{"id":15876,"date":"2024-07-01T08:30:44","date_gmt":"2024-07-01T05:30:44","guid":{"rendered":"https:\/\/blog.sh.com.tr\/?p=15876"},"modified":"2024-06-26T15:47:28","modified_gmt":"2024-06-26T12:47:28","slug":"ssl-sertifikalari-nasil-calisir-teknik-bir-bakis","status":"publish","type":"post","link":"https:\/\/sh.com.tr\/blog\/ssl-sertifikalari-nasil-calisir-teknik-bir-bakis\/","title":{"rendered":"SSL Sertifikalar\u0131 Nas\u0131l \u00c7al\u0131\u015f\u0131r? Teknik Bir Bak\u0131\u015f"},"content":{"rendered":"<p style=\"text-align: justify;\"><strong>SSL Sertifikalar\u0131<\/strong> (Secure Sockets Layer), internet \u00fczerinde g\u00fcvenli veri iletimini sa\u011flayan kritik bir teknolojidir. \u00d6zellikle e-ticaret, bankac\u0131l\u0131k ve ki\u015fisel bilgi gerektiren web siteleri i\u00e7in hayati \u00f6neme sahiptir. SSL sertifikalar\u0131, kullan\u0131c\u0131lar\u0131n gizlili\u011fini ve veri b\u00fct\u00fcnl\u00fc\u011f\u00fcn\u00fc koruyarak g\u00fcvenli bir \u00e7evrimi\u00e7i deneyim sunar. Bu metinde, SSL sertifikalar\u0131n\u0131n nas\u0131l \u00e7al\u0131\u015ft\u0131\u011f\u0131n\u0131, t\u00fcrlerini ve neden \u00f6nemli olduklar\u0131n\u0131 teknik bir bak\u0131\u015f a\u00e7\u0131s\u0131yla inceleyece\u011fiz.<\/p>\n<h3 style=\"text-align: justify;\"><strong>1. SSL Sertifikas\u0131 Nedir?<\/strong><\/h3>\n<p style=\"text-align: justify;\"><strong>SSL Sertifikas\u0131<\/strong>, bir web sunucusunun kimli\u011fini do\u011frulayan ve sunucu ile kullan\u0131c\u0131 aras\u0131nda g\u00fcvenli bir ba\u011flant\u0131 kuran dijital bir belgedir. SSL, g\u00fcn\u00fcm\u00fczde yerini b\u00fcy\u00fck \u00f6l\u00e7\u00fcde <strong>TLS<\/strong>&#8216;e (Transport Layer Security) b\u0131rakm\u0131\u015f olsa da, SSL terimi hala yayg\u0131n olarak kullan\u0131lmaktad\u0131r.<\/p>\n<h3 style=\"text-align: justify;\"><strong>2. SSL Sertifikas\u0131n\u0131n \u0130\u015fleyi\u015fi<\/strong><\/h3>\n<p style=\"text-align: justify;\"><strong>SSL Sertifikalar\u0131<\/strong>, asimetrik <strong>\u015fifreleme<\/strong> tekniklerini kullanarak g\u00fcvenli bir ileti\u015fim kanal\u0131 olu\u015fturur. \u0130leti\u015fim ba\u015flad\u0131\u011f\u0131nda, sunucu ve istemci aras\u0131nda bir <strong>SSL\/TLS el s\u0131k\u0131\u015fmas\u0131<\/strong> ger\u00e7ekle\u015fir. Bu el s\u0131k\u0131\u015fma s\u0131ras\u0131nda, sunucu kendi dijital sertifikas\u0131n\u0131 ve genellikle bir genel anahtar i\u00e7eren bir &#8220;public key&#8221; g\u00f6nderir. \u0130stemci, bu anahtar\u0131 kullanarak, sadece sunucunun \u00f6zel anahtar\u0131yla a\u00e7\u0131labilecek \u015fifreli bir bilgi g\u00f6nderir. Bu i\u015flem, sadece ilgili taraflar\u0131n veriye eri\u015febilmesini sa\u011flar ve <strong>eavesdropping<\/strong> (kulak misafiri olma) gibi g\u00fcvenlik tehditlerine kar\u015f\u0131 koruma sunar.<\/p>\n<h3 style=\"text-align: justify;\"><strong>2.1. Asimetrik ve Simetrik \u015eifreleme<\/strong><\/h3>\n<p style=\"text-align: justify;\"><strong>SSL<\/strong> sertifikalar\u0131, iki t\u00fcr \u015fifreleme y\u00f6ntemi kullan\u0131r: asimetrik ve simetrik \u015fifreleme.<\/p>\n<ul style=\"text-align: justify;\">\n<li><strong>Asimetrik \u015eifreleme:<\/strong> \u0130ki farkl\u0131 anahtar kullan\u0131l\u0131r: bir <strong>public key<\/strong> (a\u00e7\u0131k anahtar) ve bir <strong>private key<\/strong> (\u00f6zel anahtar). Bu y\u00f6ntem, sertifika do\u011frulama ve g\u00fcvenli anahtar de\u011fi\u015fimi i\u00e7in kullan\u0131l\u0131r.<\/li>\n<li><strong>Simetrik \u015eifreleme:<\/strong> Ayn\u0131 anahtar hem \u015fifreleme hem de \u015fifre \u00e7\u00f6zme i\u015flemleri i\u00e7in kullan\u0131l\u0131r. Bu y\u00f6ntem, veri aktar\u0131m\u0131 s\u0131ras\u0131nda kullan\u0131l\u0131r \u00e7\u00fcnk\u00fc asimetrik \u015fifrelemeden daha h\u0131zl\u0131d\u0131r.<\/li>\n<\/ul>\n<h3 style=\"text-align: justify;\"><strong>2.2. SSL\/TLS El S\u0131k\u0131\u015fma Protokol\u00fc<\/strong><\/h3>\n<p style=\"text-align: justify;\"><strong>SSL\/TLS el s\u0131k\u0131\u015fmas\u0131<\/strong>, sunucu ve istemci aras\u0131nda g\u00fcvenli bir ba\u011flant\u0131 kurulmas\u0131n\u0131 sa\u011flayan bir s\u00fcre\u00e7tir. Bu s\u00fcre\u00e7, a\u015fa\u011f\u0131daki ad\u0131mlar\u0131 i\u00e7erir:<\/p>\n<ul style=\"text-align: justify;\">\n<li><strong>Ba\u011flant\u0131 Ba\u015flatma:<\/strong> \u0130stemci, sunucuya g\u00fcvenli bir ba\u011flant\u0131 kurmak istedi\u011fini belirten bir istek g\u00f6nderir.<\/li>\n<li><strong>Sertifika G\u00f6nderme:<\/strong> Sunucu, SSL sertifikas\u0131n\u0131 istemciye g\u00f6nderir. Bu sertifika, sunucunun kimli\u011fini do\u011frulayan bir <strong>public key<\/strong> i\u00e7erir.<\/li>\n<li><strong>Sertifika Do\u011frulama:<\/strong> \u0130stemci, sunucunun sertifikas\u0131n\u0131 do\u011frular. Sertifika, taray\u0131c\u0131da y\u00fckl\u00fc olan k\u00f6k sertifika yetkililerinin listesiyle kar\u015f\u0131la\u015ft\u0131r\u0131l\u0131r.<\/li>\n<li><strong>Anahtar De\u011fi\u015fimi:<\/strong> \u0130stemci, sunucunun <strong>public key<\/strong>&#8216;ini kullanarak bir simetrik anahtar olu\u015fturur ve bu anahtar\u0131 \u015fifreleyerek sunucuya g\u00f6nderir.<\/li>\n<li><strong>\u015eifreli Ba\u011flant\u0131 Kurulmas\u0131:<\/strong> Sunucu, kendi <strong>private key<\/strong>&#8216;ini kullanarak simetrik anahtar\u0131 \u00e7\u00f6zer. Art\u0131k, sunucu ve istemci bu simetrik anahtar\u0131 kullanarak g\u00fcvenli bir \u015fekilde veri al\u0131\u015fveri\u015fi yapabilir.<\/li>\n<\/ul>\n<h3 style=\"text-align: justify;\"><strong>2.3. Veri \u015eifreleme ve Aktar\u0131m<\/strong><\/h3>\n<p style=\"text-align: justify;\">SSL ba\u011flant\u0131s\u0131 kurulduktan sonra, veri iletimi s\u0131ras\u0131nda kullan\u0131lan \u015fifreleme y\u00f6ntemi simetrik \u015fifrelemedir. Bu, ileti\u015fim s\u00fcrecinin h\u0131zl\u0131 ve g\u00fcvenli olmas\u0131n\u0131 sa\u011flar. SSL\/TLS protokol\u00fc, iletilen verilerin b\u00fct\u00fcnl\u00fc\u011f\u00fcn\u00fc sa\u011flamak i\u00e7in ayr\u0131ca bir MAC (Message Authentication Code) kullan\u0131r. Bu, iletilen verilerin de\u011fi\u015ftirilmedi\u011fini ve bozulmad\u0131\u011f\u0131n\u0131 garanti eder.<\/p>\n<h3 style=\"text-align: justify;\"><strong>3. SSL Sertifikas\u0131 T\u00fcrleri<\/strong><\/h3>\n<h4 style=\"text-align: justify;\"><strong>3.1. Domain Validated (DV) SSL Sertifikalar\u0131<\/strong><\/h4>\n<p style=\"text-align: justify;\"><strong>Domain Validated (DV)<\/strong> SSL sertifikalar\u0131, alan ad\u0131 sahipli\u011finin do\u011fruland\u0131\u011f\u0131 sertifikalard\u0131r. Bu t\u00fcr sertifikalar, en h\u0131zl\u0131 ve en kolay al\u0131nabilen sertifikalard\u0131r \u00e7\u00fcnk\u00fc yaln\u0131zca alan ad\u0131 kontrol\u00fc yap\u0131l\u0131r. Bu nedenle, genellikle k\u00fc\u00e7\u00fck web siteleri ve bloglar i\u00e7in uygundur.<\/p>\n<h4 style=\"text-align: justify;\"><strong>3.2. Organization Validated (OV) SSL Sertifikalar\u0131<\/strong><\/h4>\n<p style=\"text-align: justify;\"><strong>Organization Validated (OV)<\/strong> <a href=\"https:\/\/sh.com.tr\/ssl\">SSL sertifikalar\u0131<\/a>, i\u015fletmenin yasal varl\u0131\u011f\u0131n\u0131 do\u011frulayan sertifikalard\u0131r. Sertifika otoritesi, ba\u015fvuruda bulunan kurulu\u015fun varl\u0131\u011f\u0131n\u0131 ve alan ad\u0131 \u00fczerindeki kontrol\u00fcn\u00fc do\u011frulamak i\u00e7in daha kapsaml\u0131 bir inceleme yapar. Bu t\u00fcr sertifikalar, orta ve b\u00fcy\u00fck \u00f6l\u00e7ekli i\u015fletmeler i\u00e7in uygundur.<\/p>\n<h4 style=\"text-align: justify;\"><strong>3.3. Extended Validation (EV) SSL Sertifikalar\u0131<\/strong><\/h4>\n<p style=\"text-align: justify;\"><strong>Extended Validation (EV)<\/strong> SSL sertifikalar\u0131, en y\u00fcksek g\u00fcvenlik seviyesini sunan sertifikalard\u0131r. EV sertifikalar\u0131, kurulu\u015fun yasal, fiziksel ve operasyonel varl\u0131\u011f\u0131n\u0131 kapsaml\u0131 bir \u015fekilde do\u011frular. Bu sertifikalar, taray\u0131c\u0131 adres \u00e7ubu\u011funda kurulu\u015fun ad\u0131n\u0131 ye\u015fil renkte g\u00f6stererek kullan\u0131c\u0131lar\u0131n g\u00fcvenini art\u0131r\u0131r. B\u00fcy\u00fck e-ticaret siteleri ve finansal kurulu\u015flar genellikle EV SSL sertifikalar\u0131n\u0131 tercih eder.<\/p>\n<h3 style=\"text-align: justify;\"><strong>4. SSL Sertifikas\u0131 Nas\u0131l Al\u0131n\u0131r?<\/strong><\/h3>\n<h4 style=\"text-align: justify;\"><strong>4.1. Sertifika Otoritesi Se\u00e7imi<\/strong><\/h4>\n<p style=\"text-align: justify;\"><strong>SSL Sertifikas\u0131<\/strong> almak i\u00e7in \u00f6ncelikle bir sertifika otoritesi (CA) se\u00e7ilmelidir. CA, sertifikalar\u0131n do\u011frulanmas\u0131 ve verilmesinden sorumlu g\u00fcvenilir kurulu\u015ftur. Pop\u00fcler CA&#8217;lar aras\u0131nda <strong>Comodo<\/strong>, <strong>DigiCert<\/strong>, <strong>Let&#8217;s Encrypt<\/strong> ve <strong>GlobalSign<\/strong> bulunur.<\/p>\n<h4 style=\"text-align: justify;\"><strong>4.2. Sertifika Talebi (CSR) Olu\u015fturma<\/strong><\/h4>\n<p style=\"text-align: justify;\">Bir <strong>SSL Sertifikas\u0131<\/strong> almak i\u00e7in, sunucu \u00fczerinde bir CSR (Certificate Signing Request) olu\u015fturulmal\u0131d\u0131r. CSR, sertifika otoritesine g\u00f6nderilecek bilgiler i\u00e7erir ve sunucunun <strong>public key<\/strong>&#8216;ini de i\u00e7erir.<\/p>\n<h4 style=\"text-align: justify;\"><strong>4.3. Sertifika Do\u011frulama ve Kurulumu<\/strong><\/h4>\n<p style=\"text-align: justify;\">CA, CSR&#8217;yi ald\u0131ktan sonra gerekli do\u011frulamalar\u0131 yapar ve sertifikay\u0131 verir. Al\u0131nan SSL sertifikas\u0131, sunucuya y\u00fcklenir ve yap\u0131land\u0131r\u0131l\u0131r. Bu a\u015famada, sunucunun <strong>private key<\/strong>&#8216;i ile uyumlu oldu\u011fundan emin olunmal\u0131d\u0131r.<\/p>\n<h3 style=\"text-align: justify;\"><strong>5. SSL Sertifikalar\u0131n\u0131n SEO \u00dczerindeki Etkisi<\/strong><\/h3>\n<p style=\"text-align: justify;\"><strong>SSL Sertifikalar\u0131<\/strong>, bir web sitesinin <strong>SEO<\/strong> performans\u0131n\u0131 olumlu y\u00f6nde etkiler. Google ve di\u011fer arama motorlar\u0131, g\u00fcvenli\u011fi \u00f6nceliklendiren web sitelerini \u00f6d\u00fcllendirir. Bir web sitesinin HTTPS kullanmas\u0131, arama motoru s\u0131ralamalar\u0131nda y\u00fckselmesine yard\u0131mc\u0131 olur. Ayr\u0131ca, kullan\u0131c\u0131lar\u0131n g\u00fcvende hissetmesi, site trafi\u011fini ve d\u00f6n\u00fc\u015f\u00fcm oranlar\u0131n\u0131 art\u0131rabilir.<\/p>\n<h3 style=\"text-align: justify;\"><strong>6. SSL Sertifikalar\u0131n\u0131n Gelece\u011fi<\/strong><\/h3>\n<p style=\"text-align: justify;\"><strong>SSL Sertifikalar\u0131<\/strong>, internet g\u00fcvenli\u011finin temel ta\u015flar\u0131ndan biridir ve gelecekte de \u00f6nemli bir rol oynamaya devam edecektir. Yeni nesil TLS protokolleri, daha g\u00fc\u00e7l\u00fc \u015fifreleme algoritmalar\u0131 ve daha h\u0131zl\u0131 el s\u0131k\u0131\u015fma s\u00fcre\u00e7leri sunarak g\u00fcvenli\u011fi ve performans\u0131 art\u0131racakt\u0131r. Ayr\u0131ca, <strong>SSL Sertifikalar\u0131<\/strong>&#8216;n\u0131n otomatik yenilenmesi ve y\u00f6netilmesi i\u00e7in geli\u015fen teknolojiler, kullan\u0131m\u0131n\u0131 daha da kolayla\u015ft\u0131racakt\u0131r.<\/p>\n<p style=\"text-align: justify;\"><strong> SSL sertifikalar\u0131n\u0131n<\/strong> neden \u00f6nemli oldu\u011funu ve nas\u0131l \u00e7al\u0131\u015ft\u0131\u011f\u0131n\u0131 anlamak, hem kullan\u0131c\u0131lar hem de web sitesi sahipleri i\u00e7in kritik bir \u00f6neme sahiptir. G\u00fcvenli bir internet deneyimi i\u00e7in <a href=\"https:\/\/sh.com.tr\/ssl\">SSL sertifikalar\u0131n\u0131n<\/a> kullan\u0131m\u0131 vazge\u00e7ilmezdir.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>SSL Sertifikalar\u0131 (Secure Sockets Layer), internet \u00fczerinde g\u00fcvenli veri iletimini sa\u011flayan kritik bir teknolojidir. \u00d6zellikle e-ticaret, bankac\u0131l\u0131k ve ki\u015fisel bilgi gerektiren web siteleri i\u00e7in hayati \u00f6neme sahiptir. SSL sertifikalar\u0131, kullan\u0131c\u0131lar\u0131n gizlili\u011fini ve veri b\u00fct\u00fcnl\u00fc\u011f\u00fcn\u00fc koruyarak g\u00fcvenli bir \u00e7evrimi\u00e7i deneyim sunar. Bu metinde, SSL sertifikalar\u0131n\u0131n nas\u0131l \u00e7al\u0131\u015ft\u0131\u011f\u0131n\u0131, t\u00fcrlerini ve neden \u00f6nemli olduklar\u0131n\u0131 teknik bir bak\u0131\u015f a\u00e7\u0131s\u0131yla [&hellip;]<\/p>\n","protected":false},"author":7,"featured_media":15091,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[11],"tags":[1233,650,1232],"class_list":["post-15876","post","type-post","status-publish","format-standard","has-post-thumbnail","category-ssl-sertifikasi","tag-guvenli-iletisim","tag-ssl-sertifikalari","tag-veri-sifrelemesi"],"_links":{"self":[{"href":"https:\/\/sh.com.tr\/blog\/wp-json\/wp\/v2\/posts\/15876","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/sh.com.tr\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/sh.com.tr\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/sh.com.tr\/blog\/wp-json\/wp\/v2\/users\/7"}],"replies":[{"embeddable":true,"href":"https:\/\/sh.com.tr\/blog\/wp-json\/wp\/v2\/comments?post=15876"}],"version-history":[{"count":0,"href":"https:\/\/sh.com.tr\/blog\/wp-json\/wp\/v2\/posts\/15876\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/sh.com.tr\/blog\/wp-json\/wp\/v2\/media\/15091"}],"wp:attachment":[{"href":"https:\/\/sh.com.tr\/blog\/wp-json\/wp\/v2\/media?parent=15876"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/sh.com.tr\/blog\/wp-json\/wp\/v2\/categories?post=15876"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/sh.com.tr\/blog\/wp-json\/wp\/v2\/tags?post=15876"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}