SSL Sertifikas\u0131 nedir? Prensipinden t\u00fcrlerine ve ba\u015fvuru-sertifika kurulum s\u00fcrecine kadar kapsaml\u0131 bir rehber<\/a>\u3002<\/p>\n\n\n\n\nGeni\u015fletilmi\u015f do\u011frulama sertifikas\u0131.<\/h3>\n\n\n\n
EV sertifikalar\u0131, en s\u0131k\u0131 do\u011frulama s\u00fcre\u00e7lerinden ge\u00e7en ve en y\u00fcksek g\u00fcven seviyesine sahip SSL sertifikalar\u0131d\u0131r. EV sertifikas\u0131 ba\u015fvurusu yapmak i\u00e7in, kurulu\u015fun yasal, fiziksel ve operasyonel varl\u0131\u011f\u0131n\u0131n do\u011frulanmas\u0131 da dahil olmak \u00fczere en kapsaml\u0131 incelemelerden ge\u00e7ilmesi gerekmektedir. Baz\u0131 yarg\u0131 b\u00f6lgelerinde, avukat mektubu veya muhasebeci belgesi gibi ek belgelerin sunulmas\u0131 da gerekebilir.<\/p>\n\n\n\n
En belirgin \u00f6zellik, EV sertifikalar\u0131n\u0131 destekleyen taray\u0131c\u0131larda, EV sertifikas\u0131 bulunan bir web sitesine eri\u015fildi\u011finde adres \u00e7ubu\u011funda sadece kilit i\u015fareti g\u00f6r\u00fcnmekle kalmaz, ayn\u0131 zamanda do\u011frulanm\u0131\u015f \u015firket ad\u0131 da ye\u015fil renkte ve vurgulanm\u0131\u015f bir \u015fekilde g\u00f6sterilir. Bu \u00f6zellik, \u00e7evrimi\u00e7i bankac\u0131l\u0131k, finans kurumlar\u0131, b\u00fcy\u00fck e-ticaret platformlar\u0131 gibi son derece hassas i\u015flemler y\u00fcr\u00fcten web siteleri i\u00e7in en y\u00fcksek seviyede g\u00f6rsel g\u00fcven i\u015fareti sa\u011flar. Son y\u0131llarda baz\u0131 taray\u0131c\u0131lar EV sertifikalar\u0131n\u0131n kullan\u0131c\u0131 aray\u00fcz\u00fcn\u00fc basitle\u015ftirmi\u015f olsa da, arkas\u0131ndaki kat\u0131 do\u011frulama s\u00fcre\u00e7leri hala bu sertifikalar\u0131 y\u00fcksek g\u00fcvenlik gerektiren senaryolar i\u00e7in alt\u0131n standart haline getirmektedir.<\/p>\n\n\n\n
SSL Sertifikas\u0131 Ba\u015fvurusu, Kurulumu ve Da\u011f\u0131t\u0131m\u0131 \u0130\u00e7in Pratik Ad\u0131mlar<\/h2>\n\n\n\n
Bir web sitesine SSL sertifikas\u0131 da\u011f\u0131tmak sistematik bir s\u00fcre\u00e7tir; anahtar \u00e7iftinin olu\u015fturulmas\u0131ndan son konfig\u00fcrasyonun tamamlanmas\u0131na kadar her ad\u0131m son derece \u00f6nemlidir.<\/p>\n\n\n\n
Sertifika ba\u015fvuru ve verme s\u00fcreci.<\/h3>\n\n\n\n
\u0130lk ad\u0131m, sunucunuzda bir \u00f6zel anahtar ve sertifika imza iste\u011fi (Certificate Signing Request \u2013 CSR) olu\u015fturmakt\u0131r. \u00d6zel anahtar\u0131n g\u00fcvenli bir \u015fekilde saklanmas\u0131 gerekmektedir ve kesinlikle if\u015fa edilmemelidir. CSR, sizin kamusal anahtar\u0131n\u0131z\u0131 ve sertifikaya eklenmesi gereken bilgileri (\u00f6rne\u011fin alan ad\u0131, kurulu\u015f bilgileri vb.) i\u00e7erir.<\/p>\n\n\n\n
\u0130kinci ad\u0131m, se\u00e7ti\u011finiz sertifika yetkilendirme kurulu\u015funa CSR (Certificate Signing Request \u2013 Sertifika \u0130mzalama \u0130ste\u011fi) dosyas\u0131n\u0131 g\u00f6ndermektir ve ba\u015fvurdu\u011funuz sertifika t\u00fcr\u00fcne g\u00f6re ilgili do\u011frulama s\u00fcrecini tamamlamakt\u0131r. DV (Domain Validation \u2013 Alan Ad\u0131 Do\u011frulama) sertifikalar\u0131 i\u00e7in bu genellikle h\u0131zl\u0131 bir s\u00fcre\u00e7tir; OV\/EV (Organizational Validation\/Evil Verification \u2013 Kurumsal Do\u011frulama\/K\u00f6t\u00fc Ama\u00e7l\u0131 Do\u011frulama) sertifikalar\u0131 i\u00e7in ise gerekli belgeleri CA (Certificate Authority \u2013 Sertifika Yetkilendirme Kurulu\u015fu) ile payla\u015f<\/p>\n\n\n\n
\u0130nceleme onayland\u0131ktan sonra, CA sertifika dosyas\u0131n\u0131 (genellikle bir `.crt` veya `.pem` dosyas\u0131) d\u00fczenler. Sertifika dosyas\u0131n\u0131 ve olas\u0131 ara sertifika zinciri dosyalar\u0131n\u0131 alacaks\u0131n\u0131z. Sertifikalar\u0131n\u0131z\u0131 mutlaka g\u00fcvenilir bir CA\u2019dan sat\u0131n al\u0131n veya \u00fccretsiz olarak talep edin; \u00e7\u00fcnk\u00fc taray\u0131c\u0131lar\u0131n \u201ck\u00f6k sertifika deposunda\u201d bu g\u00fcvenilir CA\u2019lar\u0131n k\u00f6k sertifikalar\u0131 \u00f6nceden bulunur ve bu da g\u00fcven zincirinin kurulmas\u0131n\u0131n temelidir.<\/p>\n\n\n\n
Sunucu Kurulumu ve Yap\u0131land\u0131rmas\u0131<\/h3>\n\n\n\n
Sertifika dosyas\u0131n\u0131 ald\u0131ktan sonra, bunu daha \u00f6nce olu\u015fturdu\u011funuz \u00f6zel anahtarla birlikte web sunucusuna y\u00fcklemeniz gerekmektedir. Yayg\u0131n olan Nginx ve Apache sunucular\u0131n\u0131 \u00f6rnek alal\u0131m.<\/p>\n\n\n\n
Nginx i\u00e7in, sunucu blo\u011fu yap\u0131land\u0131rma dosyas\u0131n\u0131 d\u00fczenlemeniz gerekiyor. 443 numaral\u0131 portu dinleyen yap\u0131land\u0131rma b\u00f6l\u00fcm\u00fcnde gerekli ayarlar\u0131 belirtmelisiniz.ssl_certificate<\/code>Komut, sertifika dosyan\u0131za (sertifika zincirini i\u00e7eren dosya) i\u015faret etmekte ve belirli bir ayar\u0131 belirtmektedir.ssl_certificate_key<\/code>Komut, \u00f6zel anahtar dosyan\u0131za i\u015faret etmektedir. Ayn\u0131 zamanda, g\u00fc\u00e7l\u00fc bir \u015fifreleme paketi yap\u0131land\u0131r\u0131lmal\u0131 ve SSLv2, SSLv3 gibi g\u00fcvenli olmayan SSL\/TLS s\u00fcr\u00fcmleri devre d\u0131\u015f\u0131 b\u0131rak\u0131lmal\u0131d\u0131r.<\/p>\n\n\n\nApache i\u00e7in, SSL motorunu sanal sunucu ayarlar\u0131nda etkinle\u015ftirmeniz ve bunu kullanman\u0131z gerekmektedir.SSLCertificateFile<\/code>\u548cSSLCertificateKeyFile<\/code>Komutlar, sertifikan\u0131n ve \u00f6zel anahtar\u0131n yollar\u0131n\u0131 ayr\u0131 ayr\u0131 belirtir. Ayn\u0131 \u015fekilde yap\u0131land\u0131rma yap\u0131lmas\u0131 gerekmektedir.SSLProtocol<\/code>G\u00fcvenli TLS s\u00fcr\u00fcmlerinin kullan\u0131m\u0131n\u0131 s\u0131n\u0131rlamak i\u00e7in\u2026<\/p>\n\n\n\nY\u00fckleme i\u015flemi tamamland\u0131ktan sonra, yap\u0131land\u0131rmalar\u0131n etkinle\u015fmesi i\u00e7in web sunucusunu yeniden ba\u015flat\u0131n. Daha sonra, t\u00fcm HTTP isteklerinin HTTPS\u2019ye y\u00f6nlendirilmesi gerekmektedir; bu, sunucu yap\u0131land\u0131rma kurallar\u0131 arac\u0131l\u0131\u011f\u0131yla kolayca sa\u011flanabilir ve b\u00f6ylece kullan\u0131c\u0131lar\u0131n her zaman g\u00fcvenli bir ba\u011flant\u0131 kullanmalar\u0131 garanti alt\u0131na al\u0131n\u0131r.<\/p>\n\n\n\n
Da\u011f\u0131t\u0131mdan Sonra Kontrol ve Bak\u0131m<\/h3>\n\n\n\n
Sertifikan\u0131n kurulmas\u0131n\u0131n ard\u0131ndan, \u00e7evrimi\u00e7i SSL denetim ara\u00e7lar\u0131n\u0131 (\u00f6rne\u011fin SSL Labs\u2019\u0131n SSL Test arac\u0131n\u0131) kullanarak kapsaml\u0131 bir tarama yapmak \u00e7ok \u00f6nemlidir. Bu ara\u00e7lar, yap\u0131land\u0131rman\u0131z\u0131n g\u00fcvenlik seviyesini de\u011ferlendirir, sertifikan\u0131n ge\u00e7erli olup olmad\u0131\u011f\u0131n\u0131, g\u00fcvenilir bir CA taraf\u0131ndan verilip verilmedi\u011fini, \u015fifreleme paketlerinin g\u00fcc\u00fcn\u00fc ve OCSP gibi son teknolojilerin desteklenip desteklenmedi\u011fini kontrol eder ve A\u2019dan F\u2019ye kadar puanlar verir. Hedef, A veya A+ derecesine ula\u015fmakt\u0131r.<\/p>\n\n\n\n
\u8bc1\u4e66\u7ef4\u62a4\u7684\u6838\u5fc3\u662f\u6709\u6548\u671f\u7ba1\u7406\u3002SSL\u8bc1\u4e66\u90fd\u6709\u6709\u6548\u671f\uff08\u901a\u5e38\u4e3a\u4e00\u5e74\u6216\u66f4\u77ed\uff09\uff0c\u8fc7\u671f\u4f1a\u5bfc\u81f4\u7f51\u7ad9\u65e0\u6cd5\u8bbf\u95ee\u5e76\u51fa\u73b0\u5b89\u5168\u8b66\u544a\u3002\u5fc5\u987b\u5efa\u7acb\u76d1\u63a7\u673a\u5236\uff0c\u5728\u8bc1\u4e66\u5230\u671f\u524d\u53ca\u65f6\u7eed\u8ba2\u548c\u66f4\u6362\u3002\u81ea\u52a8\u5316\u5de5\u5177\u5982Certbot\uff08\u914d\u5408Let\u2018s Encrypt\u514d\u8d39\u8bc1\u4e66\uff09\u53ef\u4ee5\u7b80\u5316\u8fd9\u4e00\u8fc7\u7a0b\u3002\u540c\u65f6\uff0c\u5b9a\u671f\u5173\u6ce8\u52a0\u5bc6\u6807\u51c6\u7684\u53d8\u5316\uff0c\u53ca\u65f6\u66f4\u65b0\u670d\u52a1\u5668\u914d\u7f6e\u4ee5\u5e94\u5bf9\u65b0\u51fa\u73b0\u7684\u6f0f\u6d1e\u3002<\/p>\n\n\n\n
\u0130leri D\u00fczey Uygulamalar ve En \u0130yi Uygulamalar<\/h2>\n\n\n\n
Temel da\u011f\u0131t\u0131m\u0131n yan\u0131 s\u0131ra, ilgili teknolojileri derinlemesine anlamak ve uygulamak, web sitesinin g\u00fcvenli\u011fini ve performans\u0131n\u0131 b\u00fcy\u00fck \u00f6l\u00e7\u00fcde art\u0131rabilir.<\/p>\n\n\n\n
HTTP\/2\u2019yi Uygulamak ve Performans\u0131 Art\u0131rmak<\/h3>\n\n\n\n
SSL sertifikas\u0131n\u0131n da\u011f\u0131t\u0131lmas\u0131, HTTP\/2 protokol\u00fcn\u00fcn etkinle\u015ftirilmesi i\u00e7in bir \u00f6nko\u015fuldur. HTTP\/2, \u00e7oklu yollama (multiplexing), ba\u015fl\u0131k s\u0131k\u0131\u015ft\u0131rma (header compression), sunucu taraf\u0131ndan i\u00e7erikin otomatik olarak g\u00f6nderilmesi (server push) gibi bir\u00e7ok \u00f6nemli iyile\u015ftirmeye sahiptir ve bu \u00f6zellikler sayesinde gecikmeleri \u00f6nemli \u00f6l\u00e7\u00fcde azaltarak sayfa y\u00fckleme h\u0131z\u0131n\u0131 art\u0131r\u0131r.<\/p>\n\n\n\n
HTTP\/2\u2019yi etkinle\u015ftirmek genellikle, bunu destekleyen sunucularda (\u00f6rne\u011fin Nginx 1.9.5+ veya Apache 2.4.17+) ilgili mod\u00fclleri aktif hale getirmekle m\u00fcmk\u00fcnd\u00fcr. HTTPS ile birle\u015ftirildi\u011finde, sadece g\u00fcvenlik elde etmekle kalmaz, ayn\u0131 zamanda performans avantajlar\u0131 da sa\u011flan\u0131r. Ayr\u0131ca, TLS oturum yenileme mekanizmalar\u0131n\u0131 (\u00f6rne\u011fin oturum tan\u0131mlay\u0131c\u0131lar\u0131 veya daha verimli oturum jetonlar\u0131) etkinle\u015ftirmek, tekrarlanan el s\u0131k\u0131\u015fma i\u015flemlerinin neden oldu\u011fu y\u00fck\u00fc azaltabilir.<\/p>\n\n\n\n
G\u00fcvenlik ayarlar\u0131n\u0131 g\u00fc\u00e7lendirin.<\/h3>\n\n\n\n
Sadece sertifikalar\u0131n da\u011f\u0131t\u0131lmas\u0131 yeterli de\u011fildir; \u00e7e\u015fitli sald\u0131r\u0131lara kar\u015f\u0131 korunmak i\u00e7in g\u00fc\u00e7lendirilmi\u015f g\u00fcvenlik ayarlar\u0131 gereklidir. \u00d6ncelikle, bilinen t\u00fcm g\u00fcvensiz protokol s\u00fcr\u00fcmleri devre d\u0131\u015f\u0131 b\u0131rak\u0131lmal\u0131 ve yaln\u0131zca TLS 1.2 ve TLS 1.3 etkinle\u015ftirilmelidir. TLS 1.3, protokol el s\u0131kma (handshake) s\u00fcrecini daha da basitle\u015ftirir ve g\u00fcvensiz \u015fifreleme algoritmalar\u0131n\u0131 kald\u0131r\u0131r, bu sayede daha y\u00fcksek g\u00fcvenlik sa\u011flar.<\/p>\n\n\n\n
\u0130kincisi, \u015fifreleme paketlerinin s\u0131ras\u0131n\u0131 dikkatlice ayarlay\u0131n; \u00f6ncelikle ileri y\u00f6nl\u00fc gizlilik sa\u011flayan anahtar de\u011fi\u015fim algoritmalar\u0131n\u0131 (\u00f6rne\u011fin ECDHE) kullan\u0131n ve bunlar\u0131 g\u00fc\u00e7l\u00fc \u015fifreleme algoritmalar\u0131 (\u00f6rne\u011fin AES-GCM) ile birle\u015ftirin. Bu, sunucunun \u00f6zel anahtar\u0131n\u0131n gelecekte ele ge\u00e7irilmesi durumunda bile ge\u00e7mi\u015fteki ileti\u015fim kay\u0131tlar\u0131n\u0131n \u015fifrelenmi\u015f kalmas\u0131n\u0131 sa\u011flar.<\/p>\n\n\n\n
HSTS\u2019yi etkinle\u015ftirmek \u00f6nemli bir ad\u0131md\u0131r. Bunu, HTTP yan\u0131t ba\u015fl\u0131klar\u0131na belirli bilgiler ekleyerek yapabilirsiniz.Strict-Transport-Security<\/code>Taray\u0131c\u0131ya, belirli bir s\u00fcre boyunca (\u00f6rne\u011fin bir y\u0131l) s\u00f6z konusu sitenin yaln\u0131zca HTTPS protokol\u00fc \u00fczerinden eri\u015filebilece\u011fi bildirilebilir. B\u00f6ylece, bir http ba\u011flant\u0131s\u0131 girilse veya bir http ba\u011flant\u0131s\u0131 taraf\u0131ndan y\u00f6nlendirilse bile, taray\u0131c\u0131 otomatik olarak https protokol\u00fcne ge\u00e7er. Bu, SSL s\u00f6kme (SSL stripping) sald\u0131r\u0131lar\u0131n\u0131 etkili bir \u015fekilde \u00f6nler. \u00d6nemli siteler i\u00e7in, alan ad\u0131n\u0131n taray\u0131c\u0131n\u0131n HSTS (HTTP Strict Transport Security) \u00f6nceden y\u00fckleme listesine eklenmesi de d\u00fc\u015f\u00fcn\u00fclebilir.<\/p>\n\n\n\n\u00d6zetle.<\/h2>\n\n\n\n
SSL sertifikalar\u0131, ba\u015flang\u0131\u00e7ta sadece se\u00e7meli bir teknoloji iken, g\u00fcn\u00fcm\u00fczde web sitelerinin g\u00fcvenli\u011fi ve g\u00fcvenilirli\u011finin temel ta\u015f\u0131 haline gelmi\u015ftir. \u015eifreleme teknolojileri sayesinde veri aktar\u0131m\u0131n\u0131n gizlili\u011fini sa\u011flar ve kimlik do\u011frulama mekanizmalar\u0131yla kullan\u0131c\u0131lar\u0131n ger\u00e7ek ve g\u00fcvenilir sunuculara eri\u015fti\u011finden emin olur. Basit DV sertifikalar\u0131ndan, titiz incelemelerden ge\u00e7en EV sertifikalar\u0131na kadar, farkl\u0131 t\u00fcrdeki SSL sertifikalar\u0131; ki\u015fisel bloglardan finans kurulu\u015flar\u0131na kadar \u00e7e\u015fitli g\u00fcvenlik ve g\u00fcven gereksinimlerini kar\u015f\u0131lar.<\/p>\n\n\n\n
SSL sertifikas\u0131n\u0131n ba\u015far\u0131l\u0131 bir \u015fekilde da\u011f\u0131t\u0131lmas\u0131, sadece do\u011fru ba\u015fvuru, kurulum ve yap\u0131land\u0131rmay\u0131 i\u00e7ermekle kalmaz; ayn\u0131 zamanda sonraki s\u00fcre\u00e7lerdeki s\u00fcrekli bak\u0131m\u0131, g\u00fcvenli\u011fin g\u00fc\u00e7lendirilmesini ve performans\u0131n optimize edilmesini de kapsar. HTTPS\u2019yi zorunlu k\u0131lmak, HSTS\u2019yi etkinle\u015ftirmek, g\u00fc\u00e7l\u00fc \u015fifreleme protokollerini yap\u0131land\u0131rmak ve HTTP\/2 gibi en iyi uygulamalar\u0131 benimsemek sayesinde web sitesi operat\u00f6rleri, g\u00fcvenli bir ortam sa\u011flarken ayn\u0131 zamanda daha iyi bir eri\u015fim deneyimi de sunabilirler. G\u00fcn\u00fcm\u00fczde giderek karma\u015f\u0131kla\u015fan siber g\u00fcvenlik tehditleri kar\u015f\u0131s\u0131nda, SSL\/TLS teknolojilerini do\u011fru bir \u015fekilde anlamak ve uygulamak, her web sitesi sorumlusunun ve geli\u015ftiricisinin sahip olmas\u0131 gereken temel becerilerdendir.<\/p>\n\n\n\n
S\u0131k\u00e7a Sorulan Sorular.<\/h2>\n\n\n\n\u00dccretsiz SSL sertifikalar\u0131n\u0131n \u00fccretli olanlardan ne fark\u0131 var?<\/h3>\n\n\n\n
\u514d\u8d39\u8bc1\u4e66\uff08\u5982Let\u2018s Encrypt\u9881\u53d1\u7684\uff09\u901a\u5e38\u662f\u57df\u540d\u9a8c\u8bc1\u578b\u8bc1\u4e66\uff0c\u63d0\u4f9b\u4e86\u4e0e\u4ed8\u8d39DV\u8bc1\u4e66\u76f8\u540c\u7684\u52a0\u5bc6\u5f3a\u5ea6\u3002\u4e3b\u8981\u533a\u522b\u5728\u4e8e\u670d\u52a1\u652f\u6301\u3001\u4fdd\u9669\u62c5\u4fdd\u548c\u8bc1\u4e66\u7c7b\u578b\u9009\u62e9\u3002\u4ed8\u8d39\u8bc1\u4e66\u63d0\u4f9b\u4eba\u5de5\u5ba2\u670d\u652f\u6301\u3001\u56e0\u8bc1\u4e66\u95ee\u9898\u5bfc\u81f4\u6570\u636e\u6cc4\u9732\u7684\u8d54\u507f\u4fdd\u9669\uff0c\u5e76\u4e14\u53ef\u4ee5\u7533\u8bf7OV\u6216EV\u7b49\u9700\u8981\u8eab\u4efd\u9a8c\u8bc1\u7684\u8bc1\u4e66\u7c7b\u578b\u3002\u514d\u8d39\u8bc1\u4e66\u975e\u5e38\u9002\u5408\u4e2a\u4eba\u9879\u76ee\u6216\u9884\u7b97\u6709\u9650\u7684\u573a\u666f\uff0c\u800c\u4f01\u4e1a\u7ea7\u5e94\u7528\u901a\u5e38\u9009\u62e9\u4ed8\u8d39\u8bc1\u4e66\u4ee5\u83b7\u5f97\u66f4\u5168\u9762\u7684\u670d\u52a1\u548c\u4fe1\u4efb\u80cc\u4e66\u3002<\/p>\n\n\n\n
SSL sertifikas\u0131 y\u00fcklendikten sonra web sitesine eri\u015fim yava\u015flad\u0131ysa ne yapmal\u0131y\u0131m?<\/h3>\n\n\n\n
SSL\/TLS protokol\u00fcn\u00fcn kullan\u0131lmas\u0131 ger\u00e7ekten ek hesaplama y\u00fckleri getirir; bu y\u00fckler \u00f6zellikle ba\u011flant\u0131 kurulurken ger\u00e7ekle\u015fen \u201cel s\u0131kma\u201d (handshake) i\u015flemi s\u0131ras\u0131nda ortaya \u00e7\u0131kar. Ancak optimizasyon y\u00f6ntemleriyle bu etkiler en aza indirilebilir hatta genel performans art\u0131r\u0131labilir. TLS oturumlar\u0131n\u0131n yeniden ba\u015flat\u0131lmas\u0131n\u0131 (session resumption) etkinle\u015ftirmek, her ba\u011flant\u0131da tam bir el s\u0131kma i\u015fleminin yap\u0131lmas\u0131n\u0131 \u00f6nler. HTTP\/2\u2019yi kullanmak, tek bir TLS ba\u011flant\u0131s\u0131n\u0131 daha verimli kullanarak gecikmeleri azalt\u0131r. RSA sertifikalar\u0131n\u0131n yerine daha verimli ECC sertifikalar\u0131 kullanmak, sertifika boyutlar\u0131n\u0131 k\u00fc\u00e7\u00fclt\u00fcr ve el s\u0131kma i\u015flemlerini h\u0131zland\u0131r\u0131r. Ayr\u0131ca, sunucunun \u015fifreleme\/\u015fifre \u00e7\u00f6zme i\u015flemlerini ger\u00e7ekle\u015ftirebilecek yeterli hesaplama kaynaklar\u0131na sahip oldu\u011fundan emin olun. \u00c7o\u011fu durumda, optimize edilmi\u015f HTTPS sitelerinin performans\u0131 HTTP ile kar\u015f\u0131la\u015ft\u0131r\u0131labilir hatta HTTP\/2 sayesinde daha h\u0131zl\u0131 olabilir.<\/p>\n\n\n\n
\u00c7oklu alan ad\u0131 veya joker karakter i\u00e7eren sertifikalar\u0131 nas\u0131l se\u00e7meliyim?<\/h3>\n\n\n\n
E\u011fer i\u015fletmeniz birden fazla tamamen farkl\u0131 alan ad\u0131n\u0131 (\u00f6rne\u011fin example.com, example.net, shop.example.org) korumaya ihtiya\u00e7 duyuyorsa, birden fazla alan ad\u0131n\u0131 destekleyen bir sertifika se\u00e7melisiniz; bu t\u00fcr sertifikalar, tek bir sertifika i\u00e7inde birden fazla alan ad\u0131n\u0131 eklemenize olanak tan\u0131r. Bir ana alan ad\u0131n\u0131 ve t\u00fcm alt alan adlar\u0131n\u0131 (\u00f6rne\u011fin *.example.com; yani www.example.com, mail.example.com, blog.example.com vb.) korumak istiyorsan\u0131z, joker karakter i\u00e7eren sertifikalar en ekonomik ve uygun se\u00e7enektir. L\u00fctfen unutmay\u0131n ki joker karakter i\u00e7eren sertifikalar genellikle yaln\u0131zca birinci seviye alt alan adlar\u0131n\u0131 kapsar (*.example.com, a.b.example.com gibi alt alan adlar\u0131n\u0131 kapsamaz) ve do\u011frulama ile y\u00f6netim s\u00fcre\u00e7leri daha dikkatli bir \u015fekilde y\u00fcr\u00fct\u00fclmelidir.<\/p>\n\n\n\n
Bir web sitesinin SSL sertifikas\u0131n\u0131n do\u011fru \u015fekilde da\u011f\u0131t\u0131l\u0131p da\u011f\u0131t\u0131lmad\u0131\u011f\u0131n\u0131 nas\u0131l anlayabiliriz?<\/h3>\n\n\n\n
Birka\u00e7 basit ad\u0131mda bunu kontrol edebilirsiniz. \u00d6ncelikle, taray\u0131c\u0131n\u0131z\u0131 kullanarak web sitesine eri\u015fin; adres \u00e7ubu\u011funun \u201chttps:\/\/\u201d ile ba\u015flad\u0131\u011f\u0131ndan ve kilit simgesinin g\u00f6r\u00fcnd\u00fc\u011f\u00fcnden emin olun. Kilit simgesine t\u0131klayarak sertifika ayr\u0131nt\u0131lar\u0131n\u0131 inceleyin ve sertifikan\u0131n ge\u00e7erlilik s\u00fcresinin dolmad\u0131\u011f\u0131ndan, yetkili bir kurulu\u015f taraf\u0131ndan verildi\u011finden ve imzas\u0131n\u0131n sizin alan ad\u0131n\u0131za ait oldu\u011fundan emin olun. Daha sonra, SSL Labs SSL Test gibi profesyonel \u00e7evrimi\u00e7i ara\u00e7lar\u0131 kullanarak alan ad\u0131n\u0131z\u0131 derinlemesine taray\u0131n. Bu ara\u00e7lar, g\u00fcvenli olmayan protokoller, zay\u0131f \u015fifreleme algoritmalar\u0131, eksik sertifika zincirleri gibi herhangi bir yap\u0131sal sorunu belirten ayr\u0131nt\u0131l\u0131 raporlar ve puanlar sunar; bu da kurulumun do\u011fru yap\u0131ld\u0131\u011f\u0131n\u0131 do\u011frulaman\u0131n g\u00fcvenilir bir yoludur.<\/p>","protected":false},"excerpt":{"rendered":"
SSL sertifikalar\u0131, web sitelerindeki veri aktar\u0131m g\u00fcvenli\u011fini sa\u011flamak ve kullan\u0131c\u0131lar\u0131n g\u00fcvenini kazanmak i\u00e7in kritik \u00f6neme sahiptir. Bu makalede, SSL\/TLS protokol\u00fcn\u00fcn asimetrik \u015fifreleme ve el s\u0131kma (handshake) mekanizmalar\u0131 ayr\u0131nt\u0131l\u0131 bir \u015fekilde a\u00e7\u0131klanmaktad\u0131r. Ayr\u0131ca, alan ad\u0131 do\u011frulama (Domain Validation \u2013 DV), kurulu\u015f do\u011frulama (Organization Validation \u2013 OV) ve geni\u015fletilmi\u015f do\u011frulama (Extended Validation \u2013 EV) olmak \u00fczere \u00fc\u00e7 farkl\u0131 sertifika t\u00fcr\u00fcn\u00fcn \u00f6zellikleri ve kullan\u0131m senaryolar\u0131 sistemli bir \u015fekilde anlat\u0131lmaktad\u0131r. Ayr\u0131ca, sertifika ba\u015fvurusundan da\u011f\u0131t\u0131m\u0131na kadar olan ad\u0131mlar \u00f6zetlenerek, web sitelerinin HTTPS \u015fifrelemesini uygulamas\u0131 i\u00e7in kapsaml\u0131 bir rehber sunulmaktad\u0131r.<\/p>","protected":false},"author":7,"featured_media":0,"template":"","meta":{"_acf_changed":false,"footnotes":""},"tags":[11,336,319],"knowledge_category":[277],"class_list":["post-12377230","knowledge_post","type-knowledge_post","status-publish","hentry","tag-ssl-certificate","tag-encryption-technology","tag-website-security","knowledge_category-ssl-certificate"],"acf":{"site_seo_keywords":"SSL\u8bc1\u4e66,\u7f51\u7ad9\u5b89\u5168,HTTPS,TLS\u63e1\u624b,\u52a0\u5bc6\u6280\u672f,\u57df\u540d\u9a8c\u8bc1\u8bc1\u4e66,OV SSL\u8bc1\u4e66,EV\u8bc1\u4e66\u7533\u8bf7"},"_links":{"self":[{"href":"https:\/\/www.likacloud.com\/tr\/wp-json\/wp\/v2\/knowledge_posts\/12377230","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.likacloud.com\/tr\/wp-json\/wp\/v2\/knowledge_posts"}],"about":[{"href":"https:\/\/www.likacloud.com\/tr\/wp-json\/wp\/v2\/types\/knowledge_post"}],"author":[{"embeddable":true,"href":"https:\/\/www.likacloud.com\/tr\/wp-json\/wp\/v2\/users\/7"}],"version-history":[{"count":0,"href":"https:\/\/www.likacloud.com\/tr\/wp-json\/wp\/v2\/knowledge_posts\/12377230\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.likacloud.com\/tr\/wp-json\/wp\/v2\/media?parent=12377230"}],"wp:term":[{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.likacloud.com\/tr\/wp-json\/wp\/v2\/tags?post=12377230"},{"taxonomy":"knowledge_category","embeddable":true,"href":"https:\/\/www.likacloud.com\/tr\/wp-json\/wp\/v2\/knowledge_category?post=12377230"}],"curies":[{"name":"WP","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
![\"Bluehost](\"https:\/\/www.likacloud.com\/wp-content\/uploads\/2025\/12\/20251231095917.webp\" "\\"\\"")
\r\n\t\t\t\t\t\t\t\t\t\r\n\t\t\t<\/div>\r\n\t\t\t\r\n\t\t\t\r\n\t\t\t![\"hosting.com](\"https:\/\/www.likacloud.com\/wp-content\/uploads\/2025\/12\/20251227070008.webp\" "\\"\\"")
\r\n\t\t\t\t\t\t\t\t\t\r\n\t\t\t<\/div>\r\n\t\t\t\r\n\t\t\t\r\n\t\t\t![\"SSL](\"https:\/\/www.likacloud.com\/wp-content\/uploads\/2025\/12\/20251227020448.webp\" "\\"\\"")
\n \n ![\"SSL](\"https:\/\/www.likacloud.com\/wp-content\/uploads\/2025\/12\/20251229052118.webp\" "\\"\\"")
\n <\/a>\n \n \n UltaHost'u ziyaret edin. <\/a>\n <\/div>\n <\/div>\n\n \n\n\n\n\n\n\n