{"id":12378869,"date":"2026-03-20T04:19:56","date_gmt":"2026-03-19T20:19:56","guid":{"rendered":"https:\/\/www.likacloud.com\/knowledge\/%e5%9c%a8%e5%bd%93%e4%bb%8a%e7%9a%84%e4%ba%92%e8%81%94%e7%bd%91%e7%8e%af%e5%a2%83%e4%b8%ad%ef%bc%8c%e7%bd%91%e7%ab%99%e5%ae%89%e5%85%a8%e4%b8%8d%e4%bb%85%e6%98%af%e6%8a%80%e6%9c%af%e9%9c%80%e6%b1%82\/"},"modified":"2026-03-20T04:58:41","modified_gmt":"2026-03-19T20:58:41","slug":"website-security-ssl-certificate-https-encryption-user-trust","status":"publish","type":"knowledge_post","link":"https:\/\/www.likacloud.com\/tr\/knowledge\/ssl-certificate\/website-security-ssl-certificate-https-encryption-user-trust\/","title":{"rendered":"G\u00fcn\u00fcm\u00fczdeki internet ortam\u0131nda, web sitesi g\u00fcvenli\u011fi sadece bir teknik gereklilik de\u011fil, ayn\u0131 zamanda kullan\u0131c\u0131 g\u00fcvenini sa\u011flamak i\u00e7in de \u00f6nemlidir."},"content":{"rendered":"

G\u00fcn\u00fcm\u00fcz internet ortam\u0131nda, web sitesi g\u00fcvenli\u011fi sadece bir teknik gereklilik de\u011fil, ayn\u0131 zamanda kullan\u0131c\u0131 g\u00fcveninin temelini olu\u015fturan bir fakt\u00f6rd\u00fcr. HTTPS \u015fifrelemesini sa\u011flayan ana ara\u00e7 olan SSL sertifikalar\u0131, \u201cileri seviye bir se\u00e7enek\u201dten web sitesi operasyonlar\u0131n\u0131n \u201cstandart bir par\u00e7as\u0131\u201dna d\u00f6n\u00fc\u015fm\u00fc\u015ft\u00fcr. Kullan\u0131c\u0131lar\u0131n taray\u0131c\u0131lar\u0131 ile web sitesi sunucular\u0131 aras\u0131nda \u015fifreli bir kanal olu\u015fturarak, giri\u015f bilgileri, kredi kart\u0131 verileri, ki\u015fisel bilgiler gibi t\u00fcm iletilen verilerin \u00fc\u00e7\u00fcnc\u00fc \u015fah\u0131slar taraf\u0131ndan \u00e7al\u0131nmas\u0131n\u0131 veya de\u011fi\u015ftirilmesini engeller. Bilgi al\u0131\u015fveri\u015fi i\u00e7eren herhangi bir web sitesi i\u00e7in SSL sertifikas\u0131 kurmak, at\u0131lmas\u0131 gereken ilk ad\u0131md\u0131r.<\/p>\n\n\n\n

SSL sertifikas\u0131n\u0131n temel \u00e7al\u0131\u015fma prensibi<\/h2>\n\n\n\n

SSL sertifikas\u0131n\u0131n temel i\u015flevi, HTTPS protokol\u00fcn\u00fc etkinle\u015ftirmektir. Bunun arkas\u0131ndaki teknoloji, asimetrik \u015fifreleme ve simetrik \u015fifrelemenin birle\u015fimine dayan\u0131r; ayr\u0131ca sertifika veren kurulu\u015flar\u0131n g\u00fcven zinciri mekanizmas\u0131 da bu s\u00fcre\u00e7te \u00f6nemli bir rol oynar.<\/p>\n\n\n\n

Asimetrik \u015eifreleme ve El S\u0131kma (Handshake) S\u00fcreci<\/h3>\n\n\n\n

Kullan\u0131c\u0131lar HTTPS \u00f6zelli\u011fi aktif olan bir web sitesini ziyaret etti\u011finde, taray\u0131c\u0131 \u00f6ncelikle sunucu ile bir \u201cSSL el s\u0131k\u0131\u015fmas\u0131\u201d (SSL handshake) ba\u015flat\u0131r. Bu s\u00fcre\u00e7te, sunucu SSL sertifikas\u0131n\u0131 (kamu anahtar\u0131 i\u00e7eren) taray\u0131c\u0131ya g\u00f6nderir. Taray\u0131c\u0131, sertifikadaki kamu anahtar\u0131 kullanarak rastgele olu\u015fturulmu\u015f bir \u201coturum anahtar\u0131\u201dn\u0131 \u015fifreler ve bu anahtar\u0131 sunucuya geri g\u00f6nderir. Sunucu ise kendisinde bulunan, kesinlikle gizli olan \u00f6zel anahtar\u0131 kullanarak bu oturum anahtar\u0131n\u0131 \u00e7\u00f6zer ve b\u00f6ylece taraflar aras\u0131nda yaln\u0131zca kendilerinin bildi\u011fi bir anahtar g\u00fcvenli bir \u015fekilde payla\u015f\u0131lm\u0131\u015f olur.<\/p>\n

Tavsiye edilen okuma SSL Sertifikas\u0131 Ayr\u0131nt\u0131l\u0131 \u0130ncelemesi: Fonksiyonlar\u0131, T\u00fcrleri ve Kurulum K\u0131lavuzu \u2013 Web Sitelerinde Veri \u0130letiminin G\u00fcvenli\u011fini Sa\u011flama<\/a>\u3002<\/p>\n\n\n\n\n

Simetrik \u015eifreleme ve Veri \u0130letimi<\/h3>\n\n\n\n

Elin s\u0131k\u0131\u015fma i\u015flemi tamamland\u0131\u011f\u0131nda, taraflar \u00f6nceki ad\u0131mda belirlenen \u201coturum anahtar\u0131\u201dn\u0131 kullanarak simetrik \u015fifreleme ile ileti\u015fim kuracaklard\u0131r. Simetrik \u015fifreleme algoritmalar\u0131n\u0131n \u015fifreleme ve \u015fifre \u00e7\u00f6zme h\u0131zlar\u0131 y\u00fcksektir ve b\u00fcy\u00fck miktarda verinin ger\u00e7ek zamanl\u0131 olarak \u015fifrelenmesi i\u00e7in uygundur. T\u00fcm web sayfas\u0131 i\u00e7eri\u011fi ve formlara girilen veriler bu anahtar kullan\u0131larak \u015fifrelenir; b\u00f6ylece genel bir a\u011f \u00fczerinde g\u00fcvenli ve \u00f6zel bir ileti\u015fim kanal\u0131 olu\u015fturulur.<\/p>\n\n

\r\n\t\r\n\t\t\r\n\t\r\n\t
\r\n\t\t
\r\n\t\t\t\r\n\t\t\t
\r\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"Bluehost\r\n\t\t\t\t\t\t\t\t\t\r\n\t\t\t<\/div>\r\n\t\t\t\r\n\t\t\t\r\n\t\t\t
\r\n\t\t\t\t
\r\n\t\t\t\t\tBluehost SSL sertifikas\u0131.<\/strong>\r\n\t\t\t\t\t\t\t\t\t<\/div>\r\n\t\t\t<\/div>\r\n\t\t<\/div>\r\n\t\t\t\tBlueHost SSL sertifikalar\u0131, 1-2 y\u0131ll\u0131k uzatma s\u00fcresi se\u00e7enekleri sunar, RSA veya ECC algoritmalar\u0131n\u0131 destekler, 4096 bit'e kadar anahtar uzunlu\u011fu sa\u011flar ve 1,75 milyon ABD dolar\u0131na kadar garanti tutar\u0131 sunar.<\/span>\r\n\t\t\t\t
\r\n\t\t\t\r\n\t\t\t\t\t\t\r\n\t\t\t \r\n\t\t\t
\r\n\t\t\t\t\t\t\t\t
Ayl\u0131k $7,49 USD'den ba\u015flayan fiyatlarla.<\/div>\r\n\t\t\t\t\t\t\t\t\t\t\t\tBluehost SSL sertifikas\u0131na eri\u015fin \u2192<\/a>\r\n\t\t\t\t\t\t\t<\/div> \r\n\t\t<\/div>\r\n\t<\/div>\r\n\t\t\r\n\t\r\n\t
\r\n\t\t
\r\n\t\t\t\r\n\t\t\t
\r\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"hosting.com\r\n\t\t\t\t\t\t\t\t\t\r\n\t\t\t<\/div>\r\n\t\t\t\r\n\t\t\t\r\n\t\t\t
\r\n\t\t\t\t
\r\n\t\t\t\t\thosting.com SSL sertifikas\u0131.<\/strong>\r\n\t\t\t\t\t\t\t\t\t<\/div>\r\n\t\t\t<\/div>\r\n\t\t<\/div>\r\n\t\t\t\tUygun fiyatl\u0131 DV, OV, EV SSL sertifikalar\u0131, en y\u00fcksek 256 bit \u015fifreleme, 5 milyon ila 100 milyon ABD dolar\u0131 tutar\u0131nda garanti ve 7\/24 destek.<\/span>\r\n\t\t\t\t
\r\n\t\t\t\r\n\t\t\t\t\t\t\r\n\t\t\t \r\n\t\t\t
\r\n\t\t\t\t\t\t\t\t
Ayl\u0131k $2.5 USD'den ba\u015flayan fiyatlarla.<\/div>\r\n\t\t\t\t\t\t\t\t\t\t\t\tHosting.com SSL sertifikas\u0131na eri\u015fin. \u2192<\/a>\r\n\t\t\t\t\t\t\t<\/div> \r\n\t\t<\/div>\r\n\t<\/div>\r\n\t\t\r\n<\/div>\r\n\r\n\r\n\n\n\n\n\n\n\n

Sertifika Veren Kurulu\u015flar ve G\u00fcven Zinciri (Certificate Issuing Authorities and Trust Chains)<\/h3>\n\n\n\n

Taray\u0131c\u0131lar, sunuculardan gelen sertifikalara neden g\u00fcvenir? Bu, \u201ckamu anahtar\u0131 altyap\u0131s\u0131\u201d (public key infrastructure \u2013 PKI) ad\u0131 verilen bir g\u00fcven sisteminin varl\u0131\u011f\u0131na dayan\u0131r. Sertifikalar, d\u00fcnya \u00e7ap\u0131ndaki i\u015fletim sistemleri ve taray\u0131c\u0131lar taraf\u0131ndan g\u00fcvenilen sertifika yetkilendirme kurulu\u015flar\u0131 (certificate authorities \u2013 CAs) taraf\u0131ndan verilir. CA kurulu\u015flar\u0131, sertifika talep edenin bir alan ad\u0131 \u00fczerindeki kontrol haklar\u0131n\u0131 ve hatta kurulu\u015fun ger\u00e7ekli\u011fini do\u011frular. Taray\u0131c\u0131larda, bu g\u00fcvenilir CA kurulu\u015flar\u0131n\u0131n k\u00f6k sertifikalar\u0131 bulunur; bu k\u00f6k sertifikalar sayesinde bir web sitesinin sertifikas\u0131n\u0131n g\u00fcvenilir bir CA taraf\u0131ndan verilip verilmedi\u011fi, ge\u00e7erlilik s\u00fcresi i\u00e7inde olup olmad\u0131\u011f\u0131 ve ziyaret edilen alan ad\u0131yla e\u015fle\u015fip e\u015fle\u015fmedi\u011fi do\u011frulanabilir ve b\u00f6ylece g\u00fcven olu\u015fturulur.<\/p>\n\n\n\n

SSL sertifikalar\u0131n\u0131n ana tipleri ve se\u00e7imi.<\/h2>\n\n\n\n

Do\u011frulama seviyesine ve kapsam\u0131na g\u00f6re, SSL sertifikalar\u0131 esas olarak alan ad\u0131 do\u011frulamal\u0131, kurulu\u015f do\u011frulamal\u0131, geni\u015fletilmi\u015f do\u011frulamal\u0131 ve \u00e7ok alan adl\u0131\/Wildcard sertifikalar olarak s\u0131n\u0131fland\u0131r\u0131l\u0131r; b\u00f6ylece farkl\u0131 senaryolardaki g\u00fcvenlik ihtiya\u00e7lar\u0131 kar\u015f\u0131lan\u0131r.<\/p>\n\n\n\n

Domain do\u011frulama sertifikas\u0131.<\/h3>\n\n\n\n

DV sertifikas\u0131, en temel SSL sertifikas\u0131d\u0131r. Sertifika yetkilendirme kurulu\u015fu (CA), ba\u015fvuru sahibinin alan ad\u0131 \u00fczerindeki kontrol haklar\u0131n\u0131 yaln\u0131zca e-posta veya DNS \u00e7\u00f6z\u00fcmleme kay\u0131tlar\u0131 arac\u0131l\u0131\u011f\u0131yla do\u011frular. Verilme h\u0131z\u0131 h\u0131zl\u0131d\u0131r ve maliyeti d\u00fc\u015f\u00fckt\u00fcr; bu nedenle ki\u015fisel web siteleri, bloglar veya test ortamlar\u0131 i\u00e7in uygundur. Tam \u015fifreleme \u00f6zellikleri sunar; ancak taray\u0131c\u0131 adres \u00e7ubu\u011funda yaln\u0131zca kilit simgesi g\u00f6r\u00fcn\u00fcr ve \u015firket ad\u0131 g\u00f6sterilmez.<\/p>\n\n\n\n

Organizasyon do\u011frulamal\u0131 ve geni\u015fletilmi\u015f do\u011frulamal\u0131 sertifikalar<\/h3>\n\n\n\n

OV sertifikalar\u0131, DV (Domain Validation) do\u011frulamas\u0131n\u0131n \u00fczerine, ba\u015fvuru sahibi kurulu\u015flar\u0131n (\u00f6rne\u011fin \u015firketler, h\u00fck\u00fcmet kurumlar\u0131) yasal ger\u00e7ekli\u011fine dair daha s\u0131k\u0131 incelemeler yapar; bu incelemeler aras\u0131nda ticari sicil kay\u0131tlar\u0131n\u0131n kontrol\u00fc de yer al\u0131r. EV sertifikalar\u0131 ise en kat\u0131 do\u011frulama t\u00fcr\u00fcd\u00fcr ve kurulu\u015f do\u011frulamas\u0131n\u0131n yan\u0131 s\u0131ra daha ayr\u0131nt\u0131l\u0131 arka plan ara\u015ft\u0131rmalar\u0131 da gerektirir. EV sertifikas\u0131 kullan\u0131ld\u0131\u011f\u0131nda, pop\u00fcler taray\u0131c\u0131larda adres \u00e7ubu\u011funda sadece kilit i\u015fareti de\u011fil, ayn\u0131 zamanda \u015firketin ad\u0131 da ye\u015fil renkte g\u00f6sterilir. Bu durum, \u00f6zellikle e-ticaret, finans gibi y\u00fcksek g\u00fcven gerektiren web siteleri i\u00e7in son derece \u00f6nemlidir.<\/p>\n

Tavsiye edilen okuma SSL Sertifikas\u0131: Web sitesinin g\u00fcvenli\u011fini sa\u011flaman\u0131n ve arama motoru s\u0131ralamalar\u0131n\u0131 y\u00fckseltmenin kritik bir ad\u0131m\u0131d\u0131r.<\/a>\u3002<\/p>\n\n\n\n\n

Jenerik (wildcard) sertifikalar ve \u00e7ok alan adl\u0131 (multi-domain) sertifikalar<\/h3>\n\n\n\n

Joker karakterli sertifikalar, bir ana alan ad\u0131n\u0131 ve t\u00fcm ayn\u0131 seviyedeki alt alan adlar\u0131n\u0131 korumak i\u00e7in bir y\u0131ld\u0131z (*) joker karakteri kullan\u0131r. *.example.com<\/code> Korunabilir. blog.example.com<\/code>\u3001shop.example.com<\/code>Ve benzeri \u00f6zellikler sayesinde y\u00f6netimi \u00e7ok kolayd\u0131r. \u00c7oklu alan ad\u0131 sertifikalar\u0131, tek bir sertifika i\u00e7inde birbirinden tamamen farkl\u0131 birden fazla alan ad\u0131n\u0131 koruman\u0131za olanak tan\u0131r; \u00f6rne\u011fin\u2026 example.com<\/code>\u3001example.net<\/code> \u548c anothersite.org<\/code>Bu iki t\u00fcr, karma\u015f\u0131k alan ad\u0131 yap\u0131s\u0131na sahip \u015firketler i\u00e7in esnek ve ekonomik \u00e7\u00f6z\u00fcmler sunmaktad\u0131r.<\/p>\n\n\n\n

SSL Sertifikas\u0131 Ba\u015fvurusu ve Da\u011f\u0131t\u0131m\u0131n\u0131n Tam S\u00fcreci<\/h2>\n\n\n\n

SSL sertifikas\u0131n\u0131 edinmek ve y\u00fcklemek, bir anahtar \u00e7ifti olu\u015fturulmas\u0131ndan sunucuda nihai yap\u0131land\u0131rman\u0131n tamamlanmas\u0131na kadar s\u00fcren sistematik bir s\u00fcre\u00e7tir.<\/p>\n\n\n\n

\u0130lk ad\u0131m: Sertifika imza iste\u011fi olu\u015fturun.<\/h3>\n\n\n\n

\u00d6ncelikle, sunucunuzda bir \u00e7ift asimetrik \u015fifreleme anahtar\u0131 (\u00f6zel anahtar ve genel anahtar) olu\u015fturun. \u00d6zel anahtar\u0131n sunucuda g\u00fcvenli bir \u015fekilde saklanmas\u0131 ve kesinlikle d\u0131\u015far\u0131 s\u0131zd\u0131r\u0131lmamas\u0131 gerekmektedir. Daha sonra, \u00f6zel anahtar kullan\u0131larak bir sertifika imza iste\u011fi (Certificate Signing Request \u2013 CSR) dosyas\u0131 olu\u015fturun. CSR dosyas\u0131, alan ad\u0131n\u0131z\u0131, kurulu\u015f bilgilerinizi ve genel anahtar\u0131n\u0131z\u0131 i\u00e7erir. Bu CSR dosyas\u0131, bir CA (Certificate Authority \u2013 Sertifika Yetkilisi) kurulu\u015funa sundu\u011funuz bir \u201csertifika ba\u015fvuru formu\u201d gibidir.<\/p>\n\n\n

\n\n
\n UltaHost SSL sertifikas\u0131.<\/strong>\n
DV, EV, OV sertifikalar\u0131, en fazla $1, 750.000 ABD dolar\u0131 teminat tutar\u0131n\u0131 destekler, s\u0131n\u0131rs\u0131z alt alan ad\u0131n\u0131 destekler, iOS ve Android uygulamalar\u0131n\u0131 destekler ve 20%'den ba\u015flayan ayl\u0131k $15,95 ABD dolar\u0131 fiyatla 30 g\u00fcnl\u00fck para iade garantisi sunar.<\/div>\n <\/div>\n\n
\n \n \n \"SSL\n \n \n <\/a>\n \n \n UltaHost'u ziyaret edin. <\/a>\n <\/div>\n <\/div>\n\n \n\n\n\n\n\n\n

\u0130kinci Ad\u0131m: Ba\u015fvuruyu ve Do\u011frulamay\u0131 CA\u2019ya G\u00f6nderin<\/h3>\n\n\n\n

Olu\u015fturulan CSR (Certificate Signing Request \u2013 Sertifika \u0130mzalama \u0130ste\u011fi) belgesini se\u00e7ti\u011finiz sertifika yetkilendirme kurulu\u015funa (CA \u2013 Certificate Authority) g\u00f6nderin. Sat\u0131n ald\u0131\u011f\u0131n\u0131z sertifika t\u00fcr\u00fcne g\u00f6re, CA ilgili do\u011frulama s\u00fcrecini ba\u015flatacakt\u0131r. DV (Domain Validation) sertifikalar\u0131 i\u00e7in, belirtilen ad\u0131mlara g\u00f6re alan ad\u0131n\u0131n DNS kay\u0131tlar\u0131na \u00f6zel bir giri\u015f yapman\u0131z gerekebilir; veya alan ad\u0131 y\u00f6neticisinin e-posta adresine g\u00f6nderilen do\u011frulama e-postas\u0131n\u0131 al\u0131p onaylaman\u0131z gerekebilir. OV\/EV (Organizational Validation\/Evil Verification) sertifikalar\u0131 i\u00e7in ise i\u015fletme lisans\u0131 gibi yasal belgelerin sunulmas\u0131 ve manuel inceleme yap\u0131lmas\u0131 gerekmektedir.<\/p>\n\n\n\n

\u00dc\u00e7\u00fcnc\u00fc Ad\u0131m: Sertifikay\u0131 indirin ve y\u00fckleyin<\/h3>\n\n\n\n

Do\u011frulama i\u015flemi tamamland\u0131ktan sonra, CA (Certificate Authority \u2013 Sertifika Otoritesi) taraf\u0131ndan verilen SSL sertifika dosyas\u0131n\u0131 size g\u00f6nderecektir. Genellikle, alan ad\u0131n\u0131zla ilgili bilgiler i\u00e7eren bir sertifika dosyas\u0131 al\u0131rs\u0131n\u0131z. yourdomain.crt<\/code>Bir orta sertifika zinciri dosyas\u0131 ve muhtemelen mevcut olan di\u011fer dosyalar\u0131 da, ilk ad\u0131mda olu\u015fturdu\u011funuz \u00f6zel anahtarla birlikte web sunucu yaz\u0131l\u0131m\u0131n\u0131za yap\u0131land\u0131rman\u0131z gerekiyor.<\/p>\n\n\n\n

D\u00f6rd\u00fcnc\u00fc Ad\u0131m: Sunucu Yap\u0131land\u0131rmas\u0131 ve Zorunlu HTTPS Kullan\u0131m\u0131<\/h3>\n\n\n\n

Nginx, Apache veya IIS gibi sunucu yaz\u0131l\u0131mlar\u0131nda, sertifika dosyas\u0131n\u0131n ve \u00f6zel anahtar\u0131n yolunu belirtin ve 443 numaral\u0131 portu dinleyin. Yap\u0131land\u0131rma tamamland\u0131ktan sonra, HTTPS\u2019\u0131n etkinle\u015fmesi i\u00e7in sunucu hizmetini yeniden ba\u015flat\u0131n. Son ve \u00e7ok \u00f6nemli ad\u0131m ise HTTP\u2019den HTTPS\u2019e 301 y\u00f6nlendirmesini ayarlamakt\u0131r; bu sayede t\u00fcm kullan\u0131c\u0131lar ve arama motorlar\u0131 g\u00fcvenli HTTPS s\u00fcr\u00fcm\u00fcne y\u00f6nlendirilir ve i\u00e7erik tekrarlanmas\u0131 \u00f6nlenir.<\/p>\n

Tavsiye edilen okuma SSL Sertifikas\u0131 Kullan\u0131m K\u0131lavuzu: \u00c7al\u0131\u015fma Prensibinden Kurulum ve Yap\u0131land\u0131rmaya Kadar \u2013 Web Sitelerinin G\u00fcvenli \u0130leti\u015fimini Sa\u011flama<\/a>\u3002<\/p>\n\n\n\n\n

SSL Sertifikalar\u0131n\u0131n Bak\u0131m\u0131 ve Y\u00f6netim Stratejileri<\/h2>\n\n\n\n

Sertifika da\u011f\u0131t\u0131m\u0131 bir kez yap\u0131ld\u0131ktan sonra her \u015feyin \u00e7\u00f6z\u00fcld\u00fc\u011f\u00fc anlam\u0131na gelmez; etkili bir ya\u015fam d\u00f6ng\u00fcs\u00fc y\u00f6netimi, s\u00fcrekli g\u00fcvenli\u011fi sa\u011flaman\u0131n anahtar\u0131d\u0131r.<\/p>\n\n\n\n

\u0130zleme ge\u00e7erlilik s\u00fcresi ve zaman\u0131nda yenileme<\/h3>\n\n\n\n

SSL sertifikalar\u0131n\u0131n belirgin bir ge\u00e7erlilik s\u00fcresi vard\u0131r (\u015fu anki en uzun s\u00fcre 13 ayd\u0131r). S\u00fcresi dolan sertifikalar, taray\u0131c\u0131larda \u201cg\u00fcvenli de\u011fil\u201d uyar\u0131s\u0131 g\u00f6r\u00fcnmesine neden olur ve bu da web sitesine eri\u015fimi ciddi \u015fekilde etkiler. Sertifikan\u0131n s\u00fcresi dolmadan en az 30 g\u00fcn \u00f6nce yenileme i\u015flemini ba\u015flatmak i\u00e7in bir izleme mekanizmas\u0131 kurman\u0131z \u015fartt\u0131r. Bir\u00e7ok CA (Sertifika Yetkilendirmesi kurulu\u015fu) veya bar\u0131nd\u0131rma hizmet sa\u011flay\u0131c\u0131s\u0131, unutulma riskini \u00f6nlemek i\u00e7in otomatik yenileme hizmeti sunar.<\/p>\n\n\n\n

Anahtarlar\u0131n ve sertifikalar\u0131n g\u00fcvenli bir \u015fekilde saklanmas\u0131<\/h3>\n\n\n\n

Sunucu \u00f6zel anahtar\u0131, g\u00fcvenlik sisteminin temelidir. \u00d6zel anahtar s\u0131zd\u0131r\u0131ld\u0131\u011f\u0131nda, sald\u0131rganlar arac\u0131 sald\u0131r\u0131lar\u0131 (man-in-the-middle attacks) ger\u00e7ekle\u015ftirebilirler. \u00d6zel anahtar dosyas\u0131n\u0131n eri\u015fim izinlerinin yaln\u0131zca y\u00f6neticiler veya sistem hesaplar\u0131 taraf\u0131ndan okunacak \u015fekilde ayarlanmas\u0131 ve g\u00fcvenli bir \u00e7evrimd\u0131\u015f\u0131 yedekleme ortam\u0131nda saklanmas\u0131 gerekir. Anahtarlar\u0131n d\u00fczenli olarak de\u011fi\u015ftirilmesi ve sertifikalar\u0131n yeniden d\u00fczenlenmesi de iyi bir g\u00fcvenlik uygulamas\u0131d\u0131r.<\/p>\n\n\n\n

\u015eifreleme algoritmalar\u0131 ve protokollerindeki g\u00fcncellemeleri takip edin.<\/h3>\n\n\n\n

Bilgi i\u015flem g\u00fcc\u00fcn\u00fcn artmas\u0131 ve kriptografinin geli\u015fmesiyle birlikte, eski \u015fifreleme algoritmalar\u0131 g\u00fcvensiz hale gelebilir. Sunucu yap\u0131land\u0131rmalar\u0131 d\u00fczenli olarak kontrol edilmeli, g\u00fcvensiz SSL\/TLS protokol s\u00fcr\u00fcmleri (\u00f6rne\u011fin SSL 2.0\/3.0, TLS 1.0) devre d\u0131\u015f\u0131 b\u0131rak\u0131lmal\u0131 ve g\u00fc\u00e7l\u00fc \u015fifreleme paketleri tercih edilmelidir. Web sitelerini tarayarak ayr\u0131nt\u0131l\u0131 g\u00fcvenlik yap\u0131land\u0131rma de\u011ferlendirme raporlar\u0131 ve optimizasyon \u00f6nerileri almak i\u00e7in \u00e7evrimi\u00e7i SSL denetim ara\u00e7lar\u0131 kullan\u0131labilir.<\/p>\n\n\n\n

\u00d6zetle.<\/h2>\n\n\n\n

SSL sertifikalar\u0131, internet ortam\u0131nda g\u00fcvenin temelini olu\u015fturur. \u015eifreleme ve kimlik do\u011frulama mekanizmalar\u0131 arac\u0131l\u0131\u011f\u0131yla veri g\u00fcvenli\u011fini sa\u011flar ve web sitelerinin itibar\u0131n\u0131 art\u0131r\u0131r. SSL sertifikalar\u0131n\u0131n \u015fifreleme prensiplerini anlamakla ba\u015flayarak, kendi ihtiya\u00e7lar\u0131n\u0131za uygun sertifika t\u00fcr\u00fcn\u00fc se\u00e7meli ve ba\u015fvuru, da\u011f\u0131t\u0131m ve yap\u0131land\u0131rma i\u015flemlerini standart prosed\u00fcrlere g\u00f6re tamamlamal\u0131s\u0131n\u0131z. Daha da \u00f6nemlisi, uzun vadeli bir bak\u0131m stratejisi olu\u015fturmal\u0131; sertifikan\u0131n ge\u00e7erlilik s\u00fcresini izlemeli, anahtarlar\u0131n g\u00fcvenli\u011fini sa\u011flamal\u0131 ve g\u00fcvenlik protokollerindeki g\u00fcncellemeleri takip etmelisiniz. G\u00fcn\u00fcm\u00fczde kullan\u0131c\u0131 deneyimini ve arama motoru s\u0131ralamalar\u0131n\u0131 \u00f6nemseyen bir ortamda, SSL sertifikalar\u0131n\u0131 do\u011fru bir \u015fekilde da\u011f\u0131tmak ve bak\u0131m\u0131n\u0131 yapmak art\u0131k bir se\u00e7enek de\u011fil; her web sitesi y\u00f6neticisinin sahip olmas\u0131 gereken bir beceri ve sorumluluktur.<\/p>\n\n\n\n

S\u0131k\u00e7a Sorulan Sorular.<\/h2>\n\n\n\n

T\u00fcm web sitelerinin SSL sertifikas\u0131 y\u00fcklemesi gerekiyor mu?<\/h3>\n\n\n\n

Evet, \u015fu anda bu durum zorunlu bir end\u00fcstri standard\u0131 ve en iyi uygulama haline gelmi\u015ftir. Ana ak\u0131m taray\u0131c\u0131lar, HTTPS kullanmayan web sitelerini \u201cg\u00fcvenli de\u011fil\u201d olarak i\u015faretler; bu da kullan\u0131c\u0131lar\u0131n g\u00fcvenini b\u00fcy\u00fck \u00f6l\u00e7\u00fcde azalt\u0131r. Ayr\u0131ca, Google gibi arama motorlar\u0131 HTTPS\u2019nin olumlu bir arama s\u0131ralama fakt\u00f6r\u00fc oldu\u011funu a\u00e7\u0131k\u00e7a belirtmektedir. Bir\u00e7ok modern web teknolojisi (\u00f6rne\u011fin HTTP\/2, baz\u0131 taray\u0131c\u0131 API\u2019leri) de web sitelerinin yaln\u0131zca HTTPS ortam\u0131nda kullan\u0131lmas\u0131n\u0131 gerektirir.<\/p>\n\n\n\n

\u00dccretsiz SSL sertifikalar\u0131n\u0131n \u00fccretli olanlardan ne fark\u0131 var?<\/h3>\n\n\n\n

\u514d\u8d39\u8bc1\u4e66\uff08\u5982Let\u2018s Encrypt\u9881\u53d1\u7684\uff09\u901a\u5e38\u662fDV\u7c7b\u578b\uff0c\u63d0\u4f9b\u4e86\u4e0e\u4ed8\u8d39DV\u8bc1\u4e66\u76f8\u540c\u7684\u52a0\u5bc6\u5f3a\u5ea6\uff0c\u975e\u5e38\u9002\u5408\u4e2a\u4eba\u548c\u5c0f\u578b\u9879\u76ee\u3002\u4e3b\u8981\u533a\u522b\u5728\u4e8e\u552e\u540e\u670d\u52a1\u3001\u4fdd\u9669\u8d54\u4ed8\u548c\u9a8c\u8bc1\u5468\u671f\u3002\u4ed8\u8d39\u8bc1\u4e66\u901a\u5e38\u63d0\u4f9b\u6280\u672f\u652f\u6301\u3001\u57df\u540d\u88ab\u76d7\u7528\u7684\u4fdd\u9669\u8d54\u507f\uff0c\u800cOV\/EV\u8bc1\u4e66\u63d0\u4f9b\u7684\u7ec4\u7ec7\u8eab\u4efd\u5c55\u793a\u529f\u80fd\uff0c\u5219\u662f\u514d\u8d39\u8bc1\u4e66\u6240\u4e0d\u5177\u5907\u7684\u3002\u5bf9\u4e8e\u5546\u4e1a\u7f51\u7ad9\uff0cOV\u6216EV\u8bc1\u4e66\u5728\u5efa\u7acb\u54c1\u724c\u4fe1\u4efb\u65b9\u9762\u4ef7\u503c\u663e\u8457\u3002<\/p>\n\n\n\n

SSL sertifikas\u0131 y\u00fcklendikten sonra, web sitesinin eri\u015fim h\u0131z\u0131 yava\u015flar m\u0131?<\/h3>\n\n\n\n

SSL el s\u0131kma (handshake) i\u015flemi, a\u011f \u00fczerinde ek gidi\u015f-d\u00f6n\u00fc\u015f s\u00fcreleri olu\u015fturur ve ilk ba\u011flant\u0131 h\u0131z\u0131 \u00fczerinde \u00e7ok k\u00fc\u00e7\u00fck bir etkiye sahiptir. Ancak modern TLS protokolleri ve teknolojileri bu s\u00fcreci b\u00fcy\u00fck \u00f6l\u00e7\u00fcde optimize etmi\u015ftir. Daha da \u00f6nemlisi, HTTPS\u2019yi etkinle\u015ftirmek, HTTP\/2 protokol\u00fcn\u00fcn kullan\u0131lmas\u0131 i\u00e7in bir \u00f6n ko\u015fuldur; \u00e7\u00fcnk\u00fc HTTP\/2\u2019nin \u00e7oklu yollama (multiplexing), ba\u015fl\u0131k s\u0131k\u0131\u015ft\u0131rma (header compression) gibi \u00f6zellikleri sayfa y\u00fckleme h\u0131z\u0131n\u0131 \u00f6nemli \u00f6l\u00e7\u00fcde art\u0131rabilir. Sonu\u00e7 olarak, genel olarak bak\u0131ld\u0131\u011f\u0131nda SSL sertifikalar\u0131n\u0131n kullan\u0131lmas\u0131 daha iyi bir performans deneyimi sa\u011flar.<\/p>\n\n\n\n

\u00c7oklu alan ad\u0131 veya joker karakter i\u00e7eren sertifikalar\u0131 nas\u0131l se\u00e7meliyim?<\/h3>\n\n\n\n

E\u011fer i\u015fletmeniz birden fazla tamamen farkl\u0131 ana alan ad\u0131n\u0131 i\u00e7eriyorsa \u2013 \u00f6rne\u011fin bir \u015firket web sitesi, bir \u00e7evrimi\u00e7i ma\u011faza ve bir m\u00fc\u015fteri portal\u0131 \u2013 o zaman \u00e7oklu alan ad\u0131 sertifikalar\u0131 en iyi se\u00e7enektir. E\u011fer hizmetleriniz esas olarak tek bir ana alan ad\u0131 alt\u0131nda sunuluyorsa ancak bir\u00e7ok alt alan ad\u0131n\u0131z varsa\u2026 mail.example.com<\/code>\uff0c app.example.com<\/code>\uff0c blog.example.com<\/code>Bu durumda, bir joker karakter i\u00e7eren sertifika ile mevcut ve gelecekteki t\u00fcm ayn\u0131 seviyedeki alt alan adlar\u0131n\u0131 tek seferde ve kal\u0131c\u0131 olarak koruyabilirsiniz; bu da y\u00f6netim maliyetlerini en aza indirir.<\/p>\n\n\n\n

Sertifikay\u0131n s\u00fcresi doldu\u011funda ne gibi sonu\u00e7lar do\u011far?<\/h3>\n\n\n\n

Sertifika s\u00fcresi doldu\u011funda, kullan\u0131c\u0131lar web sitenizi ziyaret etti\u011finde taray\u0131c\u0131 \u00e7ok dikkat \u00e7ekici bir \u201cG\u00fcvenli De\u011fil\u201d uyar\u0131 sayfas\u0131 \u00e7\u0131kar\u0131r ve kullan\u0131c\u0131lar\u0131n eri\u015fimine izin vermez. Bu durum, i\u015f kesintilerine, kullan\u0131c\u0131 kayb\u0131na ve marka itibar\u0131n\u0131n zarar g\u00f6rmesine neden olabilir. Ayr\u0131ca, arama motorlar\u0131 da web sitenizin s\u0131ralamas\u0131n\u0131 d\u00fc\u015f\u00fcrebilir. Bu t\u00fcr durumlar\u0131 \u00f6nlemek i\u00e7in mutlaka hat\u0131rlatma ayarlay\u0131n veya otomatik yenileme \u00f6zelli\u011fini etkinle\u015ftirin.<\/p>","protected":false},"excerpt":{"rendered":"

Makale, SSL sertifikalar\u0131n\u0131n HTTPS \u015fifrelemesini ger\u00e7ekle\u015ftirmede temel bir ara\u00e7 olarak kullan\u0131lmas\u0131n\u0131n ve kullan\u0131c\u0131 g\u00fcveninin olu\u015fturulmas\u0131ndaki \u00f6nemini a\u00e7\u0131klamaktad\u0131r. Asimetrik ve simetrik \u015fifreleme y\u00f6ntemlerinin birle\u015ftirilme prensipleri, sertifika veren kurulu\u015flar\u0131n g\u00fcven zinciri detayl\u0131 bir \u015fekilde a\u00e7\u0131klanm\u0131\u015ft\u0131r. Ayr\u0131ca DV, OV, EV gibi ana sertifika t\u00fcrlerinin \u00f6zellikleri ve uygun kullan\u0131m senaryolar\u0131 sunulmu\u015ftur. Son olarak, SSL sertifikas\u0131 ba\u015fvurusu ve da\u011f\u0131t\u0131m\u0131n\u0131n tam s\u00fcreci \u00f6zetlenmi\u015ftir.<\/p>","protected":false},"author":7,"featured_media":0,"template":"","meta":{"_acf_changed":false,"footnotes":""},"tags":[2073,11,329,319],"knowledge_category":[277],"class_list":["post-12378869","knowledge_post","type-knowledge_post","status-publish","hentry","tag-https-protocol","tag-ssl-certificate","tag-data-encryption","tag-website-security","knowledge_category-ssl-certificate"],"acf":{"site_seo_keywords":"SSL\u8bc1\u4e66,HTTPS\u52a0\u5bc6,\u7f51\u7ad9\u5b89\u5168,\u8bc1\u4e66\u7c7b\u578b,\u90e8\u7f72\u6d41\u7a0b,CA\u673a\u6784,\u975e\u5bf9\u79f0\u52a0\u5bc6,SSL\u8bc1\u4e66\u7533\u8bf7\u6307\u5357"},"_links":{"self":[{"href":"https:\/\/www.likacloud.com\/tr\/wp-json\/wp\/v2\/knowledge_posts\/12378869","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.likacloud.com\/tr\/wp-json\/wp\/v2\/knowledge_posts"}],"about":[{"href":"https:\/\/www.likacloud.com\/tr\/wp-json\/wp\/v2\/types\/knowledge_post"}],"author":[{"embeddable":true,"href":"https:\/\/www.likacloud.com\/tr\/wp-json\/wp\/v2\/users\/7"}],"version-history":[{"count":0,"href":"https:\/\/www.likacloud.com\/tr\/wp-json\/wp\/v2\/knowledge_posts\/12378869\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.likacloud.com\/tr\/wp-json\/wp\/v2\/media?parent=12378869"}],"wp:term":[{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.likacloud.com\/tr\/wp-json\/wp\/v2\/tags?post=12378869"},{"taxonomy":"knowledge_category","embeddable":true,"href":"https:\/\/www.likacloud.com\/tr\/wp-json\/wp\/v2\/knowledge_category?post=12378869"}],"curies":[{"name":"WP","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}