{"id":629,"date":"2020-07-23T08:10:36","date_gmt":"2020-07-23T08:10:36","guid":{"rendered":"https:\/\/blog.sh.com.tr\/?p=629"},"modified":"2020-07-23T08:12:19","modified_gmt":"2020-07-23T08:12:19","slug":"tasima-katmani-guvenligi","status":"publish","type":"post","link":"https:\/\/sh.com.tr\/blog\/tasima-katmani-guvenligi\/","title":{"rendered":"Ta\u015f\u0131ma Katman\u0131 G\u00fcvenli\u011fi"},"content":{"rendered":"<p style=\"text-align: justify;\"><i><b>Ta\u015f\u0131ma Katman\u0131 G\u00fcvenli\u011fi<\/b><\/i> (<b>TLS<\/b>) ve onun \u00f6nc\u00fcl\u00fc\/selefi olan <i><b>G\u00fcvenli Soket Katman\u0131<\/b><\/i> (<b>SSL<\/b>), bilgisayar a\u011f\u0131 \u00fczerinden g\u00fcvenli haberle\u015fmeyi sa\u011flamak i\u00e7in tasarlanm\u0131\u015f kriptolama protokolleridir.\u00a0X.509 sertifikalar\u0131n\u0131 kullan\u0131rlar ve bundan dolay\u0131 kar\u015f\u0131 tarafla ileti\u015fime ge\u00e7eceklerin kimlik do\u011frulamas\u0131 asimetrik \u015fifreleme ile yap\u0131l\u0131r ve bir simetrik anahtar \u00fczerinde anla\u015f\u0131l\u0131r. Bu oturum anahtar\u0131 daha sonra taraflar aras\u0131ndaki veri ak\u0131\u015f\u0131n\u0131 \u015fifrelemek i\u00e7in kullan\u0131l\u0131r. Bu, mesaj\/veri gizlili\u011fine ve mesaj kimlik do\u011frulama kodlar\u0131 i\u00e7in mesaj b\u00fct\u00fcnl\u00fc\u011f\u00fcne izin verir. Protokollerin bir\u00e7ok versiyonu a\u011f tarama, elektronik mail, \u0130nternet \u00fczerinden faks, anl\u0131k mesajla\u015fma ve \u0130nternet \u00fczerinden sesli ileti\u015fim gibi uygulamalarda yayg\u0131n olarak kullan\u0131lmaktad\u0131r. Bu durumda\/i\u00e7erikte\/ba\u011flamda en \u00f6nemli \u00f6zellik iletme gizlili\u011fidir. Bundan dolay\u0131 k\u0131sa s\u00fcreli oturum anahtar\u0131, uzun s\u00fcreli gizli simetrik anahtardan t\u00fcretilememelidir.<sup id=\"cite_ref-3\" class=\"reference\"><\/sup><\/p>\n<p style=\"text-align: justify;\">X.509 sertifikalar\u0131n\u0131n se\u00e7imi sonucunda, sertifika y\u00f6neticileri ve a\u00e7\u0131k anahtar altyap\u0131s\u0131, sertifika ve sahibi aras\u0131ndaki ili\u015fkinin do\u011frulanmas\u0131n\u0131n yan\u0131 s\u0131ra olu\u015fturulmas\u0131, imzalanmas\u0131 ve sertifikalar\u0131n ge\u00e7erlili\u011finin y\u00f6netilmesi i\u00e7in gereklidir. Bu, g\u00fcvenilirlik a\u011f\u0131 yoluyla kimlik do\u011frulamas\u0131ndan daha faydal\u0131 oldu\u011fu halde, 2013&#8217;teki k\u00fcresel izleme if\u015fas\u0131 sertifika y\u00f6neticilerinin ortadaki adam sald\u0131r\u0131s\u0131na(man-in-the-middle attack) izin verdi\u011fini bundan dolay\u0131 g\u00fcvenlik bak\u0131m\u0131ndan zay\u0131f bir nokta oldu\u011funu bilinir hale getirdi.<sup id=\"cite_ref-4\" class=\"reference\"><\/sup><sup id=\"cite_ref-5\" class=\"reference\"><\/sup><\/p>\n<p style=\"text-align: justify;\">\u0130nternet protokol tak\u0131m\u0131nda, SSL ve TLS uygulama katman\u0131nda a\u011f ba\u011flant\u0131lar\u0131 verisini \u015fifreler. OSI modelde e\u015fde\u011fer olarak, TLS\/SSL 5.katmanda (oturum katman\u0131) ba\u015flat\u0131l\u0131r ve 6.katmanda (sunum katman\u0131) \u00e7al\u0131\u015ft\u0131r\u0131l\u0131r. Oturum katman\u0131 asimetrik \u015fifrelemenin kullan\u0131ld\u0131\u011f\u0131 bir el s\u0131k\u0131\u015fma i\u015flemine sahiptir. Buradaki ama\u00e7, oturum i\u00e7in bir payla\u015f\u0131lan anahtar ve \u015fifreleme ayarlar\u0131n\u0131 olu\u015fturmakt\u0131r. Sunum katman\u0131 ise simetrik \u015fifreleme ve oturum anahtar\u0131n\u0131 kullanarak haberle\u015fmenin geri kalan\u0131n\u0131 \u015fifreler. Bu iki modelde TLS ve SSL, b\u00f6l\u00fctleri \u015fifreli verileri iletmekte olan ta\u015f\u0131ma katman\u0131 ad\u0131na \u00e7al\u0131\u015fmaktad\u0131r.<\/p>\n<p style=\"text-align: justify;\">TLS, \u0130nternet M\u00fchendisli\u011fi G\u00f6rev G\u00fcc\u00fc (IETF) standartlar yolu protokol\u00fcd\u00fcr. \u0130lk olarak 1999 y\u0131l\u0131nda tan\u0131mlanm\u0131\u015ft\u0131r ve RFC 5246(A\u011fustos 2008) ve RFC 6176(Mart 2011)da g\u00fcncellenmi\u015ftir. \u00d6nceki SSL spesifikasyonlar\u0131 (1994, 1995, 1996) esas al\u0131narak Netscape \u0130leti\u015fim taraf\u0131ndan geli\u015ftirilmi\u015ftir.<sup id=\"cite_ref-6\" class=\"reference\"><\/sup><\/p>\n<p style=\"text-align: justify;\">Netscape taraf\u0131ndan 1994 y\u0131l\u0131nda geli\u015ftirilen <sup id=\"cite_ref-SSL_Tarihi_7-0\" class=\"reference\"><\/sup><i><b>Secure Sockets Layer<\/b><\/i> (G\u00fcvenli Soket Katman\u0131) protokol\u00fc, internet \u00fczerinden g\u00fcvenli veri ileti\u015fimi sa\u011flayan bir protokold\u00fcr.<sup id=\"cite_ref-SSL'in_Amac\u0131_8-0\" class=\"reference\"><\/sup> SSL 2.0 1995 y\u0131l\u0131nda ve SSL&#8217;in g\u00fcn\u00fcm\u00fczde kullan\u0131lan versiyonu olan SSL 3.0 da 1996 y\u0131l\u0131nda RFC 6101 koduyla piyasaya s\u00fcr\u00fclm\u00fc\u015ft\u00fcr.<sup id=\"cite_ref-SSL_3.0_9-0\" class=\"reference\"><\/sup><sup id=\"cite_ref-SSL_3.0-SANS_10-0\" class=\"reference\"><\/sup> Daha sonra IETF, SSL&#8217;in bir standart haline gelebilmesi i\u00e7in bir giri\u015fimde bulundu ve SSL 3.0&#8217;\u0131 temel alan yeni bir protokol \u00fczerinde \u00e7al\u0131\u015fmaya ba\u015flad\u0131. IETF, Ocak 1999&#8217;da bu yeni protokol\u00fc TLS 1.0 (Transport Layer Security) ad\u0131yla ve RFC 2246 koduyla piyasaya s\u00fcrd\u00fc.\u00a0TLS 1.1 Nisan 2006&#8217;da RFC 4346 koduyla, TLS 1.2 A\u011fustos 2008&#8217;de RFC 5246<sup id=\"cite_ref-TLS_1.2_13-0\" class=\"reference\"><\/sup>, TLS 1.3 A\u011fustos 2018&#8217;de RFC 8446\u00a0koduyla yay\u0131nlanm\u0131\u015ft\u0131r.<\/p>\n<p style=\"text-align: justify;\">Yerini yava\u015f yava\u015f TLS 1.3&#8217;e b\u0131rakm\u0131\u015f olsa da SSL 3.0 g\u00fcn\u00fcm\u00fczde t\u00fcm internet taray\u0131c\u0131lar\u0131 taraf\u0131ndan desteklenmektedir.<\/p>\n<p style=\"text-align: justify;\">\u0130nternet taray\u0131c\u0131lar\u0131n herhangi bir yerinde g\u00f6r\u00fclen asma kilit resmi, o siteye yap\u0131lan ba\u011flant\u0131n\u0131n SSL\/TLS ile \u015fifreli bir \u015fekilde yap\u0131ld\u0131\u011f\u0131n\u0131 g\u00f6stermektedir. Baz\u0131 taray\u0131c\u0131larda bu asma kilit ikonuna t\u0131klanarak SSL sertifikas\u0131n\u0131n kimden al\u0131nd\u0131\u011f\u0131, sitenin a\u00e7\u0131k anahtar de\u011feri, ge\u00e7erlilik s\u00fcresi, \u00f6zet algoritmas\u0131 ve versiyon bilgisi gibi bilgiler g\u00f6r\u00fcnt\u00fclenebilir.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Ta\u015f\u0131ma Katman\u0131 G\u00fcvenli\u011fi (TLS) ve onun \u00f6nc\u00fcl\u00fc\/selefi olan G\u00fcvenli Soket Katman\u0131 (SSL), bilgisayar a\u011f\u0131 \u00fczerinden g\u00fcvenli haberle\u015fmeyi sa\u011flamak i\u00e7in tasarlanm\u0131\u015f kriptolama protokolleridir.\u00a0X.509 sertifikalar\u0131n\u0131 kullan\u0131rlar ve bundan dolay\u0131 kar\u015f\u0131 tarafla ileti\u015fime ge\u00e7eceklerin kimlik do\u011frulamas\u0131 asimetrik \u015fifreleme ile yap\u0131l\u0131r ve bir simetrik anahtar \u00fczerinde anla\u015f\u0131l\u0131r. Bu oturum anahtar\u0131 daha sonra taraflar aras\u0131ndaki veri ak\u0131\u015f\u0131n\u0131 \u015fifrelemek i\u00e7in kullan\u0131l\u0131r. [&hellip;]<\/p>\n","protected":false},"author":3,"featured_media":648,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[11],"tags":[58,70],"class_list":["post-629","post","type-post","status-publish","format-standard","has-post-thumbnail","category-ssl-sertifikasi","tag-ssl","tag-tls"],"_links":{"self":[{"href":"https:\/\/sh.com.tr\/blog\/wp-json\/wp\/v2\/posts\/629","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/sh.com.tr\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/sh.com.tr\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/sh.com.tr\/blog\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/sh.com.tr\/blog\/wp-json\/wp\/v2\/comments?post=629"}],"version-history":[{"count":0,"href":"https:\/\/sh.com.tr\/blog\/wp-json\/wp\/v2\/posts\/629\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/sh.com.tr\/blog\/wp-json\/wp\/v2\/media\/648"}],"wp:attachment":[{"href":"https:\/\/sh.com.tr\/blog\/wp-json\/wp\/v2\/media?parent=629"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/sh.com.tr\/blog\/wp-json\/wp\/v2\/categories?post=629"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/sh.com.tr\/blog\/wp-json\/wp\/v2\/tags?post=629"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}