{"id":17115,"date":"2025-11-13T08:30:53","date_gmt":"2025-11-13T05:30:53","guid":{"rendered":"https:\/\/blog.sh.com.tr\/?p=17115"},"modified":"2025-10-06T17:11:50","modified_gmt":"2025-10-06T14:11:50","slug":"ssl-ve-devsecops-sslnin-guvenli-yazilim-gelistirme-sureclerinde-kullanimi","status":"publish","type":"post","link":"https:\/\/sh.com.tr\/blog\/ssl-ve-devsecops-sslnin-guvenli-yazilim-gelistirme-sureclerinde-kullanimi\/","title":{"rendered":"SSL ve DevSecOps: SSL\u2019nin G\u00fcvenli Yaz\u0131l\u0131m Geli\u015ftirme S\u00fcre\u00e7lerinde Kullan\u0131m\u0131"},"content":{"rendered":"<p style=\"text-align: justify;\" data-start=\"332\" data-end=\"739\">G\u00fcn\u00fcm\u00fczde yaz\u0131l\u0131m geli\u015ftirme s\u00fcreci art\u0131k sadece \u201c\u00e7al\u0131\u015fan kod\u201d \u00fcretmekten ibaret de\u011fil. G\u00fcvenlik, yaz\u0131l\u0131m\u0131n ilk sat\u0131r\u0131ndan \u00fcretim ortam\u0131na kadar her a\u015famas\u0131nda yer almal\u0131. \u0130\u015fte bu noktada <strong data-start=\"520\" data-end=\"533\">DevSecOps<\/strong> yakla\u015f\u0131m\u0131 devreye giriyor. <strong data-start=\"561\" data-end=\"574\">DevSecOps<\/strong>, yaz\u0131l\u0131m geli\u015ftirme (<strong data-start=\"596\" data-end=\"603\">Dev<\/strong>), operasyon (<strong data-start=\"617\" data-end=\"624\">Ops<\/strong>) ve g\u00fcvenlik (<strong data-start=\"639\" data-end=\"646\">Sec<\/strong>) disiplinlerini tek bir d\u00f6ng\u00fcde birle\u015ftirerek g\u00fcvenli ve h\u0131zl\u0131 yaz\u0131l\u0131m teslimini hedefler.<\/p>\n<p style=\"text-align: justify;\" data-start=\"741\" data-end=\"989\">Bu s\u00fcre\u00e7te <a href=\"https:\/\/sh.com.tr\/ssl\"><strong data-start=\"752\" data-end=\"777\">SSL sertifikalar\u0131<\/strong><\/a> ise kritik bir g\u00fcvenlik bile\u015feni olarak \u00f6ne \u00e7\u0131kar. \u00c7\u00fcnk\u00fc kullan\u0131c\u0131 ile uygulama aras\u0131ndaki veri trafi\u011finin g\u00fcvenli\u011fini sa\u011flamak, hem <strong data-start=\"911\" data-end=\"934\">yasal gereklilikler<\/strong> hem de <strong data-start=\"942\" data-end=\"962\">kullan\u0131c\u0131 g\u00fcveni<\/strong> a\u00e7\u0131s\u0131ndan olmazsa olmaz.<\/p>\n<h3 style=\"text-align: justify;\" data-start=\"996\" data-end=\"1062\"><strong>SSL\u2019nin Temel Rol\u00fc: Veri \u0130leti\u015fimini G\u00fcvence Alt\u0131na Almak<\/strong><\/h3>\n<p style=\"text-align: justify;\" data-start=\"1063\" data-end=\"1351\"><strong data-start=\"1063\" data-end=\"1093\">SSL (Secure Sockets Layer)<\/strong> ve modern versiyonu <strong data-start=\"1114\" data-end=\"1148\">TLS (Transport Layer Security)<\/strong>, istemci ile sunucu aras\u0131ndaki veriyi <strong data-start=\"1187\" data-end=\"1203\">\u015fifreleyerek<\/strong> aktar\u0131r. Bu sayede oturum s\u0131ras\u0131nda g\u00f6nderilen parolalar, kimlik bilgileri, API istekleri gibi hassas veriler \u00fc\u00e7\u00fcnc\u00fc ki\u015filer taraf\u0131ndan okunamaz.<\/p>\n<p style=\"text-align: justify;\" data-start=\"1353\" data-end=\"1384\"><strong data-start=\"1353\" data-end=\"1366\">DevSecOps<\/strong> d\u00f6ng\u00fcs\u00fcnde SSL:<\/p>\n<ul style=\"text-align: justify;\" data-start=\"1385\" data-end=\"1647\">\n<li data-start=\"1385\" data-end=\"1454\">\n<p data-start=\"1387\" data-end=\"1454\"><strong data-start=\"1387\" data-end=\"1409\">Kodlama a\u015famas\u0131nda<\/strong> API \u00e7a\u011fr\u0131lar\u0131n\u0131n HTTPS \u00fczerinden yap\u0131lmas\u0131<\/p>\n<\/li>\n<li data-start=\"1455\" data-end=\"1533\">\n<p data-start=\"1457\" data-end=\"1533\"><strong data-start=\"1457\" data-end=\"1478\">Test ortamlar\u0131nda<\/strong> ge\u00e7erli veya self-signed sertifikalar\u0131n kullan\u0131lmas\u0131<\/p>\n<\/li>\n<li data-start=\"1534\" data-end=\"1647\">\n<p data-start=\"1536\" data-end=\"1647\"><strong data-start=\"1536\" data-end=\"1556\">\u00dcretim ortam\u0131nda<\/strong> ge\u00e7erli, g\u00fcncel ve g\u00fc\u00e7l\u00fc \u015fifreleme algoritmalar\u0131na sahip sertifikalar\u0131n devreye al\u0131nmas\u0131<\/p>\n<\/li>\n<\/ul>\n<h3 style=\"text-align: justify;\" data-start=\"1654\" data-end=\"1698\"><strong>CI\/CD S\u00fcre\u00e7lerinde SSL Entegrasyonu<\/strong><\/h3>\n<p style=\"text-align: justify;\" data-start=\"1699\" data-end=\"1942\">Modern yaz\u0131l\u0131m geli\u015ftirme, <strong data-start=\"1726\" data-end=\"1784\">CI\/CD (Continuous Integration \/ Continuous Deployment)<\/strong> pipeline\u2019lar\u0131yla s\u00fcrekli entegrasyon ve da\u011f\u0131t\u0131m\u0131 m\u00fcmk\u00fcn k\u0131lar. Bu pipeline\u2019larda <strong data-start=\"1866\" data-end=\"1890\">SSL sertifikalar\u0131n\u0131n<\/strong> kontrol\u00fc ve g\u00fcncellenmesi otomatikle\u015ftirilebilir.<\/p>\n<p style=\"text-align: justify;\" data-start=\"1944\" data-end=\"1959\">\u00d6rnek olarak:<\/p>\n<ul style=\"text-align: justify;\" data-start=\"1960\" data-end=\"2206\">\n<li data-start=\"1960\" data-end=\"2026\">\n<p data-start=\"1962\" data-end=\"2026\"><strong data-start=\"1962\" data-end=\"1982\">Build a\u015famas\u0131nda<\/strong> otomatik SSL sertifika do\u011frulama testleri<\/p>\n<\/li>\n<li data-start=\"2027\" data-end=\"2110\">\n<p data-start=\"2029\" data-end=\"2110\"><strong data-start=\"2029\" data-end=\"2054\">Deployment a\u015famas\u0131nda<\/strong> yeni s\u00fcr\u00fcm\u00fcn canl\u0131ya al\u0131nmadan \u00f6nce HTTPS zorunlulu\u011fu<\/p>\n<\/li>\n<li data-start=\"2111\" data-end=\"2206\">\n<p data-start=\"2113\" data-end=\"2206\">Sertifika <strong data-start=\"2123\" data-end=\"2144\">ge\u00e7erlilik s\u00fcresi<\/strong> dolmadan \u00f6nce otomatik yenileme (\u00f6r. Let\u2019s Encrypt API ile)<\/p>\n<\/li>\n<\/ul>\n<p style=\"text-align: justify;\" data-start=\"2208\" data-end=\"2309\">Bu sayede \u201csertifika s\u00fcresi dolmu\u015f\u201d hatas\u0131 y\u00fcz\u00fcnden kullan\u0131c\u0131lar\u0131n g\u00fcvensizlik ya\u015famas\u0131 engellenir.<\/p>\n<h3 style=\"text-align: justify;\" data-start=\"2316\" data-end=\"2359\"><strong>Geli\u015ftirme Ortam\u0131nda SSL Kullan\u0131m\u0131<\/strong><\/h3>\n<p style=\"text-align: justify;\" data-start=\"2360\" data-end=\"2523\">Bir\u00e7ok geli\u015ftirici <strong data-start=\"2379\" data-end=\"2411\">test ve staging ortamlar\u0131nda<\/strong> SSL kullanmay\u0131 gereksiz g\u00f6rebilir. Ancak <strong data-start=\"2453\" data-end=\"2466\">DevSecOps<\/strong> yakla\u015f\u0131m\u0131nda g\u00fcvenlik, \u00fcretim \u00f6ncesinde de zorunludur.<\/p>\n<ul style=\"text-align: justify;\" data-start=\"2524\" data-end=\"2766\">\n<li data-start=\"2524\" data-end=\"2612\">\n<p data-start=\"2526\" data-end=\"2612\"><strong data-start=\"2526\" data-end=\"2554\">Self-signed sertifikalar<\/strong> veya test CA\u2019leri ile staging ortam\u0131nda HTTPS kullan\u0131m\u0131<\/p>\n<\/li>\n<li data-start=\"2613\" data-end=\"2703\">\n<p data-start=\"2615\" data-end=\"2703\">Ger\u00e7ek ortam\u0131 birebir sim\u00fcle ederek \u201cmixed content\u201d gibi hatalar\u0131n \u00f6nceden yakalanmas\u0131<\/p>\n<\/li>\n<li data-start=\"2704\" data-end=\"2766\">\n<p data-start=\"2706\" data-end=\"2766\">SSL hatalar\u0131n\u0131n otomatik test senaryolar\u0131na dahil edilmesi<\/p>\n<\/li>\n<\/ul>\n<h3 style=\"text-align: justify;\" data-start=\"2773\" data-end=\"2836\"><strong>SSL Sertifikalar\u0131n\u0131n Y\u00f6netimi ve G\u00fcvenlik Politikalar\u0131<\/strong><\/h3>\n<p style=\"text-align: justify;\" data-start=\"2837\" data-end=\"2902\"><strong data-start=\"2837\" data-end=\"2850\">DevSecOps<\/strong> s\u00fcre\u00e7lerinde SSL y\u00f6netimi i\u00e7in \u015fu ad\u0131mlar kritik:<\/p>\n<ul style=\"text-align: justify;\" data-start=\"2903\" data-end=\"3249\">\n<li data-start=\"2903\" data-end=\"2974\">\n<p data-start=\"2905\" data-end=\"2974\">Sertifikalar\u0131n merkezi olarak <strong data-start=\"2935\" data-end=\"2958\">certificate manager<\/strong> ile izlenmesi<\/p>\n<\/li>\n<li data-start=\"2975\" data-end=\"3079\">\n<p data-start=\"2977\" data-end=\"3079\">Kullan\u0131lan \u015fifreleme algoritmalar\u0131n\u0131n d\u00fczenli olarak <strong data-start=\"3030\" data-end=\"3047\">g\u00fcncellenmesi<\/strong> (\u00f6rn. TLS 1.2 ve 1.3 deste\u011fi)<\/p>\n<\/li>\n<li data-start=\"3080\" data-end=\"3176\">\n<p data-start=\"3082\" data-end=\"3176\"><strong data-start=\"3082\" data-end=\"3097\">Weak cipher<\/strong> ve <strong data-start=\"3101\" data-end=\"3123\">eski protokollerin<\/strong> (SSL 2.0, SSL 3.0, TLS 1.0) devre d\u0131\u015f\u0131 b\u0131rak\u0131lmas\u0131<\/p>\n<\/li>\n<li data-start=\"3177\" data-end=\"3249\">\n<p data-start=\"3179\" data-end=\"3249\"><strong data-start=\"3179\" data-end=\"3220\">HSTS (HTTP Strict Transport Security)<\/strong> ba\u015fl\u0131klar\u0131n\u0131n kullan\u0131lmas\u0131<\/p>\n<\/li>\n<\/ul>\n<h3 style=\"text-align: justify;\" data-start=\"3256\" data-end=\"3286\"><strong>G\u00fcvenli API \u0130leti\u015fimi<\/strong><\/h3>\n<p style=\"text-align: justify;\" data-start=\"3287\" data-end=\"3412\">G\u00fcn\u00fcm\u00fcz yaz\u0131l\u0131mlar\u0131, \u00f6zellikle <strong data-start=\"3318\" data-end=\"3333\">mikroservis<\/strong> mimarilerinde, s\u00fcrekli API \u00e7a\u011fr\u0131lar\u0131 yapar. Burada SSL\u2019in rol\u00fc iki y\u00f6nl\u00fcd\u00fcr:<\/p>\n<ul style=\"text-align: justify;\" data-start=\"3413\" data-end=\"3675\">\n<li data-start=\"3413\" data-end=\"3470\">\n<p data-start=\"3415\" data-end=\"3470\"><strong data-start=\"3415\" data-end=\"3434\">\u0130stemci ile API<\/strong> aras\u0131nda g\u00fcvenli HTTPS ba\u011flant\u0131s\u0131<\/p>\n<\/li>\n<li data-start=\"3471\" data-end=\"3558\">\n<p data-start=\"3473\" data-end=\"3558\"><strong data-start=\"3473\" data-end=\"3503\">Servisler aras\u0131 ileti\u015fimde<\/strong> de SSL\/TLS kullan\u0131m\u0131 (service-to-service encryption)<\/p>\n<\/li>\n<li data-start=\"3559\" data-end=\"3675\">\n<p data-start=\"3561\" data-end=\"3675\"><strong data-start=\"3561\" data-end=\"3582\">Mutual TLS (mTLS)<\/strong> ile \u00e7ift tarafl\u0131 kimlik do\u011frulama, b\u00f6ylece yaln\u0131zca yetkili servisler birbirine eri\u015febilir<\/p>\n<\/li>\n<\/ul>\n<h3 style=\"text-align: justify;\" data-start=\"3682\" data-end=\"3724\"><strong>Otomasyon ile Sertifika G\u00fcvenli\u011fi<\/strong><\/h3>\n<p style=\"text-align: justify;\" data-start=\"3725\" data-end=\"3810\"><strong data-start=\"3725\" data-end=\"3738\">DevSecOps<\/strong> felsefesi otomasyona dayan\u0131r. SSL y\u00f6netimi de otomatikle\u015ftirilebilir:<\/p>\n<ul style=\"text-align: justify;\" data-start=\"3811\" data-end=\"4008\">\n<li data-start=\"3811\" data-end=\"3870\">\n<p data-start=\"3813\" data-end=\"3870\"><strong data-start=\"3813\" data-end=\"3831\">ACME protokol\u00fc<\/strong> ile otomatik sertifika alma\/yenileme<\/p>\n<\/li>\n<li data-start=\"3871\" data-end=\"3940\">\n<p data-start=\"3873\" data-end=\"3940\">CI\/CD pipeline\u2019\u0131nda \u201csertifika son kullanma tarihi\u201d kontrol ad\u0131m\u0131<\/p>\n<\/li>\n<li data-start=\"3941\" data-end=\"4008\">\n<p data-start=\"3943\" data-end=\"4008\">Otomatik <strong data-start=\"3952\" data-end=\"3974\">sertifika da\u011f\u0131t\u0131m\u0131<\/strong> (\u00f6rn. Kubernetes Secret olarak)<\/p>\n<\/li>\n<\/ul>\n<h3 style=\"text-align: justify;\" data-start=\"4015\" data-end=\"4049\"><strong>\u0130nsan Hatalar\u0131n\u0131 Azaltmak<\/strong><\/h3>\n<p style=\"text-align: justify;\" data-start=\"4050\" data-end=\"4249\">SSL y\u00f6netiminde en yayg\u0131n sorunlardan biri <strong data-start=\"4093\" data-end=\"4109\">insan hatas\u0131<\/strong>d\u0131r: sertifika y\u00fcklemeyi unutmak, staging sertifikas\u0131n\u0131 prod\u2019a ta\u015f\u0131mak, eski protokolleri a\u00e7\u0131k b\u0131rakmak gibi.<br data-start=\"4218\" data-end=\"4221\" \/><strong data-start=\"4221\" data-end=\"4234\">DevSecOps<\/strong> bu hatalar\u0131:<\/p>\n<ul style=\"text-align: justify;\" data-start=\"4250\" data-end=\"4409\">\n<li data-start=\"4250\" data-end=\"4317\">\n<p data-start=\"4252\" data-end=\"4317\"><strong data-start=\"4252\" data-end=\"4290\">Kod \u00fczerinden tan\u0131ml\u0131 yap\u0131land\u0131rma<\/strong> (Infrastructure as Code)<\/p>\n<\/li>\n<li data-start=\"4318\" data-end=\"4354\">\n<p data-start=\"4320\" data-end=\"4354\"><strong data-start=\"4320\" data-end=\"4352\">Otomatik g\u00fcvenlik taramalar\u0131<\/strong><\/p>\n<\/li>\n<li data-start=\"4355\" data-end=\"4409\">\n<p data-start=\"4357\" data-end=\"4409\"><strong data-start=\"4357\" data-end=\"4388\">Pipeline bloklama kurallar\u0131<\/strong> ile minimize eder.<\/p>\n<\/li>\n<\/ul>\n<h3 style=\"text-align: justify;\" data-start=\"4416\" data-end=\"4465\"><strong>SSL, DevSecOps\u2019un Vazge\u00e7ilmez Par\u00e7as\u0131<\/strong><\/h3>\n<p style=\"text-align: justify;\" data-start=\"4466\" data-end=\"4757\"><a href=\"https:\/\/sh.com.tr\/ssl\"><strong>SSL<\/strong> <strong>sertifikalar\u0131<\/strong><\/a>, sadece web taray\u0131c\u0131lar\u0131nda g\u00f6r\u00fclen bir \u201ckilit simgesi\u201d de\u011fil, <strong data-start=\"4555\" data-end=\"4568\">DevSecOps<\/strong>\u2019un b\u00fct\u00fcn a\u015famalar\u0131nda aktif bir g\u00fcvenlik katman\u0131d\u0131r. Kodlama, test, da\u011f\u0131t\u0131m ve izleme ad\u0131mlar\u0131n\u0131n her birinde do\u011fru konumland\u0131r\u0131ld\u0131\u011f\u0131nda, yaz\u0131l\u0131m\u0131n g\u00fcvenlik seviyesi ciddi \u015fekilde artar.<\/p>\n<p style=\"text-align: justify;\" data-start=\"4759\" data-end=\"4921\"><strong data-start=\"4759\" data-end=\"4771\">K\u0131sacas\u0131<\/strong>: SSL\u2019i sadece \u201ccanl\u0131ya \u00e7\u0131karken\u201d de\u011fil, <strong data-start=\"4812\" data-end=\"4850\">yaz\u0131l\u0131m ya\u015fam d\u00f6ng\u00fcs\u00fcn\u00fcn tamam\u0131nda<\/strong> kullanmak, g\u00fcvenlik k\u00fclt\u00fcr\u00fcn\u00fc peki\u015ftirir ve kullan\u0131c\u0131ya g\u00fcven verir.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>G\u00fcn\u00fcm\u00fczde yaz\u0131l\u0131m geli\u015ftirme s\u00fcreci art\u0131k sadece \u201c\u00e7al\u0131\u015fan kod\u201d \u00fcretmekten ibaret de\u011fil. G\u00fcvenlik, yaz\u0131l\u0131m\u0131n ilk sat\u0131r\u0131ndan \u00fcretim ortam\u0131na kadar her a\u015famas\u0131nda yer almal\u0131. \u0130\u015fte bu noktada DevSecOps yakla\u015f\u0131m\u0131 devreye giriyor. DevSecOps, yaz\u0131l\u0131m geli\u015ftirme (Dev), operasyon (Ops) ve g\u00fcvenlik (Sec) disiplinlerini tek bir d\u00f6ng\u00fcde birle\u015ftirerek g\u00fcvenli ve h\u0131zl\u0131 yaz\u0131l\u0131m teslimini hedefler. Bu s\u00fcre\u00e7te SSL sertifikalar\u0131 ise kritik [&hellip;]<\/p>\n","protected":false},"author":7,"featured_media":17116,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[11],"tags":[2004,2003,2005,253],"class_list":["post-17115","post","type-post","status-publish","format-standard","has-post-thumbnail","category-ssl-sertifikasi","tag-devsecops","tag-guvenli-api-iletisimi","tag-sertifika-yenileme-otomasyonu","tag-ssl-sertifikasi"],"_links":{"self":[{"href":"https:\/\/sh.com.tr\/blog\/wp-json\/wp\/v2\/posts\/17115","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/sh.com.tr\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/sh.com.tr\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/sh.com.tr\/blog\/wp-json\/wp\/v2\/users\/7"}],"replies":[{"embeddable":true,"href":"https:\/\/sh.com.tr\/blog\/wp-json\/wp\/v2\/comments?post=17115"}],"version-history":[{"count":0,"href":"https:\/\/sh.com.tr\/blog\/wp-json\/wp\/v2\/posts\/17115\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/sh.com.tr\/blog\/wp-json\/wp\/v2\/media\/17116"}],"wp:attachment":[{"href":"https:\/\/sh.com.tr\/blog\/wp-json\/wp\/v2\/media?parent=17115"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/sh.com.tr\/blog\/wp-json\/wp\/v2\/categories?post=17115"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/sh.com.tr\/blog\/wp-json\/wp\/v2\/tags?post=17115"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}