{"id":33385,"date":"2025-11-02T07:40:45","date_gmt":"2025-11-02T04:40:45","guid":{"rendered":"https:\/\/fatihsoysal.com\/blog\/?p=33385"},"modified":"2025-11-02T07:40:45","modified_gmt":"2025-11-02T04:40:45","slug":"ubuntu-22-04te-apache-icin-kendi-kendine-imzalanmis-self-signed-bir-ssl-sertifikasi-nasil-olusturulur","status":"publish","type":"post","link":"https:\/\/fatihsoysal.com\/blog\/ubuntu-22-04te-apache-icin-kendi-kendine-imzalanmis-self-signed-bir-ssl-sertifikasi-nasil-olusturulur\/","title":{"rendered":"Ubuntu 22.04’te Apache i\u00e7in Kendi Kendine \u0130mzalanm\u0131\u015f (Self-Signed) Bir SSL Sertifikas\u0131 Nas\u0131l Olu\u015fturulur?"},"content":{"rendered":"

Ubuntu 22.04’te Apache i\u00e7in Kendi Kendine \u0130mzalanm\u0131\u015f (Self-Signed) Bir SSL Sertifikas\u0131 Nas\u0131l Olu\u015fturulur?<\/h2>\n

<\/p>\n

Giri\u015f<\/h3>\n

G\u00fcn\u00fcm\u00fcz\u00fcn dijital d\u00fcnyas\u0131nda, web sitelerinin g\u00fcvenli\u011fi kullan\u0131c\u0131 g\u00fcvenini sa\u011flamak ve veri b\u00fct\u00fcnl\u00fc\u011f\u00fcn\u00fc korumak i\u00e7in hayati \u00f6neme sahiptir. G\u00fcvenli Yuva Katman\u0131 (SSL) veya daha yeni ad\u0131yla Ta\u015f\u0131ma Katman\u0131 G\u00fcvenli\u011fi (TLS) protokolleri, bir web sunucusu ile bir web taray\u0131c\u0131s\u0131 aras\u0131ndaki \u015fifreli ileti\u015fimi sa\u011flayarak bu g\u00fcvenli\u011fi m\u00fcmk\u00fcn k\u0131lar. SSL\/TLS sertifikalar\u0131, bu \u015fifreleme anahtarlar\u0131n\u0131 ve sunucunun kimlik bilgilerini i\u00e7erir.<\/p>\n

Bir SSL sertifikas\u0131, bir web sitesinin kimli\u011fini do\u011frular ve sunucu ile istemci aras\u0131ndaki t\u00fcm ileti\u015fimi \u015fifreler. Bu, hassas bilgilerin (kullan\u0131c\u0131 adlar\u0131, \u015fifreler, kredi kart\u0131 bilgileri vb.) \u00fc\u00e7\u00fcnc\u00fc \u015fah\u0131slar taraf\u0131ndan ele ge\u00e7irilmesini \u00f6nler. Genellikle, bu sertifikalar g\u00fcvenilir bir Sertifika Yetkilisi (CA) taraf\u0131ndan verilir ve bu yetkililer, taray\u0131c\u0131lar ve i\u015fletim sistemleri taraf\u0131ndan otomatik olarak g\u00fcvenilir kabul edilir.<\/p>\n

Ancak, geli\u015ftirme ortamlar\u0131, dahili test sunucular\u0131 veya belirli \u00f6zel kullan\u0131m senaryolar\u0131 i\u00e7in, bir CA’dan sertifika almak her zaman gerekli veya pratik olmayabilir. \u0130\u015fte bu noktada “kendi kendine imzalanm\u0131\u015f” (self-signed) SSL sertifikalar\u0131 devreye girer. Kendi kendine imzalanm\u0131\u015f bir sertifika, herhangi bir \u00fc\u00e7\u00fcnc\u00fc taraf CA taraf\u0131ndan do\u011frulanmam\u0131\u015f, do\u011frudan sizin taraf\u0131n\u0131zdan olu\u015fturulmu\u015f ve imzalanm\u0131\u015f bir sertifikad\u0131r. Bu, sertifikay\u0131 olu\u015fturan ki\u015fi veya kurulu\u015fun ayn\u0131 zamanda sertifikay\u0131 imzalayan ki\u015fi veya kurulu\u015f oldu\u011fu anlam\u0131na gelir.<\/p>\n

Kendi kendine imzalanm\u0131\u015f sertifikalar\u0131n temel avantaj\u0131, \u00fccretsiz olmalar\u0131 ve an\u0131nda olu\u015fturulabilmeleridir. Ancak, b\u00fcy\u00fck bir dezavantaj\u0131 vard\u0131r: taray\u0131c\u0131lar ve i\u015fletim sistemleri taraf\u0131ndan varsay\u0131lan olarak g\u00fcvenilmezler. Bu, kendi kendine imzalanm\u0131\u015f bir sertifika kullanan bir siteye eri\u015fti\u011finizde, taray\u0131c\u0131n\u0131z\u0131n bir g\u00fcvenlik uyar\u0131s\u0131 g\u00f6stermesine neden olur. Bu uyar\u0131, taray\u0131c\u0131n\u0131n sunucunun kimli\u011fini do\u011frulayamad\u0131\u011f\u0131n\u0131 ve potansiyel bir risk oldu\u011funu belirtir. \u00dcretim ortamlar\u0131nda, \u00f6zellikle genel kullan\u0131ma a\u00e7\u0131k web sitelerinde, bu t\u00fcr bir uyar\u0131 kullan\u0131c\u0131lar\u0131n sitenizden uzakla\u015fmas\u0131na neden olaca\u011f\u0131ndan kesinlikle \u00f6nerilmez.<\/p>\n

Bu makalede, Ubuntu 22.04 i\u015fletim sistemi \u00fczerinde \u00e7al\u0131\u015fan bir Apache web sunucusu i\u00e7in kendi kendine imzalanm\u0131\u015f bir SSL sertifikas\u0131n\u0131n nas\u0131l olu\u015fturulaca\u011f\u0131n\u0131 ve yap\u0131land\u0131r\u0131laca\u011f\u0131n\u0131 ad\u0131m ad\u0131m a\u00e7\u0131klayaca\u011f\u0131z. Bu k\u0131lavuz, \u00f6zellikle geli\u015ftirme, test veya dahili a\u011f ortamlar\u0131 i\u00e7in g\u00fcvenli bir HTTPS ba\u011flant\u0131s\u0131 kurmak isteyenler i\u00e7in idealdir.<\/p>\n

\u00d6n Ko\u015fullar<\/h3>\n

Bu rehbere ba\u015flamadan \u00f6nce, a\u015fa\u011f\u0131daki \u00f6n ko\u015fullar\u0131n yerine getirildi\u011finden emin olun:<\/p>\n

* Ubuntu 22.04 Sunucusu:<\/strong> Bir Ubuntu 22.04 i\u015fletim sistemi kurulu sunucuya eri\u015fiminiz olmal\u0131.
\n* Sudo Yetkileri:<\/strong> Komutlar\u0131 \u00e7al\u0131\u015ft\u0131rmak i\u00e7in sudo<\/code> yetkilerine sahip, root olmayan bir kullan\u0131c\u0131 hesab\u0131n\u0131z olmal\u0131.
\n* Apache Web Sunucusu:<\/strong> Sunucunuzda Apache web sunucusunun kurulu ve \u00e7al\u0131\u015f\u0131r durumda olmas\u0131 gerekmektedir. E\u011fer kurulu de\u011filse, a\u015fa\u011f\u0131daki komutlarla kurabilirsiniz:<\/p>\n

sudo apt update\n    sudo apt install apache2<\/code><\/pre>\n
*   G\u00fcvenlik Duvar\u0131 (UFW):<\/strong> E\u011fer UFW g\u00fcvenlik duvar\u0131 etkinse, HTTP (80) ve HTTPS (443) portlar\u0131n\u0131n a\u00e7\u0131k oldu\u011fundan emin olmal\u0131s\u0131n\u0131z. (Bu ad\u0131m\u0131 daha sonra detayland\u0131raca\u011f\u0131z.)<\/p>\n
Ad\u0131m 1: Gerekli Paketleri Kurma<\/h3>\n
SSL sertifikalar\u0131 olu\u015fturmak i\u00e7in OpenSSL arac\u0131na ihtiyac\u0131m\u0131z var. Apache web sunucusu da kurulu olmal\u0131. Genellikle, bu paketler Ubuntu sistemlerinde varsay\u0131lan olarak bulunur, ancak emin olmak i\u00e7in a\u015fa\u011f\u0131daki komutlar\u0131 \u00e7al\u0131\u015ft\u0131rarak g\u00fcncelleyebilir ve eksik paketleri kurabilirsiniz:<\/p>\n
sudo apt update\nsudo apt install apache2 openssl<\/code><\/pre>\n
Bu komut, sistemdeki paket listesini g\u00fcnceller ve Apache ile OpenSSL paketlerinin kurulu oldu\u011fundan emin olur. E\u011fer zaten kuruluysalar, sistem size bunu bildirecektir.<\/p>\n
Ad\u0131m 2: SSL Sertifikas\u0131 ve \u00d6zel Anahtar Olu\u015fturma<\/h3>\n
\u015eimdi, kendi kendine imzalanm\u0131\u015f SSL sertifikam\u0131z\u0131 ve bu sertifika ile e\u015fle\u015fen \u00f6zel anahtar\u0131m\u0131z\u0131 olu\u015fturaca\u011f\u0131z. Bu i\u015flem i\u00e7in openssl<\/code> komutunu kullanaca\u011f\u0131z.<\/p>\n
Sertifika Bilgilerini Anlama<\/h4>\n
Sertifika olu\u015ftururken, baz\u0131 bilgileri girmeniz istenecektir. Bu bilgiler sertifikan\u0131n “kimlik” bilgilerini olu\u015fturur. \u0130\u015fte temel alanlar:<\/p>\n
*   Country Name (2 letter code) [AU]:<\/strong> \u00dclke kodu (\u00f6rn: TR, US).
\n*   State or Province Name (full name) [Some-State]:<\/strong> Eyalet veya il ad\u0131 (\u00f6rn: \u0130stanbul, Ankara).
\n*   Locality Name (eg, city) []:<\/strong> \u015eehir ad\u0131 (\u00f6rn: Kad\u0131k\u00f6y, \u00c7ankaya).
\n*   Organization Name (eg, company) [Internet Widgits Pty Ltd]:<\/strong> Kurulu\u015f ad\u0131 (\u00f6rn: MyCompany Inc.).
\n*   Organizational Unit Name (eg, section) []:<\/strong> Kurulu\u015f birimi ad\u0131 (\u00f6rn: IT Department).
\n*   Common Name (e.g. server FQDN or YOUR name) []:<\/strong> Bu, sertifikan\u0131n en \u00f6nemli alan\u0131d\u0131r. Web sitenizin alan ad\u0131n\u0131 (\u00f6rn: www.example.com<\/code>) veya sunucunuzun IP adresini girmelisiniz. Taray\u0131c\u0131lar, bu alandaki de\u011feri eri\u015fmeye \u00e7al\u0131\u015ft\u0131\u011f\u0131n\u0131z adresle kar\u015f\u0131la\u015ft\u0131r\u0131r. E\u011fer bir alan ad\u0131 kullanm\u0131yorsan\u0131z ve sadece IP adresi ile eri\u015fecekseniz, buraya sunucunuzun IP adresini girin.
\n*   Email Address []:<\/strong> \u0130leti\u015fim e-posta adresi.<\/p>\n
Sertifika Olu\u015fturma Komutu<\/h4>\n
A\u015fa\u011f\u0131daki openssl<\/code> komutu, hem \u00f6zel anahtar\u0131 hem de sertifikay\u0131 ayn\u0131 anda olu\u015fturacakt\u0131r:<\/p>\n
sudo openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout \/etc\/ssl\/private\/apache-selfsigned.key -out \/etc\/ssl\/certs\/apache-selfsigned.crt<\/code><\/pre>\n
\u015eimdi bu komutu par\u00e7alara ay\u0131ral\u0131m:<\/p>\n
*   sudo openssl<\/code>: openssl<\/code> arac\u0131n\u0131 y\u00f6netici yetkileriyle \u00e7al\u0131\u015ft\u0131r\u0131r.
\n*   req<\/code>: Bir Sertifika \u0130mzalama \u0130ste\u011fi (CSR) olu\u015fturmak veya bir X.509 sertifikas\u0131 olu\u015fturmak i\u00e7in kullan\u0131l\u0131r.
\n*   -x509<\/code>: Bu se\u00e7enek, do\u011frudan bir X.509 sertifikas\u0131 olu\u015fturdu\u011fumuzu belirtir (bir CSR yerine). Bu, kendi kendine imzalanm\u0131\u015f bir sertifika olu\u015fturmak i\u00e7in gereklidir.
\n*   -nodes<\/code>: “No DES” anlam\u0131na gelir. Bu, \u00f6zel anahtar\u0131n bir parola ile \u015fifrelenmeyece\u011fi anlam\u0131na gelir. Bu, Apache’nin her yeniden ba\u015flat\u0131ld\u0131\u011f\u0131nda bir parola sormas\u0131n\u0131 engeller, ancak anahtar\u0131n \u00e7al\u0131nmas\u0131 durumunda daha az g\u00fcvenli hale getirir. Geli\u015ftirme ortamlar\u0131 i\u00e7in genellikle kabul edilebilir.
\n*   -days 365<\/code>: Sertifikan\u0131n ge\u00e7erlilik s\u00fcresini g\u00fcn olarak belirtir. Burada 365 g\u00fcn (bir y\u0131l) olarak ayarland\u0131.
\n*   -newkey rsa:2048<\/code>: Yeni bir \u00f6zel anahtar olu\u015fturur. rsa:2048<\/code> anahtar\u0131n RSA algoritmas\u0131n\u0131 ve 2048 bit uzunlu\u011funu kullanaca\u011f\u0131n\u0131 belirtir. 2048 bit, g\u00fcn\u00fcm\u00fczde genel olarak g\u00fcvenli kabul edilen bir anahtar uzunlu\u011fudur.
\n*   -keyout \/etc\/ssl\/private\/apache-selfsigned.key<\/code>: Olu\u015fturulan \u00f6zel anahtar\u0131n kaydedilece\u011fi yolu ve dosya ad\u0131n\u0131 belirtir. \/etc\/ssl\/private\/<\/code> dizini, \u00f6zel anahtarlar i\u00e7in standart ve g\u00fcvenli bir konumdur.
\n*   -out \/etc\/ssl\/certs\/apache-selfsigned.crt<\/code>: Olu\u015fturulan SSL sertifikas\u0131n\u0131n kaydedilece\u011fi yolu ve dosya ad\u0131n\u0131 belirtir. \/etc\/ssl\/certs\/<\/code> dizini, sertifikalar i\u00e7in standart bir konumdur.<\/p>\n
Komutu \u00e7al\u0131\u015ft\u0131rd\u0131\u011f\u0131n\u0131zda, yukar\u0131da bahsetti\u011fimiz sertifika bilgilerini girmeniz istenecektir:<\/p>\n
You are about to be asked to enter information that will be incorporated\ninto your certificate request.\nWhat you are about to enter is what is called a Distinguished Name or a DN.\nThere are quite a few fields but you can leave some blank\nFor some fields there will be a default value,\nIf you enter '.', the field will be left blank.\n-----\nCountry Name (2 letter code) [AU]:TR\nState or Province Name (full name) [Some-State]:Istanbul\nLocality Name (eg, city) []:Kad\u0131k\u00f6y\nOrganization Name (eg, company) [Internet Widgits Pty Ltd]:MyDevelopment\nOrganizational Unit Name (eg, section) []:IT\nCommon Name (e.g. server FQDN or YOUR name) []:your_server_ip_or_domain\nEmail Address []:admin@your_domain.com<\/code><\/pre>\n
\u00d6nemli Not:<\/strong> Common Name<\/code> alan\u0131na, sunucunuza eri\u015fmek i\u00e7in kullanaca\u011f\u0131n\u0131z tam alan ad\u0131n\u0131 (FQDN) veya IP adresini girmeniz \u00e7ok \u00f6nemlidir. E\u011fer bir alan ad\u0131n\u0131z yoksa ve sunucuya IP adresiyle eri\u015fiyorsan\u0131z, buraya sunucunuzun IP adresini girin. Aksi takdirde, taray\u0131c\u0131n\u0131z yine bir uyar\u0131 g\u00f6sterecektir (alan ad\u0131 uyu\u015fmazl\u0131\u011f\u0131 nedeniyle).<\/p>\n
Sertifika ve \u00f6zel anahtar olu\u015fturulduktan sonra, \u00f6zel anahtar dosyas\u0131n\u0131n do\u011fru izinlere sahip oldu\u011fundan emin olmal\u0131y\u0131z. \u00d6zel anahtar, hassas bir dosyad\u0131r ve yaln\u0131zca root kullan\u0131c\u0131s\u0131 taraf\u0131ndan okunabilir olmal\u0131d\u0131r.<\/p>\n
sudo chmod 600 \/etc\/ssl\/private\/apache-selfsigned.key<\/code><\/pre>\n
Bu komut, \/etc\/ssl\/private\/apache-selfsigned.key<\/code> dosyas\u0131n\u0131n yaln\u0131zca sahibinin (root) okuma ve yazma iznine sahip olmas\u0131n\u0131 sa\u011flar.<\/p>\n
Ad\u0131m 3: Apache’yi SSL Kullanacak \u015eekilde Yap\u0131land\u0131rma<\/h3>\n
Sertifikam\u0131z haz\u0131r oldu\u011funa g\u00f6re, \u015fimdi Apache’yi bu sertifikay\u0131 kullanacak \u015fekilde yap\u0131land\u0131rmam\u0131z gerekiyor.<\/p>\n
SSL Mod\u00fcl\u00fcn\u00fc Etkinle\u015ftirme<\/h4>\n
Apache’nin SSL ba\u011flant\u0131lar\u0131n\u0131 i\u015fleyebilmesi i\u00e7in ssl<\/code> mod\u00fcl\u00fcn\u00fcn etkinle\u015ftirilmesi gerekir. Bu mod\u00fcl\u00fc a\u015fa\u011f\u0131daki komutla etkinle\u015ftirebilirsiniz:<\/p>\n
sudo a2enmod ssl<\/code><\/pre>\n
Bu komut, SSL mod\u00fcl\u00fcn\u00fc etkinle\u015ftirir. Ard\u0131ndan, Apache’nin yeni yap\u0131land\u0131rmay\u0131 y\u00fcklemesi i\u00e7in yeniden ba\u015flat\u0131lmas\u0131 gerekir:<\/p>\n
sudo systemctl restart apache2<\/code><\/pre>\n
Sanal Host Dosyas\u0131 Olu\u015fturma\/D\u00fczenleme<\/h4>\n
Apache, farkl\u0131 alan adlar\u0131 veya IP adresleri i\u00e7in farkl\u0131 web sitelerini bar\u0131nd\u0131rmak \u00fczere “Sanal Hostlar” kullan\u0131r. SSL’i etkinle\u015ftirmek i\u00e7in, web sitenizin SSL yap\u0131land\u0131rmas\u0131n\u0131 i\u00e7eren bir sanal host dosyas\u0131 olu\u015fturman\u0131z veya d\u00fczenlemeniz gerekir.<\/p>\n
Ubuntu’da Apache, sanal host yap\u0131land\u0131rmalar\u0131n\u0131 \/etc\/apache2\/sites-available\/<\/code> dizininde saklar. Etkinle\u015ftirilen sanal hostlar ise \/etc\/apache2\/sites-enabled\/<\/code> dizininde sembolik ba\u011flant\u0131lar olarak bulunur.<\/p>\n
Varsay\u0131lan SSL Sanal Host Dosyas\u0131<\/h4>\n
Apache, genellikle SSL i\u00e7in bir varsay\u0131lan sanal host dosyas\u0131 sa\u011flar: \/etc\/apache2\/sites-available\/default-ssl.conf<\/code>. Bu dosyay\u0131 kendi sertifikalar\u0131n\u0131zla kullanmak \u00fczere d\u00fczenleyebilirsiniz.<\/p>\n
Dosyay\u0131 bir metin d\u00fczenleyici ile a\u00e7\u0131n:<\/p>\n
sudo nano \/etc\/apache2\/sites-available\/default-ssl.conf<\/code><\/pre>\n
Bu dosyan\u0131n i\u00e7eri\u011fi genellikle a\u015fa\u011f\u0131daki gibi bir yap\u0131ya sahiptir:<\/p>\n
\n        \n                ServerAdmin webmaster@localhost\n\n                DocumentRoot \/var\/www\/html\n\n                ErrorLog ${APACHE_LOG_DIR}\/error.log\n                CustomLog ${APACHE_LOG_DIR}\/access.log combined\n\n                SSLEngine on\n\n                SSLCertificateFile      \/etc\/ssl\/certs\/ssl-cert-snakeoil.pem\n                SSLCertificateKeyFile \/etc\/ssl\/private\/ssl-cert-snakeoil.key\n\n                \n                                SSLOptions +StdEnvVars\n                <\/FilesMatch>\n                \n                                SSLOptions +StdEnvVars\n                <\/Directory>\n        <\/VirtualHost>\n<\/IfModule><\/code><\/pre>\n
Bu dosyada yapman\u0131z gereken de\u011fi\u015fiklikler \u015funlard\u0131r:<\/p>\n
1.  SSLCertificateFile<\/code><\/strong> ve SSLCertificateKeyFile<\/code><\/strong> sat\u0131rlar\u0131n\u0131 kendi olu\u015fturdu\u011funuz sertifika ve anahtar dosyalar\u0131n\u0131n yollar\u0131yla g\u00fcncelleyin:<\/p>\n
SSLCertificateFile      \/etc\/ssl\/certs\/apache-selfsigned.crt\n    SSLCertificateKeyFile   \/etc\/ssl\/private\/apache-selfsigned.key<\/code><\/pre>\n
2.  ServerName<\/code><\/strong> direktifini ekleyerek sunucunuzun alan ad\u0131n\u0131 veya IP adresini belirtin. Bu, \u00f6zellikle birden fazla sanal hostunuz varsa \u00f6nemlidir:<\/p>\n
ServerName your_server_ip_or_domain<\/code><\/pre>\n
    (Burada your_server_ip_or_domain<\/code> yerine kendi sunucunuzun IP adresini veya alan ad\u0131n\u0131 yaz\u0131n.)
\n3.  \u0130ste\u011fe ba\u011fl\u0131 olarak, DocumentRoot<\/code>‘u web sitenizin dosyalar\u0131n\u0131n bulundu\u011fu dizine ayarlayabilirsiniz (varsay\u0131lan \/var\/www\/html<\/code> genellikle yeterlidir).<\/p>\n
De\u011fi\u015fiklikleri kaydettikten sonra (Nano’da Ctrl+O<\/code>, Enter<\/code>, Ctrl+X<\/code>), bu sanal host dosyas\u0131n\u0131 etkinle\u015ftirmeniz gerekir:<\/p>\n
sudo a2ensite default-ssl.conf<\/code><\/pre>\n
E\u011fer zaten etkinse, sistem size bunu bildirecektir.<\/p>\n
Yeni Bir Sanal Host Dosyas\u0131 Olu\u015fturma<\/h4>\n
E\u011fer varsay\u0131lan default-ssl.conf<\/code> dosyas\u0131n\u0131 kullanmak istemiyor veya mevcut bir HTTP sanal hostunuz i\u00e7in SSL’i etkinle\u015ftirmek istiyorsan\u0131z, yeni bir dosya olu\u015fturabilir veya mevcut olan\u0131 kopyalayabilirsiniz.<\/p>\n
\u00d6rne\u011fin, mevcut 000-default.conf<\/code> dosyas\u0131n\u0131 kopyalayarak yeni bir SSL sanal host dosyas\u0131 olu\u015fturabiliriz:<\/p>\n
sudo cp \/etc\/apache2\/sites-available\/000-default.conf \/etc\/apache2\/sites-available\/yourdomain.com-ssl.conf<\/code><\/pre>\n
Ard\u0131ndan, yeni olu\u015fturdu\u011funuz yourdomain.com-ssl.conf<\/code> dosyas\u0131n\u0131 d\u00fczenleyin:<\/p>\n
sudo nano \/etc\/apache2\/sites-available\/yourdomain.com-ssl.conf<\/code><\/pre>\n
Bu dosyan\u0131n i\u00e7eri\u011fini SSL i\u00e7in yap\u0131land\u0131rman\u0131z gerekecek. A\u015fa\u011f\u0131daki \u00f6rnek bir yap\u0131land\u0131rmad\u0131r:<\/p>\n
\n    ServerAdmin webmaster@localhost\n    ServerName your_server_ip_or_domain\n    DocumentRoot \/var\/www\/html\n\n    ErrorLog ${APACHE_LOG_DIR}\/error.log\n    CustomLog ${APACHE_LOG_DIR}\/access.log combined\n\n    SSLEngine on\n    SSLCertificateFile      \/etc\/ssl\/certs\/apache-selfsigned.crt\n    SSLCertificateKeyFile   \/etc\/ssl\/private\/apache-selfsigned.key\n\n    \n        SSLOptions +StdEnvVars\n    <\/FilesMatch>\n    \n        SSLOptions +StdEnvVars\n    <\/Directory>\n<\/VirtualHost>\n\n
Opsiyonel: HTTP'den HTTPS'e y\u00f6nlendirme<\/h2>\n\n    ServerName your_server_ip_or_domain\n    Redirect permanent \/ https:\/\/your_server_ip_or_domain\/\n<\/VirtualHost><\/code><\/pre>\n
A\u00e7\u0131klamalar:<\/strong><\/p>\n
   :443><\/code>:<\/strong> Bu blok, HTTPS (port 443) \u00fczerinden gelen istekleri dinler.
\n*   ServerName your_server_ip_or_domain<\/code>:<\/strong> Sunucunuzun IP adresi veya alan ad\u0131. Bu, Common Name<\/code> alan\u0131na girdi\u011finiz de\u011ferle e\u015fle\u015fmelidir.
\n*   DocumentRoot \/var\/www\/html<\/code>:<\/strong> Web sitenizin dosyalar\u0131n\u0131n bulundu\u011fu dizin.
\n*   SSLEngine on<\/code>:<\/strong> Bu direktif, SSL’i bu sanal host i\u00e7in etkinle\u015ftirir.
\n*   SSLCertificateFile<\/code><\/strong> ve SSLCertificateKeyFile<\/code>:<\/strong> Olu\u015fturdu\u011funuz sertifika ve \u00f6zel anahtar dosyalar\u0131n\u0131n yollar\u0131.<\/p>\n
HTTP’den HTTPS’e y\u00f6nlendirme blo\u011fu (port 80 i\u00e7in olan VirtualHost<\/code>), kullan\u0131c\u0131lar\u0131n http:\/\/<\/code> ile sitenize eri\u015fmeye \u00e7al\u0131\u015ft\u0131klar\u0131nda otomatik olarak https:\/\/<\/code> s\u00fcr\u00fcm\u00fcne y\u00f6nlendirilmesini sa\u011flar. Bu iyi bir uygulamad\u0131r.<\/p>\n
De\u011fi\u015fiklikleri kaydettikten sonra, yeni sanal host dosyas\u0131n\u0131 etkinle\u015ftirin:<\/p>\n
sudo a2ensite yourdomain.com-ssl.conf<\/code><\/pre>\n
Yap\u0131land\u0131rmay\u0131 Test Etme ve Yeniden Ba\u015flatma<\/h4>\n
Apache yap\u0131land\u0131rman\u0131zda herhangi bir hata olup olmad\u0131\u011f\u0131n\u0131 kontrol etmek i\u00e7in a\u015fa\u011f\u0131daki komutu kullan\u0131n:<\/p>\n
sudo apache2ctl configtest<\/code><\/pre>\n
E\u011fer her \u015fey yolundaysa, Syntax OK<\/code> mesaj\u0131n\u0131 g\u00f6rmelisiniz. Herhangi bir hata varsa, nano ile sanal host dosyan\u0131z\u0131 tekrar a\u00e7\u0131p hatalar\u0131 d\u00fczeltin.<\/p>\n
Yap\u0131land\u0131rma testi ba\u015far\u0131l\u0131 olduktan sonra, Apache servisini yeniden ba\u015flatarak de\u011fi\u015fikliklerin uygulanmas\u0131n\u0131 sa\u011flay\u0131n:<\/p>\n
sudo systemctl restart apache2<\/code><\/pre>\n
Ad\u0131m 4: G\u00fcvenlik Duvar\u0131n\u0131 Yap\u0131land\u0131rma<\/h3>\n
E\u011fer Ubuntu sunucunuzda UFW (Uncomplicated Firewall) etkinse, HTTPS trafi\u011fine izin vermeniz gerekir. Apache kurulumu genellikle UFW i\u00e7in \u00f6nceden tan\u0131mlanm\u0131\u015f profillerle gelir.<\/p>\n
Mevcut UFW profillerini kontrol edin:<\/p>\n
sudo ufw app list<\/code><\/pre>\n
\u00c7\u0131kt\u0131da Apache Full<\/code> profilini g\u00f6rmelisiniz. Bu profil hem HTTP (port 80) hem de HTTPS (port 443) trafi\u011fine izin verir. E\u011fer sadece HTTPS’e izin vermek istiyorsan\u0131z Apache Secure<\/code> profilini kullanabilirsiniz.<\/p>\n
HTTPS trafi\u011fine izin vermek i\u00e7in Apache Full<\/code> profilini etkinle\u015ftirin:<\/p>\n
sudo ufw allow 'Apache Full'<\/code><\/pre>\n
G\u00fcvenlik duvar\u0131n\u0131n durumunu kontrol ederek de\u011fi\u015fikliklerin uyguland\u0131\u011f\u0131ndan emin olun:<\/p>\n
sudo ufw status<\/code><\/pre>\n
Status: active<\/code> alt\u0131nda Apache Full<\/code> veya 443\/tcp (Apache Secure)<\/code> gibi bir kural g\u00f6rmelisiniz.<\/p>\n
Ad\u0131m 5: Sertifikay\u0131 Test Etme<\/h3>\n
Art\u0131k her \u015fey ayarland\u0131\u011f\u0131na g\u00f6re, web taray\u0131c\u0131n\u0131z\u0131 a\u00e7\u0131n ve sunucunuzun IP adresine veya alan ad\u0131na https:\/\/<\/code> \u00f6nekiyle eri\u015fmeye \u00e7al\u0131\u015f\u0131n:<\/p>\n
https:\/\/your_server_ip_or_domain<\/code><\/pre>\n
Taray\u0131c\u0131 Uyar\u0131s\u0131n\u0131 Anlama<\/h4>\n
Beklendi\u011fi gibi, taray\u0131c\u0131n\u0131z b\u00fcy\u00fck olas\u0131l\u0131kla bir g\u00fcvenlik uyar\u0131s\u0131 g\u00f6sterecektir. Bu uyar\u0131, “Ba\u011flant\u0131n\u0131z gizli de\u011fil”, “Bu site g\u00fcvenli de\u011fil” veya “Potansiyel G\u00fcvenlik Riski” gibi ifadelerle kar\u015f\u0131n\u0131za \u00e7\u0131kabilir. \u00d6rne\u011fin, Chrome’da “Your connection is not private”, Firefox’ta “Potential Security Risk Ahead” mesaj\u0131n\u0131 g\u00f6rebilirsiniz.<\/p>\n
Bu uyar\u0131, kendi kendine imzalanm\u0131\u015f sertifikalar\u0131n beklenen bir sonucudur. Taray\u0131c\u0131n\u0131z, sertifikay\u0131 veren kurulu\u015fu (yani sizi) tan\u0131mad\u0131\u011f\u0131 i\u00e7in ona g\u00fcvenmez. Bu, sertifikan\u0131n k\u00f6t\u00fc niyetli oldu\u011fu anlam\u0131na gelmez, sadece \u00fc\u00e7\u00fcnc\u00fc bir taraf\u00e7a do\u011frulanmad\u0131\u011f\u0131 anlam\u0131na gelir.<\/p>\n
Bu uyar\u0131y\u0131 a\u015fmak i\u00e7in genellikle “Geli\u015fmi\u015f” (Advanced) se\u00e7ene\u011fine t\u0131klaman\u0131z ve ard\u0131ndan “Devam et” (Proceed to your_server_ip_or_domain (unsafe)) veya benzeri bir se\u00e7ene\u011fi se\u00e7meniz gerekir. Bu i\u015flemi yapt\u0131ktan sonra web sitenize eri\u015febileceksiniz. Taray\u0131c\u0131n\u0131z\u0131n adres \u00e7ubu\u011funda genellikle bir “kilit” simgesi yerine bir “g\u00fcvenli de\u011fil” veya “dikkat” simgesi g\u00f6receksiniz. Bu, ba\u011flant\u0131n\u0131n \u015fifrelendi\u011fi ancak sertifikan\u0131n do\u011frulanmad\u0131\u011f\u0131 anlam\u0131na gelir.<\/p>\n
Sertifikay\u0131 Taray\u0131c\u0131ya Ekleme (\u0130ste\u011fe Ba\u011fl\u0131)<\/h4>\n
E\u011fer bu uyar\u0131y\u0131 s\u00fcrekli g\u00f6rmek istemiyorsan\u0131z (\u00f6rne\u011fin, sadece kendi geli\u015ftirme ortam\u0131n\u0131zda \u00e7al\u0131\u015f\u0131yorsan\u0131z), kendi kendine imzalanm\u0131\u015f sertifikay\u0131 taray\u0131c\u0131n\u0131z\u0131n veya i\u015fletim sisteminizin g\u00fcvenilir sertifikalar listesine manuel olarak ekleyebilirsiniz. Bu i\u015flem, her taray\u0131c\u0131 ve i\u015fletim sistemi i\u00e7in farkl\u0131l\u0131k g\u00f6sterir ve genellikle \u015fu ad\u0131mlar\u0131 i\u00e7erir:<\/p>\n
1.  Web sitesine eri\u015firken g\u00f6rd\u00fc\u011f\u00fcn\u00fcz sertifika uyar\u0131s\u0131 sayfas\u0131ndan sertifikay\u0131 d\u0131\u015fa aktar\u0131n.
\n2.  \u0130\u015fletim sisteminizin veya taray\u0131c\u0131n\u0131z\u0131n sertifika y\u00f6netimi b\u00f6l\u00fcm\u00fcne gidin.
\n3.  D\u0131\u015fa aktard\u0131\u011f\u0131n\u0131z .crt<\/code> dosyas\u0131n\u0131 “G\u00fcvenilir K\u00f6k Sertifika Yetkilileri” veya benzeri bir kategoriye i\u00e7e aktar\u0131n.<\/p>\n
Bu ad\u0131mlar, uyar\u0131n\u0131n ortadan kalkmas\u0131n\u0131 sa\u011flar, ancak yaln\u0131zca sizin bilgisayar\u0131n\u0131zda ge\u00e7erli olacakt\u0131r. Ba\u015fka bir kullan\u0131c\u0131 veya bilgisayar sitenize eri\u015fti\u011finde ayn\u0131 uyar\u0131y\u0131 g\u00f6recektir.<\/p>\n
Kendi Kendine \u0130mzalanm\u0131\u015f Sertifikalar\u0131n S\u0131n\u0131rlamalar\u0131 ve Alternatifler<\/h3>\n
Kendi kendine imzalanm\u0131\u015f sertifikalar, geli\u015ftirme ve test ortamlar\u0131 i\u00e7in pratik bir \u00e7\u00f6z\u00fcm sunarken, \u00fcretim ortamlar\u0131 i\u00e7in ciddi s\u0131n\u0131rlamalara sahiptir:<\/p>\n
1.  Taray\u0131c\u0131 Uyar\u0131lar\u0131:<\/strong> En belirgin s\u0131n\u0131rlama, kullan\u0131c\u0131lar\u0131n s\u00fcrekli olarak g\u00fcvenlik uyar\u0131lar\u0131 g\u00f6rmesidir. Bu, profesyonel olmayan bir izlenim yarat\u0131r ve kullan\u0131c\u0131lar\u0131n sitenize g\u00fcvenmesini engeller.
\n2.  G\u00fcven Eksikli\u011fi:<\/strong> Taray\u0131c\u0131lar ve i\u015fletim sistemleri, kendi kendine imzalanm\u0131\u015f sertifikalara otomatik olarak g\u00fcvenmez. Bu, sertifikan\u0131n kimli\u011fini do\u011frulayan bir CA’n\u0131n olmamas\u0131ndan kaynaklan\u0131r.
\n3.  API ve Uygulama Entegrasyonlar\u0131:<\/strong> Baz\u0131 API’ler, mobil uygulamalar veya di\u011fer yaz\u0131l\u0131m entegrasyonlar\u0131, sunucunun sertifikas\u0131n\u0131n g\u00fcvenilir bir CA taraf\u0131ndan imzalanm\u0131\u015f olmas\u0131n\u0131 bekler. Kendi kendine imzalanm\u0131\u015f sertifikalarla bu entegrasyonlar ba\u015far\u0131s\u0131z olabilir veya ek yap\u0131land\u0131rma gerektirebilir.<\/p>\n
\u00dcretim ortamlar\u0131 i\u00e7in, kendi kendine imzalanm\u0131\u015f sertifikalar yerine g\u00fcvenilir bir Sertifika Yetkilisi (CA) taraf\u0131ndan verilmi\u015f sertifikalar kullanmal\u0131s\u0131n\u0131z. En pop\u00fcler ve \u00f6nerilen alternatiflerden baz\u0131lar\u0131 \u015funlard\u0131r:<\/p>\n
*   Let’s Encrypt:<\/strong> \u00dccretsiz, otomatik ve a\u00e7\u0131k bir Sertifika Yetkilisidir. Let’s Encrypt sertifikalar\u0131, t\u00fcm modern taray\u0131c\u0131lar taraf\u0131ndan g\u00fcvenilir kabul edilir ve Certbot arac\u0131 ile kolayca kurulup yenilenebilir. Genel kullan\u0131ma a\u00e7\u0131k web siteleri i\u00e7in en iyi ve en yayg\u0131n \u00e7\u00f6z\u00fcmd\u00fcr.
\n*   Ticari CA’lar:<\/strong> DigiCert, Sectigo, GoDaddy gibi ticari CA’lar, farkl\u0131 seviyelerde do\u011frulama ve garanti sunan \u00fccretli sertifikalar sa\u011flarlar (Domain Validation, Organization Validation, Extended Validation). B\u00fcy\u00fck i\u015fletmeler ve \u00f6zel gereksinimleri olan kurulu\u015flar i\u00e7in uygundur.<\/p>\n
Bu makalede anlat\u0131lan kendi kendine imzalanm\u0131\u015f sertifika olu\u015fturma s\u00fcreci, sadece belirli kullan\u0131m durumlar\u0131 i\u00e7in bir ara\u00e7t\u0131r ve genel internet kullan\u0131c\u0131lar\u0131na a\u00e7\u0131k \u00fcretim siteleri i\u00e7in asla kullan\u0131lmamal\u0131d\u0131r.<\/p>\n
Sonu\u00e7<\/h3>\n
Bu makalede, Ubuntu 22.04 i\u015fletim sistemi \u00fczerinde Apache web sunucusu i\u00e7in kendi kendine imzalanm\u0131\u015f bir SSL sertifikas\u0131n\u0131n nas\u0131l olu\u015fturulaca\u011f\u0131n\u0131 ve yap\u0131land\u0131r\u0131laca\u011f\u0131n\u0131 ayr\u0131nt\u0131l\u0131 olarak inceledik. openssl<\/code> arac\u0131yla sertifika ve \u00f6zel anahtar olu\u015fturmaktan, Apache sanal hostunu yap\u0131land\u0131rmaya ve g\u00fcvenlik duvar\u0131 ayarlar\u0131n\u0131 yapmaya kadar t\u00fcm ad\u0131mlar\u0131 tamamlad\u0131k.<\/p>\n
Kendi kendine imzalanm\u0131\u015f sertifikalar, geli\u015ftirme, test ve dahili a\u011f ortamlar\u0131nda HTTPS \u015fifrelemesi sa\u011flamak i\u00e7in h\u0131zl\u0131 ve maliyetsiz bir yol sunar. Ancak, taray\u0131c\u0131lar\u0131n g\u00f6sterdi\u011fi g\u00fcvenlik uyar\u0131lar\u0131 nedeniyle genel kullan\u0131ma a\u00e7\u0131k \u00fcretim siteleri i\u00e7in uygun de\u011fildirler. \u00dcretim ortamlar\u0131 i\u00e7in Let’s Encrypt gibi \u00fccretsiz ve g\u00fcvenilir alternatifleri veya ticari Sertifika Yetkililerinden al\u0131nan sertifikalar\u0131 tercih etmek her zaman en iyi yakla\u015f\u0131md\u0131r.<\/p>\n
Bu rehberin, kendi kendine imzalanm\u0131\u015f bir SSL sertifikas\u0131n\u0131 ba\u015far\u0131yla kurman\u0131zda ve Apache sunucunuzda HTTPS’i etkinle\u015ftirmenizde size yard\u0131mc\u0131 oldu\u011funu umuyoruz.<\/p>\n
<\/body><\/p>\n","protected":false},"excerpt":{"rendered":"Ubuntu 22.04’te Apache i\u00e7in Kendi Kendine \u0130mzalanm\u0131\u015f (Self-Signed) Bir SSL Sertifikas\u0131 Nas\u0131l Olu\u015fturulur?\nGiri\u015f\nG\u00fcn\u00fcm\u00fcz\u00fcn dijital d\u00fcn","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"csco_page_header_type":"","csco_page_load_nextpost":"","csco_page_subscribe_form":"","csco_page_contact_form":"","footnotes":""},"categories":[1468],"tags":[],"class_list":{"0":"post-33385","1":"post","2":"type-post","3":"status-publish","4":"format-standard","6":"category-ubuntu","7":"cs-entry","8":"cs-video-wrap"},"yoast_head":"\nUbuntu 22.04'te Apache i\u00e7in Kendi Kendine \u0130mzalanm\u0131\u015f (Self-Signed) Bir SSL Sertifikas\u0131 Nas\u0131l Olu\u015fturulur? - Kodlar\u0131n Gizemli D\u00fcnyas\u0131<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/fatihsoysal.com\/blog\/ubuntu-22-04te-apache-icin-kendi-kendine-imzalanmis-self-signed-bir-ssl-sertifikasi-nasil-olusturulur\/\" \/>\n<meta property=\"og:locale\" content=\"tr_TR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Ubuntu 22.04'te Apache i\u00e7in Kendi Kendine \u0130mzalanm\u0131\u015f (Self-Signed) Bir SSL Sertifikas\u0131 Nas\u0131l Olu\u015fturulur?\" \/>\n<meta property=\"og:description\" content=\"Ubuntu 22.04'te Apache i\u00e7in Kendi Kendine \u0130mzalanm\u0131\u015f (Self-Signed) Bir SSL Sertifikas\u0131 Nas\u0131l Olu\u015fturulur?  Giri\u015f G\u00fcn\u00fcm\u00fcz\u00fcn dijital d\u00fcn\" \/>\n<meta property=\"og:url\" content=\"https:\/\/fatihsoysal.com\/blog\/ubuntu-22-04te-apache-icin-kendi-kendine-imzalanmis-self-signed-bir-ssl-sertifikasi-nasil-olusturulur\/\" \/>\n<meta property=\"og:site_name\" content=\"Kodlar\u0131n Gizemli D\u00fcnyas\u0131\" \/>\n<meta property=\"article:published_time\" content=\"2025-11-02T04:40:45+00:00\" \/>\n<meta name=\"author\" content=\"Fatih Soysal\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Yazan:\" \/>\n\t<meta name=\"twitter:data1\" content=\"Fatih Soysal\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tahmini okuma s\u00fcresi\" \/>\n\t<meta name=\"twitter:data2\" content=\"16 dakika\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/ubuntu-22-04te-apache-icin-kendi-kendine-imzalanmis-self-signed-bir-ssl-sertifikasi-nasil-olusturulur\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/ubuntu-22-04te-apache-icin-kendi-kendine-imzalanmis-self-signed-bir-ssl-sertifikasi-nasil-olusturulur\/\"},\"author\":{\"name\":\"Fatih Soysal\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"headline\":\"Ubuntu 22.04’te Apache i\u00e7in Kendi Kendine \u0130mzalanm\u0131\u015f (Self-Signed) Bir SSL Sertifikas\u0131 Nas\u0131l Olu\u015fturulur?\",\"datePublished\":\"2025-11-02T04:40:45+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/ubuntu-22-04te-apache-icin-kendi-kendine-imzalanmis-self-signed-bir-ssl-sertifikasi-nasil-olusturulur\/\"},\"wordCount\":2753,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"articleSection\":[\"Ubuntu\"],\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/ubuntu-22-04te-apache-icin-kendi-kendine-imzalanmis-self-signed-bir-ssl-sertifikasi-nasil-olusturulur\/#respond\"]}],\"copyrightYear\":\"2025\",\"copyrightHolder\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/ubuntu-22-04te-apache-icin-kendi-kendine-imzalanmis-self-signed-bir-ssl-sertifikasi-nasil-olusturulur\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/ubuntu-22-04te-apache-icin-kendi-kendine-imzalanmis-self-signed-bir-ssl-sertifikasi-nasil-olusturulur\/\",\"name\":\"Ubuntu 22.04'te Apache i\u00e7in Kendi Kendine \u0130mzalanm\u0131\u015f (Self-Signed) Bir SSL Sertifikas\u0131 Nas\u0131l Olu\u015fturulur? - Kodlar\u0131n Gizemli D\u00fcnyas\u0131\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\"},\"datePublished\":\"2025-11-02T04:40:45+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/ubuntu-22-04te-apache-icin-kendi-kendine-imzalanmis-self-signed-bir-ssl-sertifikasi-nasil-olusturulur\/#breadcrumb\"},\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/ubuntu-22-04te-apache-icin-kendi-kendine-imzalanmis-self-signed-bir-ssl-sertifikasi-nasil-olusturulur\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/ubuntu-22-04te-apache-icin-kendi-kendine-imzalanmis-self-signed-bir-ssl-sertifikasi-nasil-olusturulur\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Anasayfa\",\"item\":\"https:\/\/fatihsoysal.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Ubuntu 22.04’te Apache i\u00e7in Kendi Kendine \u0130mzalanm\u0131\u015f (Self-Signed) Bir SSL Sertifikas\u0131 Nas\u0131l Olu\u015fturulur?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/\",\"name\":\"Fatihsoysal.com\",\"description\":\"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim\",\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"tr\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\",\"name\":\"Fatih Soysal\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"tr\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"contentUrl\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"width\":512,\"height\":512,\"caption\":\"Fatih Soysal\"},\"logo\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\"},\"description\":\"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Ubuntu 22.04'te Apache i\u00e7in Kendi Kendine \u0130mzalanm\u0131\u015f (Self-Signed) Bir SSL Sertifikas\u0131 Nas\u0131l Olu\u015fturulur? - Kodlar\u0131n Gizemli D\u00fcnyas\u0131","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/fatihsoysal.com\/blog\/ubuntu-22-04te-apache-icin-kendi-kendine-imzalanmis-self-signed-bir-ssl-sertifikasi-nasil-olusturulur\/","og_locale":"tr_TR","og_type":"article","og_title":"Ubuntu 22.04'te Apache i\u00e7in Kendi Kendine \u0130mzalanm\u0131\u015f (Self-Signed) Bir SSL Sertifikas\u0131 Nas\u0131l Olu\u015fturulur?","og_description":"Ubuntu 22.04'te Apache i\u00e7in Kendi Kendine \u0130mzalanm\u0131\u015f (Self-Signed) Bir SSL Sertifikas\u0131 Nas\u0131l Olu\u015fturulur?  Giri\u015f G\u00fcn\u00fcm\u00fcz\u00fcn dijital d\u00fcn","og_url":"https:\/\/fatihsoysal.com\/blog\/ubuntu-22-04te-apache-icin-kendi-kendine-imzalanmis-self-signed-bir-ssl-sertifikasi-nasil-olusturulur\/","og_site_name":"Kodlar\u0131n Gizemli D\u00fcnyas\u0131","article_published_time":"2025-11-02T04:40:45+00:00","author":"Fatih Soysal","twitter_card":"summary_large_image","twitter_misc":{"Yazan:":"Fatih Soysal","Tahmini okuma s\u00fcresi":"16 dakika"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/fatihsoysal.com\/blog\/ubuntu-22-04te-apache-icin-kendi-kendine-imzalanmis-self-signed-bir-ssl-sertifikasi-nasil-olusturulur\/#article","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/ubuntu-22-04te-apache-icin-kendi-kendine-imzalanmis-self-signed-bir-ssl-sertifikasi-nasil-olusturulur\/"},"author":{"name":"Fatih Soysal","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"headline":"Ubuntu 22.04’te Apache i\u00e7in Kendi Kendine \u0130mzalanm\u0131\u015f (Self-Signed) Bir SSL Sertifikas\u0131 Nas\u0131l Olu\u015fturulur?","datePublished":"2025-11-02T04:40:45+00:00","mainEntityOfPage":{"@id":"https:\/\/fatihsoysal.com\/blog\/ubuntu-22-04te-apache-icin-kendi-kendine-imzalanmis-self-signed-bir-ssl-sertifikasi-nasil-olusturulur\/"},"wordCount":2753,"commentCount":0,"publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"articleSection":["Ubuntu"],"inLanguage":"tr","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/fatihsoysal.com\/blog\/ubuntu-22-04te-apache-icin-kendi-kendine-imzalanmis-self-signed-bir-ssl-sertifikasi-nasil-olusturulur\/#respond"]}],"copyrightYear":"2025","copyrightHolder":{"@id":"https:\/\/fatihsoysal.com\/blog\/#organization"}},{"@type":"WebPage","@id":"https:\/\/fatihsoysal.com\/blog\/ubuntu-22-04te-apache-icin-kendi-kendine-imzalanmis-self-signed-bir-ssl-sertifikasi-nasil-olusturulur\/","url":"https:\/\/fatihsoysal.com\/blog\/ubuntu-22-04te-apache-icin-kendi-kendine-imzalanmis-self-signed-bir-ssl-sertifikasi-nasil-olusturulur\/","name":"Ubuntu 22.04'te Apache i\u00e7in Kendi Kendine \u0130mzalanm\u0131\u015f (Self-Signed) Bir SSL Sertifikas\u0131 Nas\u0131l Olu\u015fturulur? - Kodlar\u0131n Gizemli D\u00fcnyas\u0131","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/#website"},"datePublished":"2025-11-02T04:40:45+00:00","breadcrumb":{"@id":"https:\/\/fatihsoysal.com\/blog\/ubuntu-22-04te-apache-icin-kendi-kendine-imzalanmis-self-signed-bir-ssl-sertifikasi-nasil-olusturulur\/#breadcrumb"},"inLanguage":"tr","potentialAction":[{"@type":"ReadAction","target":["https:\/\/fatihsoysal.com\/blog\/ubuntu-22-04te-apache-icin-kendi-kendine-imzalanmis-self-signed-bir-ssl-sertifikasi-nasil-olusturulur\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/fatihsoysal.com\/blog\/ubuntu-22-04te-apache-icin-kendi-kendine-imzalanmis-self-signed-bir-ssl-sertifikasi-nasil-olusturulur\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Anasayfa","item":"https:\/\/fatihsoysal.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Ubuntu 22.04’te Apache i\u00e7in Kendi Kendine \u0130mzalanm\u0131\u015f (Self-Signed) Bir SSL Sertifikas\u0131 Nas\u0131l Olu\u015fturulur?"}]},{"@type":"WebSite","@id":"https:\/\/fatihsoysal.com\/blog\/#website","url":"https:\/\/fatihsoysal.com\/blog\/","name":"Fatihsoysal.com","description":"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim","publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"tr"},{"@type":["Person","Organization"],"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1","name":"Fatih Soysal","image":{"@type":"ImageObject","inLanguage":"tr","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","contentUrl":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","width":512,"height":512,"caption":"Fatih Soysal"},"logo":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/"},"description":"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.","url":"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/"}]}},"yoast_meta":{"yoast_wpseo_title":"","yoast_wpseo_metadesc":"","yoast_wpseo_canonical":""},"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/33385","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/comments?post=33385"}],"version-history":[{"count":1,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/33385\/revisions"}],"predecessor-version":[{"id":33386,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/33385\/revisions\/33386"}],"wp:attachment":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/media?parent=33385"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/categories?post=33385"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/tags?post=33385"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}