bir \u015fekilde ger\u00e7ekle\u015ftirir ve b\u00fcy\u00fck miktarda veri i\u015flemek i\u00e7in uygundur; ancak bunun i\u00e7in taraflar\u0131n ayn\u0131 anahtar\u0131 g\u00fcvenli bir \u015fekilde payla\u015fmalar\u0131 gerekir. \u0130\u015fte bu g\u00fcvenlik, asimetrik \u015fifreleme a\u015famas\u0131nda sa\u011flan\u0131r.<\/p>\n\n

\r\n\t\r\n\t\t\r\n\t\r\n\t
\r\n\t\t
\r\n\t\t\t\r\n\t\t\t
\r\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"Bluehost\r\n\t\t\t\t\t\t\t\t\t\r\n\t\t\t<\/div>\r\n\t\t\t\r\n\t\t\t\r\n\t\t\t
\r\n\t\t\t\t
\r\n\t\t\t\t\tBluehost SSL sertifikas\u0131.<\/strong>\r\n\t\t\t\t\t\t\t\t\t<\/div>\r\n\t\t\t<\/div>\r\n\t\t<\/div>\r\n\t\t\t\tBlueHost SSL sertifikalar\u0131, 1-2 y\u0131ll\u0131k uzatma s\u00fcresi se\u00e7enekleri sunar, RSA veya ECC algoritmalar\u0131n\u0131 destekler, 4096 bit'e kadar anahtar uzunlu\u011fu sa\u011flar ve 1,75 milyon ABD dolar\u0131na kadar garanti tutar\u0131 sunar.<\/span>\r\n\t\t\t\t
\r\n\t\t\t\r\n\t\t\t\t\t\t\r\n\t\t\t \r\n\t\t\t
\r\n\t\t\t\t\t\t\t\t
Ayl\u0131k $7,49 USD'den ba\u015flayan fiyatlarla.<\/div>\r\n\t\t\t\t\t\t\t\t\t\t\t\tBluehost SSL sertifikas\u0131na eri\u015fin \u2192<\/a>\r\n\t\t\t\t\t\t\t<\/div> \r\n\t\t<\/div>\r\n\t<\/div>\r\n\t\t\r\n\t\r\n\t
\r\n\t\t
\r\n\t\t\t\r\n\t\t\t
\r\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"hosting.com\r\n\t\t\t\t\t\t\t\t\t\r\n\t\t\t<\/div>\r\n\t\t\t\r\n\t\t\t\r\n\t\t\t
\r\n\t\t\t\t
\r\n\t\t\t\t\thosting.com SSL sertifikas\u0131.<\/strong>\r\n\t\t\t\t\t\t\t\t\t<\/div>\r\n\t\t\t<\/div>\r\n\t\t<\/div>\r\n\t\t\t\tUygun fiyatl\u0131 DV, OV, EV SSL sertifikalar\u0131, en y\u00fcksek 256 bit \u015fifreleme, 5 milyon ila 100 milyon ABD dolar\u0131 tutar\u0131nda garanti ve 7\/24 destek.<\/span>\r\n\t\t\t\t
\r\n\t\t\t\r\n\t\t\t\t\t\t\r\n\t\t\t \r\n\t\t\t
\r\n\t\t\t\t\t\t\t\t
Ayl\u0131k $2.5 USD'den ba\u015flayan fiyatlarla.<\/div>\r\n\t\t\t\t\t\t\t\t\t\t\t\tHosting.com SSL sertifikas\u0131na eri\u015fin. \u2192<\/a>\r\n\t\t\t\t\t\t\t<\/div> \r\n\t\t<\/div>\r\n\t<\/div>\r\n\t\t\r\n<\/div>\r\n\r\n\r\n\n\n\n\n\n\n\n

TLS el s\u0131kma s\u00fcreci detayl\u0131 olarak a\u00e7\u0131klanm\u0131\u015ft\u0131r.<\/h3>\n\n\n\n

Tipik bir TLS el s\u0131kma (handshake) s\u00fcreci a\u015fa\u011f\u0131daki ana ad\u0131mlar\u0131 i\u00e7erir:
\n1. M\u00fc\u015fteri taraf\u0131, sunucuya \u201cClient Hello\u201d mesaj\u0131n\u0131 g\u00f6nderir. Bu mesaj, desteklenen TLS s\u00fcr\u00fcmlerini, \u015fifreleme paketleri listesini ve rastgele bir say\u0131 i\u00e7erir.
\n2. Sunucu, \u201cServer Hello\u201d mesaj\u0131n\u0131 g\u00f6nderir; her iki taraf\u0131n da destekledi\u011fi TLS s\u00fcr\u00fcm\u00fcn\u00fc ve \u015fifreleme paketini se\u00e7er, ard\u0131ndan kendi rastgele say\u0131s\u0131n\u0131 ve SSL sertifikas\u0131n\u0131 g\u00f6nderir.
\n3. \u0130stemci, sunucu sertifikan\u0131n ge\u00e7erlili\u011fini do\u011frular (g\u00fcvenilir bir CA taraf\u0131ndan m\u0131 imzaland\u0131\u011f\u0131, ge\u00e7erlilik s\u00fcresi i\u00e7inde olup olmad\u0131\u011f\u0131, alan ad\u0131n\u0131n e\u015fle\u015fip e\u015fle\u015fmedi\u011fi vb.). Do\u011frulama ba\u015far\u0131l\u0131 olduktan sonra, istemci sertifikadaki kamu anahtar\u0131 kullanarak \u201c\u00f6n anahtar\u0131\u201d \u015fifreler ve sunucuya g\u00f6nderir.
\n4. Sunucu, kendi \u00f6zel anahtar\u0131 kullanarak \u201c\u00f6n anahtar\u0131\u201d \u015fifresini \u00e7\u00f6zer. Bu a\u015famada hem istemci hem de sunucu, her ikisi de ayn\u0131 \u201cana anahtar\u0131\u201d ve \u201coturum anahtar\u0131n\u0131\u201d ba\u011f\u0131ms\u0131z olarak olu\u015fturacak \u015fekilde iki rastgele say\u0131ya ve \u00f6n anahtara sahip olur.
\n5. Taraflar, \u015fifreleme i\u015fleminin tamamland\u0131\u011f\u0131n\u0131 belirten \u201cFinished\u201d mesajlar\u0131n\u0131 kar\u015f\u0131l\u0131kl\u0131 olarak de\u011fi\u015ftirirler; bu sayede el s\u0131kma (handshake) s\u00fcrecinin de\u011fi\u015ftirilip de\u011fi\u015ftirilmedi\u011fi do\u011frulan\u0131r. Do\u011frulama ba\u015far\u0131l\u0131 olduktan sonra, \u015fifreli ileti\u015fim kanal\u0131 resmi olarak kurulur ve uygulama katman\u0131 verilerinin \u015fifreli olarak aktar\u0131lmas\u0131 ba\u015flar.<\/p>\n\n\n\n

SSL Sertifikalar\u0131n\u0131n Temel T\u00fcrleri ve Se\u00e7imi<\/h2>\n\n\n\n

Piyasadaki \u00e7e\u015fitli SSL sertifikalar\u0131 aras\u0131ndan do\u011fru se\u00e7imi yapman\u0131n anahtar\u0131, onlar\u0131 do\u011frulama seviyelerine ve i\u015flevlerine g\u00f6re ay\u0131rt etmektir.<\/p>\n\n\n\n

Do\u011frulama seviyesine g\u00f6re s\u0131n\u0131fland\u0131r\u0131lm\u0131\u015f<\/h3>\n\n\n\n

Alan ad\u0131 do\u011frulama sertifikas\u0131: Bu, en temel sertifika t\u00fcr\u00fcd\u00fcr. Sertifika yetkilisi, yaln\u0131zca ba\u015fvuru sahibinin alan ad\u0131 \u00fczerindeki kontrol\u00fcn\u00fc do\u011frulamaktad\u0131r (genellikle e-posta ya da DNS \u00e7\u00f6z\u00fcmleme yoluyla). H\u0131zl\u0131 d\u00fczenleme ve d\u00fc\u015f\u00fck maliyetle ki\u015fisel web siteleri, bloglar ya da test ortamlar\u0131 i\u00e7in uygundur ve esasen temel HTTPS \u015fifrelemesini ger\u00e7ekle\u015ftirmek i\u00e7in kullan\u0131l\u0131r.<\/p>\n\n\n\n

Kurulu\u015f do\u011frulama sertifikas\u0131: DV do\u011frulamas\u0131n\u0131n temelinde, CA, ba\u015fvuran \u015firketin ger\u00e7ek varl\u0131\u011f\u0131n\u0131 (\u00f6rne\u011fin, ticari kay\u0131t bilgileri) do\u011frulayacakt\u0131r. Sertifikada \u015firket ad\u0131 ve di\u011fer bilgiler yer alacakt\u0131r. Bu, DV sertifikas\u0131ndan daha y\u00fcksek bir g\u00fcvenilirlik sa\u011flar ve kurulu\u015fun ger\u00e7ekli\u011fini kullan\u0131c\u0131lara g\u00f6stermek i\u00e7in kurumsal web siteleri ve genel ticari web siteleri i\u00e7in uygundur.<\/p>\n

Tavsiye edilen okuma SSL Sertifikalar\u0131n\u0131n Kapsaml\u0131 Analizi: \u00c7al\u0131\u015fma Prensibi, T\u00fcr Se\u00e7imi ve Da\u011f\u0131t\u0131m \u0130\u00e7in En \u0130yi Uygulamalar<\/a>\u3002<\/p>\n\n\n\n\n

Geni\u015fletilmi\u015f do\u011frulama tipi sertifikalar: Bu, en s\u0131k\u0131 do\u011frulama s\u00fcre\u00e7lerine tabi tutulan ve en y\u00fcksek g\u00fcven seviyesine sahip sertifikalard\u0131r. Sertifika yetkilileri (CA \u2013 Certificate Authorities), \u015firketin yasall\u0131\u011f\u0131, fiziksel adresi, telefon do\u011frulamas\u0131 gibi konularda kapsaml\u0131 incelemeler yaparlar. Taray\u0131c\u0131n\u0131n adres \u00e7ubu\u011funda, \u015firketin ad\u0131 do\u011frudan ye\u015fil renkte veya kilit i\u015fareti yan\u0131nda g\u00f6sterilir; bu da kullan\u0131c\u0131lara en g\u00fc\u00e7l\u00fc kimlik do\u011frulama garantisi sa\u011flar. Genellikle bankalar, finans sekt\u00f6r\u00fc, e-ticaret platformlar\u0131 gibi y\u00fcksek g\u00fcven gerektiren web sitelerinde kullan\u0131l\u0131r.<\/p>\n\n\n\n

Domain say\u0131s\u0131na g\u00f6re s\u0131ralanm\u0131\u015ft\u0131r.<\/h3>\n\n\n\n

Tek Alan Ad\u0131 Sertifikas\u0131: Yaln\u0131zca bir tam olarak tan\u0131mlanm\u0131\u015f alan ad\u0131n\u0131 korur (\u00f6rne\u011fin\u2026) www.example.com<\/code> \u6216 example.com<\/code>Genellikle yaln\u0131zca birini korur; detaylar \u00fcr\u00fcn a\u00e7\u0131klamas\u0131nda belirtilir.<\/p>\n\n\n\n

\u00c7ok Alan Adl\u0131 Sertifika: Bir sertifika, birbirinden tamamen farkl\u0131 birden fazla alan ad\u0131n\u0131 koruyabilir (\u00f6rne\u011fin\u2026) example.com<\/code>, example.net<\/code>, shop.othersite.com<\/code>B\u00f6ylece y\u00f6netimi daha da kolay hale geliyor.<\/p>\n\n\n

\n\n
\n UltaHost SSL sertifikas\u0131.<\/strong>\n
DV, EV, OV sertifikalar\u0131, en fazla $1, 750.000 ABD dolar\u0131 teminat tutar\u0131n\u0131 destekler, s\u0131n\u0131rs\u0131z alt alan ad\u0131n\u0131 destekler, iOS ve Android uygulamalar\u0131n\u0131 destekler ve 20%'den ba\u015flayan ayl\u0131k $15,95 ABD dolar\u0131 fiyatla 30 g\u00fcnl\u00fck para iade garantisi sunar.<\/div>\n <\/div>\n\n
\n \n \n \"SSL\n \n \n <\/a>\n \n \n UltaHost'u ziyaret edin. <\/a>\n <\/div>\n <\/div>\n\n \n\n\n\n\n\n\n

Jenerik karakterli sertifika: Bir ana alan ad\u0131n\u0131 ve t\u00fcm ayn\u0131 seviyedeki alt alan adlar\u0131n\u0131 koruyabilir (\u00f6rne\u011fin\u2026) *.example.com<\/code> Koruyabilir. blog.example.com<\/code>, shop.example.com<\/code>, dev.example.com<\/code> Bir\u00e7ok alt alan ad\u0131na sahip \u015firketler i\u00e7in bu, maliyet a\u00e7\u0131s\u0131ndan son derece avantajl\u0131 bir se\u00e7enektir.<\/p>\n\n\n\n

SSL sertifikas\u0131n\u0131 nas\u0131l ba\u015fvurup da\u011f\u0131tabilirsiniz?<\/h2>\n\n\n\n

Ba\u015fvurudan ba\u015far\u0131l\u0131 bir \u015fekilde da\u011f\u0131t\u0131ma kadar, izlenmesi gereken birka\u00e7 belirgin ad\u0131m vard\u0131r.<\/p>\n\n\n\n

Sertifika Ba\u015fvuru ve Do\u011frulama S\u00fcreci<\/h3>\n\n\n\n

\u00d6ncelikle, sunucuda bir sertifika imza iste\u011fi (Certificate Signing Request \u2013 CSR) olu\u015fturman\u0131z gerekmektedir. Bu, sizin a\u00e7\u0131k anahtar\u0131n\u0131z\u0131 ve \u015firket bilgilerinizi (alan ad\u0131, kurulu\u015f, konum vb.) i\u00e7eren \u015fifreli bir metin dosyas\u0131d\u0131r. CSR olu\u015fturulurken ayn\u0131 zamanda bir a\u00e7\u0131k ve \u00f6zel anahtar \u00e7ifti de olu\u015fturulur; \u00f6zel anahtar\u0131n sunucuda g\u00fcvenli bir \u015fekilde saklanmas\u0131 ve kesinlikle d\u0131\u015far\u0131 s\u0131zd\u0131r\u0131lmamas\u0131 gerekir.<\/p>\n

Tavsiye edilen okuma SSL sertifikalar\u0131n\u0131n ayr\u0131nt\u0131l\u0131 a\u00e7\u0131klamas\u0131: t\u00fcrleri, ba\u015fvuru s\u00fcreci ve g\u00fcvenli da\u011f\u0131t\u0131m i\u00e7in en iyi uygulamalar.<\/a>\u3002<\/p>\n\n\n\n\n

Daha sonra, se\u00e7ilen CA\u2019ya CSR (Certificate Signing Request \u2013 Sertifika \u0130mzalama \u0130ste\u011fi) g\u00f6nderin ve sertifika t\u00fcr\u00fcn\u00fc se\u00e7in. CA, se\u00e7ti\u011finiz do\u011frulama seviyesine g\u00f6re inceleme yapacakt\u0131r. DV sertifikalar\u0131 i\u00e7in do\u011frulama genellikle birka\u00e7 dakika i\u00e7inde tamamlan\u0131r; OV ve EV sertifikalar\u0131 ise birka\u00e7 i\u015f g\u00fcn\u00fc s\u00fcrer.<\/p>\n\n\n\n

\u0130nceleme onayland\u0131ktan sonra, CA sertifika dosyas\u0131n\u0131 (genellikle) d\u00fczenler ve yay\u0131nlar. .crt<\/code> \u6216 .pem<\/code> Bu format\u0131, daha \u00f6nce olu\u015fturdu\u011funuz \u00f6zel anahtarla birlikte sunucuya da\u011f\u0131tman\u0131z gerekiyor.<\/p>\n\n\n\n

Web sunucusunda yap\u0131land\u0131rmay\u0131 da\u011f\u0131t\u0131n.<\/h3>\n\n\n\n

Yayg\u0131n olarak kullan\u0131lan Nginx ve Apache sunucular\u0131n\u0131 \u00f6rnek alal\u0131m:<\/p>\n\n\n\n

Nginx\u2019de yap\u0131land\u0131rma, esas olarak \u201cserver block\u201d (sunucu blo\u011fu) ayarlar\u0131n\u0131 de\u011fi\u015ftirmeyi i\u00e7erir. \u00d6nemli bir komut, sertifikan\u0131n ve \u00f6zel anahtar\u0131n yolunu belirtmektir:<\/p>\n\n\n\n

ssl_certificate \/path\/to\/your_domain.crt;\nssl_certificate_key \/path\/to\/your_private.key;<\/code><\/pre>\n\n\n\n
Ayn\u0131 zamanda, 443 numaral\u0131 portu dinlemek ve SSL protokol\u00fcn\u00fc etkinle\u015ftirmek gerekiyor:<\/p>\n\n\n\n
listen 443 ssl;<\/code><\/pre>\n\n\n\n
Apache\u2019de, SSL mod\u00fcl\u00fcn\u00fc sanal sunucu ayarlar\u0131nda etkinle\u015ftirmeniz ve sertifika dosyas\u0131n\u0131n yolunu belirtmeniz gerekmektedir:<\/p>\n\n\n\n
SSLEngine on\nSSLCertificateFile \/path\/to\/your_domain.crt\nSSLCertificateKeyFile \/path\/to\/your_private.key<\/code><\/pre>\n\n\n\n
Da\u011f\u0131t\u0131m tamamland\u0131ktan sonra, sertifika zincirinin eksiksiz oldu\u011fundan ve yap\u0131land\u0131rman\u0131n do\u011fru oldu\u011fundan emin olmak i\u00e7in \u00e7evrimi\u00e7i ara\u00e7lar kullan\u0131n. Ayr\u0131ca, t\u00fcm HTTP trafi\u011finin HTTPS\u2019ye y\u00f6nlendirildi\u011finden emin olun.<\/p>\n\n\n\n
\u0130leri D\u00fczey Yap\u0131land\u0131rmalar ve En \u0130yi Uygulamalar<\/h2>\n\n\n\n
Sertifikan\u0131n da\u011f\u0131t\u0131lmas\u0131 sadece ilk ad\u0131md\u0131r; uzun vadeli g\u00fcvenli\u011fi sa\u011flamak i\u00e7in do\u011fru yap\u0131land\u0131rma ve bak\u0131m gereklidir.<\/p>\n\n\n\n
HSTS (HTTP Strict Security Policy) g\u00fcvenlik politikas\u0131n\u0131 etkinle\u015ftirin.<\/h3>\n\n\n\n
HTTP Strict Transport Security (HTTS), \u00f6nemli bir g\u00fcvenlik yan\u0131t ba\u015fl\u0131\u011f\u0131d\u0131r. Bu ba\u015fl\u0131k, taray\u0131c\u0131ya, \u00f6n\u00fcm\u00fczdeki belirli bir s\u00fcre boyunca (ba\u015fl\u0131kta belirtilen s\u00fcre kadar) verilerin \u015fifreli olarak iletilmesi gerekti\u011fini bildirir. B\u00f6ylece verilerin g\u00fcvenli\u011fi sa\u011flan\u0131r. max-age<\/code> Belirtilen alan ad\u0131 yaln\u0131zca HTTPS \u00fczerinden eri\u015filebilir. Bu, SSL \u00e7\u0131karma (SSL stripping) sald\u0131r\u0131lar\u0131n\u0131 ve protokol d\u00fc\u015f\u00fcrme (protocol downgrade) sald\u0131r\u0131lar\u0131n\u0131 etkili bir \u015fekilde \u00f6nler. Yap\u0131land\u0131rma sonras\u0131nda, kullan\u0131c\u0131lar alan ad\u0131n\u0131 manuel olarak girmi\u015f olsalar bile\u2026 http:\/\/<\/code>Taray\u0131c\u0131 da zorla d\u00f6n\u00fc\u015f\u00fcm\u00fc ger\u00e7ekle\u015ftirecektir. https:\/\/<\/code> Eri\u015fim.<\/p>\n\n\n\n
Performans\u0131 Optimize Etme ve Anahtar G\u00fcncellemesi<\/h3>\n\n\n\n
TLS el s\u0131k\u0131\u015fma (handshake) i\u015flemi, hesaplama a\u00e7\u0131s\u0131ndan yo\u011fun bir s\u00fcre\u00e7tir ve gecikmelere neden olabilir. Oturum yenileme mekanizmalar\u0131n\u0131 (session recovery mechanisms) etkinle\u015ftirmek, sonraki ba\u011flant\u0131lar i\u00e7in gereken el s\u0131k\u0131\u015fma i\u015flemlerinin maliyetini \u00f6nemli \u00f6l\u00e7\u00fcde azaltabilir. \u00d6rne\u011fin, oturum tan\u0131mlay\u0131c\u0131lar\u0131 (session identifiers) veya daha verimli TLS oturum sertifikalar\u0131 (TLS session tickets) kullanmak bu ama\u00e7 i\u00e7in etkilidir.<\/p>\n\n\n\n
Ayr\u0131ca, \u015fifreleme paketlerinin yap\u0131land\u0131r\u0131lmas\u0131na dikkat etmek \u00e7ok \u00f6nemlidir. Eski ve g\u00fcvensiz protokoller (\u00f6rne\u011fin SSL 2.0\/3.0, hatta TLS 1.0\/1.1) ile zay\u0131f \u015fifreleme paketleri (RC4, DES gibi algoritmalar i\u00e7eren paketler) devre d\u0131\u015f\u0131 b\u0131rak\u0131lmal\u0131d\u0131r. \u00d6ncelikle, ileri y\u00f6nl\u00fc gizlilik \u00f6zelli\u011fine sahip \u015fifreleme paketleri (\u00f6rne\u011fin ECDHE) kullan\u0131lmal\u0131d\u0131r; b\u00f6ylece sunucunun uzun s\u00fcreli \u00f6zel anahtar\u0131 gelecekte if\u015fa olsa bile, ge\u00e7mi\u015fteki ileti\u015fim kay\u0131tlar\u0131 \u00e7\u00f6z\u00fclemez.<\/p>\n\n\n\n
SSL sertifikalar\u0131n\u0131n bir ge\u00e7erlilik s\u00fcresi vard\u0131r (\u015fu anki en uzun s\u00fcre 398 g\u00fcnd\u00fcr). Sertifikan\u0131n s\u00fcresi dolmadan \u00f6nce, web sitesi eri\u015fimlerinin kesilmesini ve kullan\u0131c\u0131 deneyiminin veya web sitesi g\u00fcvenli\u011finin etkilenmesini \u00f6nlemek i\u00e7in etkili bir izleme mekanizmas\u0131 kurulmal\u0131 ve sertifika zaman\u0131nda yenilenmeli\/d\u00fczeltilmelidir.<\/p>\n\n\n\n
\u00d6zetle.<\/h2>\n\n\n\n
SSL sertifikalar\u0131, a\u011f ileti\u015fiminin g\u00fcvenli\u011fini sa\u011flamada vazge\u00e7ilmez bir unsurudur. Asimetrik ve simetrik \u015fifreleme prensiplerini anlamaktan, kendi ihtiya\u00e7lar\u0131n\u0131za g\u00f6re DV, OV veya EV sertifikalar\u0131ndan birini se\u00e7meye, ba\u015fvuru, do\u011frulama ve da\u011f\u0131t\u0131m s\u00fcre\u00e7lerini do\u011fru bir \u015fekilde tamamlamaya kadar her ad\u0131m, nihai g\u00fcvenlik sonucunu do\u011frudan etkiler. Da\u011f\u0131t\u0131mdan sonra yap\u0131lan ileri d\u00fczey ayarlamalar (\u00f6rne\u011fin HSTS\u2019nin etkinle\u015ftirilmesi, \u015fifreleme paketlerinin optimize edilmesi ve sertifika g\u00fcncelleme mekanizmalar\u0131n\u0131n kurulmas\u0131), g\u00fcvenli\u011fi \u201cvar\u201d durumundan \u201cm\u00fckemmel\u201d duruma ta\u015f\u0131mada kritik rol oynar. G\u00fcn\u00fcm\u00fczde a\u011f g\u00fcvenlik tehditlerinin giderek karma\u015f\u0131kla\u015ft\u0131\u011f\u0131 bir ortamda, SSL\/TLS\u2019yi derinlemesine anlamak ve do\u011fru bir \u015fekilde uygulamak, her web sitesi y\u00f6neticisi ve geli\u015ftiricisinin sahip olmas\u0131 gereken bir beceridir.<\/p>\n\n\n\n
S\u0131k\u00e7a Sorulan Sorular.<\/h2>\n\n\n\n
SSL sertifikas\u0131 nedir ve ne i\u015fe yarar?<\/h3>\n\n\n\n
SSL sertifikas\u0131, bir web sunucusuna y\u00fcklenen dijital bir sertifikad\u0131r ve sunucu ile istemci (\u00f6rne\u011fin bir taray\u0131c\u0131) aras\u0131nda \u015fifreli bir ba\u011flant\u0131 kurmak i\u00e7in kullan\u0131l\u0131r. Temel i\u015flevleri \u00fc\u00e7 tanedir: Birincisi, iletilen verileri \u015fifreleyerek bilgilerin dinlenmesini \u00f6nlemektir; ikincisi, web sitesinin kimli\u011fini do\u011frulayarak kullan\u0131c\u0131lar\u0131n sahte web sitelerine eri\u015fmesini engellemektir; \u00fc\u00e7\u00fcnc\u00fcs\u00fc ise verilerin iletim s\u0131ras\u0131nda de\u011fi\u015ftirilmedi\u011finden emin olarak verilerin b\u00fct\u00fcnl\u00fc\u011f\u00fcn\u00fc korumakt\u0131r.<\/p>\n\n\n\n
HTTP ile HTTPS aras\u0131ndaki fark nedir?<\/h3>\n\n\n\n
HTTP, Hypertext Transfer Protocol (Hipermetin Aktar\u0131m Protokol\u00fc)\u2019d\u00fcr ve veriler a\u00e7\u0131k metin format\u0131nda aktar\u0131l\u0131r; bu da \u00fc\u00e7\u00fcnc\u00fc \u015fah\u0131slar\u0131n verileri kolayca ele ge\u00e7irmesine ve g\u00f6zetlemesine olanak tan\u0131r. HTTPS ise HTTP protokol\u00fcne SSL\/TLS \u015fifreleme katman\u0131 eklenerek geli\u015ftirilmi\u015ftir ve aktar\u0131lan veriler \u015fifrelenmi\u015f halde olur. Bu sayede HTTPS, ileti\u015fim g\u00fcvenli\u011fi, kimlik do\u011frulama ve veri b\u00fct\u00fcnl\u00fc\u011f\u00fc korumas\u0131 sa\u011flar. Ayr\u0131ca, HTTPS kullan\u0131m\u0131 arama motorlar\u0131 taraf\u0131ndan yap\u0131lan s\u0131ralamalarda da olumlu bir fakt\u00f6rd\u00fcr.<\/p>\n\n\n\n
\u00dccretsiz SSL sertifikalar\u0131 ile \u00fccretli SSL sertifikalar\u0131 aras\u0131ndaki temel farklar nelerdir?<\/h3>\n\n\n\n
\u514d\u8d39\u8bc1\u4e66\uff08\u5982Let\u2018s Encrypt\u7b7e\u53d1\u7684\uff09\u901a\u5e38\u662f\u57df\u540d\u9a8c\u8bc1\u578b\u8bc1\u4e66\uff0c\u80fd\u63d0\u4f9b\u4e0e\u4ed8\u8d39DV\u8bc1\u4e66\u76f8\u540c\u5f3a\u5ea6\u7684\u52a0\u5bc6\u529f\u80fd\uff0c\u9002\u5408\u4e2a\u4eba\u535a\u5ba2\u6216\u5c0f\u578b\u9879\u76ee\u3002\u4ed8\u8d39\u8bc1\u4e66\u7684\u4e3b\u8981\u4f18\u52bf\u5728\u4e8e\uff1a\u63d0\u4f9b\u7ec4\u7ec7\u9a8c\u8bc1\u6216\u6269\u5c55\u9a8c\u8bc1\uff0c\u5728\u6d4f\u89c8\u5668\u4e2d\u663e\u793a\u66f4\u660e\u663e\u7684\u4fe1\u4efb\u6807\u8bc6\uff08\u5982\u7eff\u8272\u5730\u5740\u680f\uff09\uff1b\u901a\u5e38\u5305\u542b\u66f4\u9ad8\u7684\u8d54\u4ed8\u4fdd\u969c\uff1b\u63d0\u4f9b\u66f4\u4e13\u4e1a\u7684\u6280\u672f\u652f\u6301\u670d\u52a1\uff1b\u4ee5\u53ca\u4e00\u4e9b\u9ad8\u7ea7\u529f\u80fd\u652f\u6301\u3002<\/p>\n\n\n\n
SSL sertifikas\u0131n\u0131n kurulmas\u0131 web sitesi h\u0131z\u0131n\u0131 etkiler mi?<\/h3>\n\n\n\n
HTTPS\u2019yi etkinle\u015ftirmek, TLS el s\u0131k\u0131\u015fma i\u015flemlerini ve \u015fifreleme\/\u015fifre \u00e7\u00f6zme i\u015flemlerini beraberinde getirir; teorik olarak bu durum bir miktar performans kayb\u0131na neden olabilir. Ancak modern donan\u0131m ve optimize edilmi\u015f protokollerin (\u00f6rne\u011fin TLS 1.3, daha h\u0131zl\u0131 el s\u0131k\u0131\u015fma s\u00fcre\u00e7leri) deste\u011fiyle bu etki neredeyse hi\u00e7 hissedilmez ve kullan\u0131c\u0131lar taraf\u0131ndan fark edilmez. Oturum yenileme mekanizmalar\u0131n\u0131 etkinle\u015ftirmek, \u015fifreleme ara\u00e7lar\u0131n\u0131 optimize etmek, CDN (Content Delivery Network) kullanmak gibi \u00f6nlemlerle performans farkl\u0131l\u0131klar\u0131 tamamen ortadan kald\u0131r\u0131labilir. Sa\u011flad\u0131\u011f\u0131 b\u00fcy\u00fck g\u00fcvenlik avantajlar\u0131na k\u0131yasla, bu performans kayb\u0131 kesinlikle kabul edilebilir d\u00fczeydedir.<\/p>\n\n\n\n
Bir web sitesinin SSL sertifikas\u0131n\u0131n g\u00fcvenli ve ge\u00e7erli olup olmad\u0131\u011f\u0131n\u0131 nas\u0131l anlar\u0131z?<\/h3>\n\n\n\n
Sertifika ayr\u0131nt\u0131lar\u0131n\u0131 g\u00f6rmek i\u00e7in taray\u0131c\u0131n\u0131z\u0131n adres \u00e7ubu\u011fundaki kilit simgesine t\u0131klayabilirsiniz. G\u00fcvenli bir sertifika \u201cBa\u011flant\u0131 g\u00fcvenlidir\u201d mesaj\u0131n\u0131 g\u00f6stermelidir; sertifika, \u015fu an ziyaret etti\u011finiz alan ad\u0131na verilmeli ve veren kurulu\u015f g\u00fcvenilir bir sertifika yetkilendirmesi kurulu\u015fu olmal\u0131d\u0131r. Ayr\u0131ca sertifikan\u0131n ge\u00e7erlilik s\u00fcresi de ge\u00e7erli zaman dilimleri i\u00e7inde olmal\u0131d\u0131r. E\u011fer kilit simgesi k\u0131rm\u0131z\u0131, sar\u0131 uyar\u0131 renklerinde veya \u00fcnlem i\u015fareti ile g\u00f6steriliyorsa, bu ba\u011flant\u0131n\u0131n g\u00fcvenli olmad\u0131\u011f\u0131 veya sertifikada bir sorun oldu\u011fu anlam\u0131na gelir.<\/p>","protected":false},"excerpt":{"rendered":"
SSL sertifikalar\u0131, HTTPS \u015fifrelemesini ger\u00e7ekle\u015ftirerek web sitesi veri aktar\u0131m\u0131n\u0131n g\u00fcvenli\u011fini sa\u011flaman\u0131n merkezidir. Bu makalede, SSL\/TLS protokol\u00fcn\u00fcn \u00e7al\u0131\u015fma prensibi, asimetrik ve simetrik \u015fifrelemenin birle\u015fim \u015fekli ayr\u0131nt\u0131l\u0131 olarak a\u00e7\u0131klan\u0131r ve DV, OV, EV gibi farkl\u0131 do\u011frulama seviyesine sahip sertifika t\u00fcrleri kar\u015f\u0131la\u015ft\u0131r\u0131l\u0131r. Son olarak, makale web sunucusuna SSL sertifikas\u0131n\u0131 da\u011f\u0131tmadan \u00f6nce uygulamadan ge\u00e7ilen temel ad\u0131mlar\u0131 a\u00e7\u0131klar ve web sitesi g\u00fcvenli\u011fi i\u00e7in kapsaml\u0131 bir rehber sunar.<\/p>","protected":false},"author":7,"featured_media":0,"template":"","meta":{"_acf_changed":false,"footnotes":""},"tags":[341,11,339,327,338],"knowledge_category":[277],"class_list":["post-12376360","knowledge_post","type-knowledge_post","status-publish","hentry","tag-https-encryption","tag-ssl-certificate","tag-tls-protocol","tag-digital-certificate","tag-cybersecurity","knowledge_category-ssl-certificate"],"acf":{"site_seo_keywords":"SSL\u8bc1\u4e66,HTTPS\u52a0\u5bc6,TLS\u63e1\u624b,\u8bc1\u4e66\u7c7b\u578b,\u90e8\u7f72\u6307\u5357,\u901a\u914d\u7b26\u8bc1\u4e66,SSL\u8bc1\u4e66\u7533\u8bf7,SSL\u8bc1\u4e66\u539f\u7406"},"_links":{"self":[{"href":"https:\/\/www.likacloud.com\/tr\/wp-json\/wp\/v2\/knowledge_posts\/12376360","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.likacloud.com\/tr\/wp-json\/wp\/v2\/knowledge_posts"}],"about":[{"href":"https:\/\/www.likacloud.com\/tr\/wp-json\/wp\/v2\/types\/knowledge_post"}],"author":[{"embeddable":true,"href":"https:\/\/www.likacloud.com\/tr\/wp-json\/wp\/v2\/users\/7"}],"version-history":[{"count":0,"href":"https:\/\/www.likacloud.com\/tr\/wp-json\/wp\/v2\/knowledge_posts\/12376360\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.likacloud.com\/tr\/wp-json\/wp\/v2\/media?parent=12376360"}],"wp:term":[{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.likacloud.com\/tr\/wp-json\/wp\/v2\/tags?post=12376360"},{"taxonomy":"knowledge_category","embeddable":true,"href":"https:\/\/www.likacloud.com\/tr\/wp-json\/wp\/v2\/knowledge_category?post=12376360"}],"curies":[{"name":"WP","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}