{"id":33584,"date":"2025-11-04T20:42:51","date_gmt":"2025-11-04T17:42:51","guid":{"rendered":"https:\/\/fatihsoysal.com\/blog\/?p=33584"},"modified":"2025-11-04T20:42:51","modified_gmt":"2025-11-04T17:42:51","slug":"ssl-dogrulamasi-nedir-ve-neden-onemlidir","status":"publish","type":"post","link":"https:\/\/fatihsoysal.com\/blog\/ssl-dogrulamasi-nedir-ve-neden-onemlidir\/","title":{"rendered":"SSL Do\u011frulamas\u0131 Nedir ve Neden \u00d6nemlidir?"},"content":{"rendered":"

<\/p>\n

\u0130nternet \u00fczerindeki ileti\u015fim, \u00f6zellikle hassas verilerin (\u015fifreler, kredi kart\u0131 bilgileri vb.) aktar\u0131ld\u0131\u011f\u0131 durumlarda, g\u00fcvenli olmak zorundad\u0131r. Bu g\u00fcvenli\u011fi sa\u011flaman\u0131n temel yollar\u0131ndan biri, SSL\/TLS protokolleridir<\/strong>. Ancak, sadece verileri \u015fifrelemek yeterli de\u011fildir; ayn\u0131 zamanda ba\u011fland\u0131\u011f\u0131n\u0131z sunucunun iddia etti\u011fi sunucu oldu\u011fundan da emin olmal\u0131s\u0131n\u0131z. \u0130\u015fte bu noktada SSL Do\u011frulamas\u0131 (SSL Verification)<\/strong> devreye girer. Bu rehberde, SSL do\u011frulamas\u0131n\u0131n ne oldu\u011funu, neden bu kadar \u00f6nemli oldu\u011funu ve farkl\u0131 platformlarda nas\u0131l etkinle\u015ftirilece\u011fini detayl\u0131ca inceleyece\u011fiz.<\/p>\n

SSL Do\u011frulamas\u0131 Nedir ve Neden \u00d6nemlidir?<\/h2>\n

SSL (Secure Sockets Layer) ve onun daha modern ve g\u00fcvenli halefi olan TLS (Transport Layer Security), internet \u00fczerinden veri al\u0131\u015fveri\u015fini \u015fifreleyen ve kimlik do\u011frulamas\u0131n\u0131 sa\u011flayan kriptografik protokollerdir. Bir web sitesine veya API’ye ba\u011fland\u0131\u011f\u0131n\u0131zda, taray\u0131c\u0131n\u0131z veya uygulaman\u0131z, sunucunun kimli\u011fini do\u011frulamak i\u00e7in bir dizi kontrol yapar. Bu kontrollere genel olarak SSL Do\u011frulamas\u0131<\/strong> denir.<\/p>\n

SSL Do\u011frulama Nas\u0131l \u00c7al\u0131\u015f\u0131r?<\/h3>\n

SSL do\u011frulama s\u00fcreci, basitle\u015ftirilmi\u015f haliyle \u015fu ad\u0131mlar\u0131 i\u00e7erir:<\/p>\n

    \n
  1. Sertifika Sunumu:<\/strong> \u0130stemci (taray\u0131c\u0131, uygulama vb.) bir sunucuya ba\u011fland\u0131\u011f\u0131nda, sunucu istemciye dijital bir sertifika sunar. Bu sertifika, sunucunun kimli\u011fini ve a\u00e7\u0131k anahtar\u0131n\u0131 i\u00e7erir.<\/li>\n
  2. G\u00fcven Zinciri Kontrol\u00fc:<\/strong> \u0130stemci, sunulan sertifikay\u0131 veren Sertifika Otoritesinin (CA – Certificate Authority) g\u00fcvenilir olup olmad\u0131\u011f\u0131n\u0131 kontrol eder. Bu kontrol, sertifikan\u0131n bir k\u00f6k CA’dan ba\u015flayarak, ara CA’lar \u00fczerinden sunucu sertifikas\u0131na kadar uzanan bir “g\u00fcven zinciri” (chain of trust) arac\u0131l\u0131\u011f\u0131yla yap\u0131l\u0131r. \u0130stemcinin i\u015fletim sistemi veya taray\u0131c\u0131s\u0131, \u00f6nceden y\u00fcklenmi\u015f g\u00fcvenilir k\u00f6k CA sertifikalar\u0131n\u0131n bir deposuna (trust store) sahiptir.<\/li>\n
  3. Sertifika Ge\u00e7erlili\u011fi:<\/strong> \u0130stemci, sertifikan\u0131n s\u00fcresinin dolup dolmad\u0131\u011f\u0131n\u0131, iptal edilip edilmedi\u011fini (CRL – Certificate Revocation List veya OCSP – Online Certificate Status Protocol arac\u0131l\u0131\u011f\u0131yla) ve sertifikadaki alan ad\u0131n\u0131n (\u00f6rne\u011fin, example.com<\/code>) ba\u011fland\u0131\u011f\u0131 sunucunun alan ad\u0131yla e\u015fle\u015fip e\u015fle\u015fmedi\u011fini kontrol eder.<\/li>\n
  4. Kriptografik Kontroller:<\/strong> \u0130stemci, sertifikan\u0131n b\u00fct\u00fcnl\u00fc\u011f\u00fcn\u00fc ve sunucunun sertifikaya sahip oldu\u011funu kan\u0131tlamak i\u00e7in kriptografik imzalar\u0131 do\u011frular.<\/li>\n<\/ol>\n

    T\u00fcm bu kontroller ba\u015far\u0131l\u0131 olursa, istemci sunucunun kimli\u011fine g\u00fcvenir ve \u015fifreli ileti\u015fimi ba\u015flat\u0131r. Herhangi bir ad\u0131mda bir hata olu\u015fursa, istemci genellikle bir uyar\u0131 g\u00f6sterir (\u00f6rne\u011fin, taray\u0131c\u0131da “Bu ba\u011flant\u0131 g\u00fcvenli de\u011fil” mesaj\u0131) veya ba\u011flant\u0131y\u0131 reddeder.<\/p>\n

    Neden Bu Kadar \u00d6nemlidir?<\/h3>\n

    SSL do\u011frulamas\u0131, internet g\u00fcvenli\u011finin temel bir dire\u011fidir \u00e7\u00fcnk\u00fc:<\/p>\n

      \n
    • Man-in-the-Middle (MITM) Sald\u0131r\u0131lar\u0131n\u0131 \u00d6nler:<\/strong> Do\u011frulama olmadan, k\u00f6t\u00fc niyetli bir \u00fc\u00e7\u00fcnc\u00fc taraf, kendisini me\u015fru sunucu gibi g\u00f6stererek sizinle sunucu aras\u0131na girebilir. Verilerinizi \u015fifreliyor olsan\u0131z bile, bu veriler asl\u0131nda sald\u0131rgan\u0131n anahtar\u0131yla \u015fifrelenir ve sald\u0131rgan taraf\u0131ndan okunabilir. SSL do\u011frulamas\u0131, sunucunun kimli\u011fini teyit ederek bu t\u00fcr sald\u0131r\u0131lar\u0131 engeller.<\/li>\n
    • Veri B\u00fct\u00fcnl\u00fc\u011f\u00fc ve Gizlili\u011fi:<\/strong> Sunucunun kimli\u011finden emin olmak, g\u00f6nderdi\u011finiz hassas verilerin (bankac\u0131l\u0131k bilgileri, ki\u015fisel veriler vb.) do\u011fru ve g\u00fcvenilir bir hedefe ula\u015ft\u0131\u011f\u0131n\u0131 garanti eder.<\/li>\n
    • Kimlik Av\u0131 (Phishing) ve Sahte Sitelerden Koruma:<\/strong> Sahte web siteleri genellikle me\u015fru sitelere benzeyecek \u015fekilde tasarlan\u0131r. SSL do\u011frulamas\u0131, sitenin ger\u00e7ekten iddia etti\u011fi kurulu\u015f taraf\u0131ndan i\u015fletildi\u011fini teyit ederek sizi bu t\u00fcr doland\u0131r\u0131c\u0131l\u0131klardan korur.<\/li>\n
    • Yasal ve D\u00fczenleyici Uyum:<\/strong> Bir\u00e7ok sekt\u00f6r (finans, sa\u011fl\u0131k vb.) ve veri koruma d\u00fczenlemesi (GDPR, PCI DSS) g\u00fcvenli ileti\u015fim ve sunucu kimlik do\u011frulamas\u0131n\u0131 zorunlu k\u0131lar.<\/li>\n<\/ul>\n

      Farkl\u0131 Ortamlarda SSL Do\u011frulamay\u0131 Etkinle\u015ftirme<\/h2>\n

      \u00c7o\u011fu modern taray\u0131c\u0131 ve k\u00fct\u00fcphane, SSL do\u011frulamas\u0131n\u0131 varsay\u0131lan olarak etkinle\u015ftirir. Ancak, baz\u0131 durumlarda (\u00f6zellikle geli\u015ftirme ortamlar\u0131nda veya \u00f6zel sertifikalarla \u00e7al\u0131\u015f\u0131rken) bu ayarlar\u0131 y\u00f6netmeniz gerekebilir.<\/p>\n

      Web Taray\u0131c\u0131lar\u0131nda<\/h3>\n

      Modern web taray\u0131c\u0131lar\u0131 (Chrome, Firefox, Safari, Edge) SSL do\u011frulamas\u0131n\u0131 otomatik olarak ve varsay\u0131lan olarak etkinle\u015ftirir. Bir web sitesinin sertifikas\u0131 do\u011frulanamad\u0131\u011f\u0131nda, taray\u0131c\u0131 kullan\u0131c\u0131ya a\u00e7\u0131k bir g\u00fcvenlik uyar\u0131s\u0131 g\u00f6sterir ve genellikle siteye eri\u015fimi engeller veya ek bir onay gerektirir. Bu uyar\u0131lar genellikle \u015funlar\u0131 belirtir:<\/p>\n

        \n
      • Sertifikan\u0131n s\u00fcresi dolmu\u015f.<\/li>\n
      • Sertifika g\u00fcvenilir bir CA taraf\u0131ndan imzalanmam\u0131\u015f (genellikle kendi imzal\u0131 sertifikalarda g\u00f6r\u00fcl\u00fcr).<\/li>\n
      • Sertifikadaki alan ad\u0131, ziyaret edilen alan ad\u0131yla e\u015fle\u015fmiyor.<\/li>\n<\/ul>\n

        Bu uyar\u0131lar\u0131 g\u00f6rd\u00fc\u011f\u00fcn\u00fczde, genellikle siteye devam etmemeniz tavsiye edilir, \u00e7\u00fcnk\u00fc bu bir g\u00fcvenlik riskine i\u015faret edebilir.<\/p>\n

        Komut Sat\u0131r\u0131 Ara\u00e7lar\u0131nda (cURL ile)<\/h3>\n

        cURL<\/code>, URL s\u00f6zdizimi ile veri aktarmak i\u00e7in kullan\u0131lan g\u00fc\u00e7l\u00fc bir komut sat\u0131r\u0131 arac\u0131d\u0131r. Varsay\u0131lan olarak, cURL<\/code> SSL do\u011frulamas\u0131n\u0131 etkinle\u015ftirir.<\/p>\n

        Varsay\u0131lan Do\u011frulama<\/h4>\n

        G\u00fcvenli bir HTTPS adresine istek g\u00f6nderdi\u011finizde, cURL<\/code> varsay\u0131lan olarak sunucu sertifikas\u0131n\u0131 do\u011frular:<\/p>\n

        curl https:\/\/www.google.com\n<\/code><\/pre>\n
        E\u011fer sertifika do\u011frulanamazsa (\u00f6rne\u011fin, kendi imzal\u0131 bir sertifika kullan\u0131yorsan\u0131z), cURL<\/code> bir hata mesaj\u0131 ile ba\u015far\u0131s\u0131z olur:<\/p>\n
        curl https:\/\/localhost:8443\n
        Hata \u00f6rne\u011fi:<\/h2>\n
        curl: (60) SSL certificate problem: self signed certificate<\/h2>\n
        More details here: https:\/\/curl.haxx.se\/docs\/sslcerts.html<\/h2>\n
        curl failed to verify the legitimacy of the server and therefore could not<\/h2>\n
        establish a secure connection to it. To learn more about this situation and<\/h2>\n
        how to fix it, please visit the web page mentioned above.<\/h2>\n<\/code><\/pre>\n
        \u00d6zel CA Sertifikas\u0131 Belirtme<\/h4>\n
        Kendi imzal\u0131 sertifikalarla veya \u00f6zel bir CA taraf\u0131ndan imzalanm\u0131\u015f sertifikalarla \u00e7al\u0131\u015f\u0131yorsan\u0131z, --cacert<\/code> parametresi ile g\u00fcvenilir CA sertifikas\u0131n\u0131 belirtebilirsiniz:<\/p>\n
        curl --cacert \/path\/to\/your_ca_cert.pem https:\/\/localhost:8443\n<\/code><\/pre>\n
        Do\u011frulamay\u0131 Devre D\u0131\u015f\u0131 B\u0131rakma (Tavsiye Edilmez!)<\/h4>\n
        Kesinlikle tavsiye edilmemesine ra\u011fmen<\/strong>, geli\u015ftirme veya test ortamlar\u0131nda bazen --insecure<\/code> veya -k<\/code> parametresi ile SSL do\u011frulamas\u0131n\u0131 devre d\u0131\u015f\u0131 b\u0131rakabilirsiniz. Bu, sunucu sertifikas\u0131 ge\u00e7erli olmasa bile ba\u011flant\u0131 kurar:<\/p>\n
        curl --insecure https:\/\/localhost:8443\n
        veya<\/h2>\ncurl -k https:\/\/localhost:8443\n<\/code><\/pre>\n
        Bu y\u00f6ntem, MITM sald\u0131r\u0131lar\u0131na kar\u015f\u0131 savunmas\u0131z kalman\u0131za neden oldu\u011fu i\u00e7in \u00fcretim ortamlar\u0131nda ASLA kullan\u0131lmamal\u0131d\u0131r<\/strong>.<\/p>\n
        Programlama Dillerinde<\/h3>\n
        Python (requests<\/code> k\u00fct\u00fcphanesi ile)<\/h4>\n
        Python’da requests<\/code> k\u00fct\u00fcphanesi, HTTP istekleri yapmak i\u00e7in pop\u00fcler bir se\u00e7imdir ve SSL do\u011frulamas\u0131n\u0131 varsay\u0131lan olarak etkinle\u015ftirir.<\/p>\n
        Varsay\u0131lan Do\u011frulama<\/h5>\n
        import requests\n\ntry:\n    response = requests.get(\"https:\/\/www.google.com\")\n    print(\"Ba\u011flant\u0131 ba\u015far\u0131l\u0131!\")\n    print(response.status_code)\nexcept requests.exceptions.SSLError as e:\n    print(f\"SSL Hatas\u0131: {e}\")\nexcept requests.exceptions.ConnectionError as e:\n    print(f\"Ba\u011flant\u0131 Hatas\u0131: {e}\")\n<\/code><\/pre>\n
        \u00d6zel CA Sertifikas\u0131 Belirtme<\/h5>\n
        verify<\/code> parametresini kullanarak \u00f6zel bir CA sertifikas\u0131 dosyas\u0131 belirtebilirsiniz:<\/p>\n
        import requests\n\n
        Kendi imzal\u0131 sertifika kullanan bir sunucuya ba\u011flan\u0131rken<\/h2>\n
        sunucunun sertifikas\u0131n\u0131 imzalayan CA'n\u0131n sertifikas\u0131n\u0131 belirtin.<\/h2>\ntry:\n    response = requests.get(\"https:\/\/localhost:8443\", verify=\"\/path\/to\/your_ca_cert.pem\")\n    print(\"Ba\u011flant\u0131 ba\u015far\u0131l\u0131!\")\n    print(response.status_code)\nexcept requests.exceptions.SSLError as e:\n    print(f\"SSL Hatas\u0131: {e}\")\n<\/code><\/pre>\n
        Do\u011frulamay\u0131 Devre D\u0131\u015f\u0131 B\u0131rakma (Tavsiye Edilmez!)<\/h5>\n
        verify=False<\/code> ayarlayarak do\u011frulamay\u0131 devre d\u0131\u015f\u0131 b\u0131rakabilirsiniz. Bu, bir uyar\u0131 mesaj\u0131 \u00fcretir ve g\u00fcvenlik riski ta\u015f\u0131r.<\/strong><\/p>\n
        import requests\nimport urllib3 # requests k\u00fct\u00fcphanesi urllib3'\u00fc kullan\u0131r\n\n
        SSL uyar\u0131lar\u0131n\u0131 kapatmak i\u00e7in (sadece geli\u015ftirme ortam\u0131nda)<\/h2>\nurllib3.disable_warnings(urllib3.exceptions.InsecureRequestWarning)\n\ntry:\n    response = requests.get(\"https:\/\/localhost:8443\", verify=False)\n    print(\"Ba\u011flant\u0131 ba\u015far\u0131l\u0131 (do\u011frulama devre d\u0131\u015f\u0131)!\")\n    print(response.status_code)\nexcept requests.exceptions.SSLError as e:\n    print(f\"SSL Hatas\u0131: {e}\")\n<\/code><\/pre>\n
        Node.js (https<\/code> mod\u00fcl\u00fc ile)<\/h4>\n
        Node.js’in yerle\u015fik https<\/code> mod\u00fcl\u00fc de SSL do\u011frulamay\u0131 destekler.<\/p>\n
        Varsay\u0131lan Do\u011frulama<\/h5>\n
        const https = require('https');\n\nhttps.get('https:\/\/www.google.com', (res) => {\n  console.log('statusCode:', res.statusCode);\n  res.on('data', (d) => {\n    \/\/ process.stdout.write(d);\n  });\n}).on('error', (e) => {\n  console.error('SSL Hatas\u0131 veya Ba\u011flant\u0131 Hatas\u0131:', e);\n});\n<\/code><\/pre>\n
        \u00d6zel CA Sertifikas\u0131 Belirtme<\/h5>\n
        ca<\/code> se\u00e7ene\u011fi ile \u00f6zel CA sertifikalar\u0131n\u0131 belirtebilirsiniz:<\/p>\n
        const https = require('https');\nconst fs = require('fs');\n\nconst options = {\n  hostname: 'localhost',\n  port: 8443,\n  path: '\/',\n  method: 'GET',\n  \/\/ Kendi CA sertifikan\u0131z\u0131 y\u00fckleyin\n  ca: [fs.readFileSync('\/path\/to\/your_ca_cert.pem')]\n};\n\nhttps.request(options, (res) => {\n  console.log('statusCode:', res.statusCode);\n  res.on('data', (d) => {\n    \/\/ process.stdout.write(d);\n  });\n}).on('error', (e) => {\n  console.error('SSL Hatas\u0131 veya Ba\u011flant\u0131 Hatas\u0131:', e);\n}).end();\n<\/code><\/pre>\n
        Do\u011frulamay\u0131 Devre D\u0131\u015f\u0131 B\u0131rakma (Tavsiye Edilmez!)<\/h5>\n
        rejectUnauthorized: false<\/code> se\u00e7ene\u011fi ile do\u011frulamay\u0131 devre d\u0131\u015f\u0131 b\u0131rakabilirsiniz. Bu da g\u00fcvenlik riski ta\u015f\u0131r.<\/strong><\/p>\n
        const https = require('https');\n\nconst options = {\n  hostname: 'localhost',\n  port: 8443,\n  path: '\/',\n  method: 'GET',\n  \/\/ Do\u011frulamay\u0131 devre d\u0131\u015f\u0131 b\u0131rak\n  rejectUnauthorized: false\n};\n\nhttps.request(options, (res) => {\n  console.log('statusCode:', res.statusCode);\n  res.on('data', (d) => {\n    \/\/ process.stdout.write(d);\n  });\n}).on('error', (e) => {\n  console.error('SSL Hatas\u0131 veya Ba\u011flant\u0131 Hatas\u0131:', e);\n}).end();\n<\/code><\/pre>\n
        PHP (cURL uzant\u0131s\u0131 ile)<\/h4>\n
        PHP’de cURL<\/code> uzant\u0131s\u0131, HTTP istekleri yapmak i\u00e7in yayg\u0131n olarak kullan\u0131l\u0131r ve SSL do\u011frulamas\u0131n\u0131 yap\u0131land\u0131rma se\u00e7enekleri sunar.<\/p>\n
        Varsay\u0131lan Do\u011frulama<\/h5>\n
        PHP’nin cURL<\/code> uzant\u0131s\u0131, uygun \u015fekilde yap\u0131land\u0131r\u0131ld\u0131\u011f\u0131nda (\u00f6rne\u011fin, php.ini<\/code> dosyas\u0131nda curl.cainfo<\/code> veya openssl.cafile<\/code> belirtilerek) varsay\u0131lan olarak SSL do\u011frulamas\u0131 yapar.<\/p>\n
        \n<\/code><\/pre>\n
        \u00d6zel CA Sertifikas\u0131 Belirtme<\/h5>\n
        CURLOPT_CAINFO<\/code> ve CURLOPT_SSL_VERIFYPEER<\/code> se\u00e7eneklerini kullanarak \u00f6zel CA sertifikas\u0131 belirtebilirsiniz:<\/p>\n
        \n<\/code><\/pre>\n
        Do\u011frulamay\u0131 Devre D\u0131\u015f\u0131 B\u0131rakma (Tavsiye Edilmez!)<\/h5>\n
        CURLOPT_SSL_VERIFYPEER<\/code> ve CURLOPT_SSL_VERIFYHOST<\/code> se\u00e7eneklerini false<\/code> veya 0<\/code> olarak ayarlayarak do\u011frulamay\u0131 devre d\u0131\u015f\u0131 b\u0131rakabilirsiniz. Bu, g\u00fcvenlik riski ta\u015f\u0131r ve \u00f6nerilmez.<\/strong><\/p>\n
        \n<\/code><\/pre>\n
        Sorun Giderme ve En \u0130yi Uygulamalar<\/h2>\n
        S\u0131k Kar\u015f\u0131la\u015f\u0131lan SSL Do\u011frulama Hatalar\u0131<\/h3>\n
          \n
        • Sertifika S\u00fcresi Dolmu\u015f:<\/strong> Sertifikalar belirli bir s\u00fcre i\u00e7in ge\u00e7erlidir. S\u00fcresi dolan sertifikalar ge\u00e7ersiz say\u0131l\u0131r.<\/li>\n
        • Alan Ad\u0131 Uyu\u015fmazl\u0131\u011f\u0131 (Hostname Mismatch):<\/strong> Sertifikada belirtilen alan ad\u0131 (Common Name veya Subject Alternative Name), ba\u011flanmaya \u00e7al\u0131\u015ft\u0131\u011f\u0131n\u0131z alan ad\u0131yla e\u015fle\u015fmiyorsa bu hata olu\u015fur.<\/li>\n
        • G\u00fcvenilmeyen Sertifika Otoritesi:<\/strong> Sertifikay\u0131 imzalayan CA, istemcinin g\u00fcven deposunda bulunmuyorsa veya g\u00fcven zinciri tamamlanam\u0131yorsa bu hata olu\u015fur. Genellikle kendi imzal\u0131 sertifikalarda g\u00f6r\u00fcl\u00fcr.<\/li>\n
        • Sertifika \u0130ptal Edilmi\u015f:<\/strong> Sertifika, CA taraf\u0131ndan iptal edilmi\u015f olabilir (\u00f6rne\u011fin, \u00f6zel anahtar\u0131n ele ge\u00e7irilmesi durumunda).<\/li>\n
        • Eksik Ara Sertifikalar:<\/strong> Sunucu, k\u00f6k CA ile kendi sertifikas\u0131 aras\u0131ndaki ara (intermediate) sertifikalar\u0131 do\u011fru \u015fekilde g\u00f6ndermezse, istemci g\u00fcven zincirini tamamlayamaz.<\/li>\n<\/ul>\n
          Kendi \u0130mzal\u0131 Sertifikalar (Self-Signed Certificates)<\/h3>\n
          Kendi imzal\u0131 sertifikalar, bir CA taraf\u0131ndan imzalanmak yerine, do\u011frudan kendi anahtar\u0131n\u0131zla imzalad\u0131\u011f\u0131n\u0131z sertifikalard\u0131r. Geli\u015ftirme ve test ortamlar\u0131nda kullan\u0131\u015fl\u0131d\u0131rlar ancak web taray\u0131c\u0131lar\u0131 ve \u00e7o\u011fu istemci taraf\u0131ndan varsay\u0131lan olarak g\u00fcvenilmezler. Bu t\u00fcr sertifikalar\u0131 kullan\u0131rken, istemcinin g\u00fcven deposuna kendi imzal\u0131 sertifikay\u0131 veya onu imzalayan CA sertifikas\u0131n\u0131 eklemeniz veya yukar\u0131daki \u00f6rneklerde g\u00f6sterildi\u011fi gibi istemci taraf\u0131nda \u00f6zel CA yolunu belirtmeniz gerekir.<\/p>\n
          Do\u011frulamay\u0131 Devre D\u0131\u015f\u0131 B\u0131rakman\u0131n Riskleri<\/h3>\n
          Daha \u00f6nce de belirtildi\u011fi gibi, SSL do\u011frulamas\u0131n\u0131 devre d\u0131\u015f\u0131 b\u0131rakmak, uygulaman\u0131z\u0131 veya kullan\u0131c\u0131lar\u0131n\u0131z\u0131 MITM sald\u0131r\u0131lar\u0131na, veri h\u0131rs\u0131zl\u0131\u011f\u0131na ve kimlik av\u0131na kar\u015f\u0131 savunmas\u0131z b\u0131rak\u0131r. Bu, genellikle “\u00e7al\u0131\u015f\u0131yor gibi g\u00f6r\u00fcnen” ancak ciddi g\u00fcvenlik a\u00e7\u0131klar\u0131 i\u00e7eren bir \u00e7\u00f6z\u00fcmd\u00fcr. \u00dcretim ortamlar\u0131nda ASLA kullan\u0131lmamal\u0131d\u0131r.<\/strong> Geli\u015ftirme ortamlar\u0131nda bile, yaln\u0131zca ge\u00e7ici \u00e7\u00f6z\u00fcmler i\u00e7in ve risklerin tam olarak fark\u0131nda olarak kullan\u0131lmal\u0131d\u0131r.<\/p>\n
          Sertifika Sabitleme (Certificate Pinning)<\/h3>\n
          Sertifika sabitleme, uygulaman\u0131n yaln\u0131zca belirli, \u00f6nceden tan\u0131mlanm\u0131\u015f sertifikalara veya CA’lara g\u00fcvenmesini sa\u011flayan geli\u015fmi\u015f bir g\u00fcvenlik \u00f6nlemidir. Bu, g\u00fcven deposundaki di\u011fer sertifikalar ge\u00e7erli olsa bile, uygulaman\u0131n yaln\u0131zca “sabitlenmi\u015f” sertifikalara g\u00fcvenmesini sa\u011flayarak ek bir g\u00fcvenlik katman\u0131 ekler. Ancak yanl\u0131\u015f yap\u0131land\u0131r\u0131ld\u0131\u011f\u0131nda bak\u0131m zorluklar\u0131na ve eri\u015fim sorunlar\u0131na yol a\u00e7abilir.<\/p>\n
          Sonu\u00e7<\/h2>\n
          SSL do\u011frulamas\u0131, internet g\u00fcvenli\u011finin temel bir bile\u015fenidir. Ba\u011fland\u0131\u011f\u0131n\u0131z sunucunun kimli\u011fini teyit ederek, verilerinizin do\u011fru hedefe g\u00fcvenli bir \u015fekilde ula\u015ft\u0131\u011f\u0131ndan emin olman\u0131z\u0131 sa\u011flar. \u00c7o\u011fu modern sistemde varsay\u0131lan olarak etkin olsa da, geli\u015ftirme ve \u00f6zel durumlar i\u00e7in nas\u0131l y\u00f6netilece\u011fini anlamak kritik \u00f6neme sahiptir. G\u00fcvenlikten \u00f6d\u00fcn vermemek ad\u0131na, do\u011frulamay\u0131 devre d\u0131\u015f\u0131 b\u0131rakmaktan ka\u00e7\u0131nmak ve her zaman g\u00fcvenilir sertifikalar kullanmak en iyi uygulamad\u0131r.<\/p>\n
          S\u0131k\u00e7a Sorulan Sorular (SSS)<\/h3>\n
          1. Neden SSL do\u011frulamas\u0131 ba\u015far\u0131s\u0131z olur?<\/h4>\n
          En yayg\u0131n nedenler aras\u0131nda sertifikan\u0131n s\u00fcresinin dolmas\u0131, alan ad\u0131 uyu\u015fmazl\u0131\u011f\u0131, g\u00fcvenilmeyen bir Sertifika Otoritesi taraf\u0131ndan imzalanm\u0131\u015f olmas\u0131 veya eksik ara sertifikalar\u0131n bulunmas\u0131 yer al\u0131r. Sunucu taraf\u0131nda sertifika kurulumunun do\u011fru yap\u0131ld\u0131\u011f\u0131ndan ve istemci taraf\u0131nda g\u00fcvenilir CA sertifikalar\u0131n\u0131n g\u00fcncel oldu\u011fundan emin olun.<\/p>\n
          2. --insecure<\/code> veya verify=False<\/code> kullanmak g\u00fcvenli mi?<\/h4>\n
          Hay\u0131r, g\u00fcvenli de\u011fildir. Bu se\u00e7enekler SSL do\u011frulamas\u0131n\u0131 devre d\u0131\u015f\u0131 b\u0131rak\u0131r ve uygulaman\u0131z\u0131 Man-in-the-Middle (MITM) sald\u0131r\u0131lar\u0131na kar\u015f\u0131 savunmas\u0131z hale getirir. Yaln\u0131zca geli\u015ftirme veya test ortamlar\u0131nda, risklerin bilincinde olarak ve asla \u00fcretimde kullan\u0131lmamal\u0131d\u0131r.<\/p>\n
          3. Kendi imzal\u0131 sertifikalarla nas\u0131l \u00e7al\u0131\u015f\u0131l\u0131r?<\/h4>\n
          Kendi imzal\u0131 sertifikalarla \u00e7al\u0131\u015f\u0131rken, istemci uygulaman\u0131z\u0131n (veya i\u015fletim sisteminizin) bu sertifikay\u0131 veya onu imzalayan kendi CA sertifikan\u0131z\u0131 g\u00fcvenilir olarak tan\u0131mas\u0131 gerekir. Bu genellikle istemcinin g\u00fcven deposuna sertifikay\u0131 ekleyerek veya kodda --cacert<\/code> (cURL), verify='\/path\/to\/cert.pem'<\/code> (Python) veya ca: [...]<\/code> (Node.js) gibi parametrelerle sertifika yolunu a\u00e7\u0131k\u00e7a belirterek yap\u0131l\u0131r.<\/p>\n
          4. SSL do\u011frulama performans\u0131 etkiler mi?<\/h4>\n
          SSL\/TLS el s\u0131k\u0131\u015fmas\u0131 ve sertifika do\u011frulama, ba\u015flang\u0131\u00e7ta k\u00fc\u00e7\u00fck bir performans y\u00fck\u00fc getirir (ek i\u015flemci g\u00fcc\u00fc ve a\u011f trafi\u011fi). Ancak, modern donan\u0131m ve optimize edilmi\u015f protokoller sayesinde bu etki genellikle ihmal edilebilir d\u00fczeydedir ve sa\u011flad\u0131\u011f\u0131 g\u00fcvenlik faydalar\u0131 g\u00f6z \u00f6n\u00fcne al\u0131nd\u0131\u011f\u0131nda kabul edilebilir. Bir kez ba\u011flant\u0131 kurulduktan sonra, \u015fifreleme ve do\u011frulaman\u0131n ek y\u00fck\u00fc minimaldir.<\/p>\n
          5. K\u00f6k sertifikalar nereden gelir?<\/h4>\n
          K\u00f6k sertifikalar, i\u015fletim sistemleri (Windows, macOS, Linux da\u011f\u0131t\u0131mlar\u0131) ve web taray\u0131c\u0131lar\u0131 (Chrome, Firefox, Edge) ile birlikte y\u00fcklenen g\u00fcven depolar\u0131nda (trust stores) bulunur. Bu depolar, d\u00fcnya \u00e7ap\u0131nda tan\u0131nan ve s\u0131k\u0131 denetimlerden ge\u00e7en Sertifika Otoritelerinin (CA’lar) k\u00f6k sertifikalar\u0131n\u0131 i\u00e7erir.<\/p>\n
          <\/body><\/p>\n","protected":false},"excerpt":{"rendered":"\u0130nternet \u00fczerindeki ileti\u015fim, \u00f6zellikle hassas verilerin (\u015fifreler, kredi kart\u0131 bilgileri vb.) aktar\u0131ld\u0131\u011f\u0131 durumlarda, g\u00fcvenli olmak zoru","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"csco_page_header_type":"","csco_page_load_nextpost":"","csco_page_subscribe_form":"","csco_page_contact_form":"","footnotes":""},"categories":[874],"tags":[],"class_list":{"0":"post-33584","1":"post","2":"type-post","3":"status-publish","4":"format-standard","6":"category-server","7":"cs-entry","8":"cs-video-wrap"},"yoast_head":"\nSSL Do\u011frulamas\u0131 Nedir ve Neden \u00d6nemlidir? - Kodlar\u0131n Gizemli D\u00fcnyas\u0131<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/fatihsoysal.com\/blog\/ssl-dogrulamasi-nedir-ve-neden-onemlidir\/\" \/>\n<meta property=\"og:locale\" content=\"tr_TR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"SSL Do\u011frulamas\u0131 Nedir ve Neden \u00d6nemlidir?\" \/>\n<meta property=\"og:description\" content=\"\u0130nternet \u00fczerindeki ileti\u015fim, \u00f6zellikle hassas verilerin (\u015fifreler, kredi kart\u0131 bilgileri vb.) aktar\u0131ld\u0131\u011f\u0131 durumlarda, g\u00fcvenli olmak zoru\" \/>\n<meta property=\"og:url\" content=\"https:\/\/fatihsoysal.com\/blog\/ssl-dogrulamasi-nedir-ve-neden-onemlidir\/\" \/>\n<meta property=\"og:site_name\" content=\"Kodlar\u0131n Gizemli D\u00fcnyas\u0131\" \/>\n<meta property=\"article:published_time\" content=\"2025-11-04T17:42:51+00:00\" \/>\n<meta name=\"author\" content=\"Fatih Soysal\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Yazan:\" \/>\n\t<meta name=\"twitter:data1\" content=\"Fatih Soysal\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tahmini okuma s\u00fcresi\" \/>\n\t<meta name=\"twitter:data2\" content=\"12 dakika\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/ssl-dogrulamasi-nedir-ve-neden-onemlidir\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/ssl-dogrulamasi-nedir-ve-neden-onemlidir\/\"},\"author\":{\"name\":\"Fatih Soysal\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"headline\":\"SSL Do\u011frulamas\u0131 Nedir ve Neden \u00d6nemlidir?\",\"datePublished\":\"2025-11-04T17:42:51+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/ssl-dogrulamasi-nedir-ve-neden-onemlidir\/\"},\"wordCount\":2020,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"articleSection\":[\"Server\"],\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/ssl-dogrulamasi-nedir-ve-neden-onemlidir\/#respond\"]}],\"copyrightYear\":\"2025\",\"copyrightHolder\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/ssl-dogrulamasi-nedir-ve-neden-onemlidir\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/ssl-dogrulamasi-nedir-ve-neden-onemlidir\/\",\"name\":\"SSL Do\u011frulamas\u0131 Nedir ve Neden \u00d6nemlidir? - Kodlar\u0131n Gizemli D\u00fcnyas\u0131\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\"},\"datePublished\":\"2025-11-04T17:42:51+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/ssl-dogrulamasi-nedir-ve-neden-onemlidir\/#breadcrumb\"},\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/ssl-dogrulamasi-nedir-ve-neden-onemlidir\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/ssl-dogrulamasi-nedir-ve-neden-onemlidir\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Anasayfa\",\"item\":\"https:\/\/fatihsoysal.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"SSL Do\u011frulamas\u0131 Nedir ve Neden \u00d6nemlidir?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/\",\"name\":\"Fatihsoysal.com\",\"description\":\"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim\",\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"tr\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\",\"name\":\"Fatih Soysal\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"tr\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"contentUrl\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"width\":512,\"height\":512,\"caption\":\"Fatih Soysal\"},\"logo\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\"},\"description\":\"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"SSL Do\u011frulamas\u0131 Nedir ve Neden \u00d6nemlidir? - Kodlar\u0131n Gizemli D\u00fcnyas\u0131","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/fatihsoysal.com\/blog\/ssl-dogrulamasi-nedir-ve-neden-onemlidir\/","og_locale":"tr_TR","og_type":"article","og_title":"SSL Do\u011frulamas\u0131 Nedir ve Neden \u00d6nemlidir?","og_description":"\u0130nternet \u00fczerindeki ileti\u015fim, \u00f6zellikle hassas verilerin (\u015fifreler, kredi kart\u0131 bilgileri vb.) aktar\u0131ld\u0131\u011f\u0131 durumlarda, g\u00fcvenli olmak zoru","og_url":"https:\/\/fatihsoysal.com\/blog\/ssl-dogrulamasi-nedir-ve-neden-onemlidir\/","og_site_name":"Kodlar\u0131n Gizemli D\u00fcnyas\u0131","article_published_time":"2025-11-04T17:42:51+00:00","author":"Fatih Soysal","twitter_card":"summary_large_image","twitter_misc":{"Yazan:":"Fatih Soysal","Tahmini okuma s\u00fcresi":"12 dakika"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/fatihsoysal.com\/blog\/ssl-dogrulamasi-nedir-ve-neden-onemlidir\/#article","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/ssl-dogrulamasi-nedir-ve-neden-onemlidir\/"},"author":{"name":"Fatih Soysal","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"headline":"SSL Do\u011frulamas\u0131 Nedir ve Neden \u00d6nemlidir?","datePublished":"2025-11-04T17:42:51+00:00","mainEntityOfPage":{"@id":"https:\/\/fatihsoysal.com\/blog\/ssl-dogrulamasi-nedir-ve-neden-onemlidir\/"},"wordCount":2020,"commentCount":0,"publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"articleSection":["Server"],"inLanguage":"tr","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/fatihsoysal.com\/blog\/ssl-dogrulamasi-nedir-ve-neden-onemlidir\/#respond"]}],"copyrightYear":"2025","copyrightHolder":{"@id":"https:\/\/fatihsoysal.com\/blog\/#organization"}},{"@type":"WebPage","@id":"https:\/\/fatihsoysal.com\/blog\/ssl-dogrulamasi-nedir-ve-neden-onemlidir\/","url":"https:\/\/fatihsoysal.com\/blog\/ssl-dogrulamasi-nedir-ve-neden-onemlidir\/","name":"SSL Do\u011frulamas\u0131 Nedir ve Neden \u00d6nemlidir? - Kodlar\u0131n Gizemli D\u00fcnyas\u0131","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/#website"},"datePublished":"2025-11-04T17:42:51+00:00","breadcrumb":{"@id":"https:\/\/fatihsoysal.com\/blog\/ssl-dogrulamasi-nedir-ve-neden-onemlidir\/#breadcrumb"},"inLanguage":"tr","potentialAction":[{"@type":"ReadAction","target":["https:\/\/fatihsoysal.com\/blog\/ssl-dogrulamasi-nedir-ve-neden-onemlidir\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/fatihsoysal.com\/blog\/ssl-dogrulamasi-nedir-ve-neden-onemlidir\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Anasayfa","item":"https:\/\/fatihsoysal.com\/blog\/"},{"@type":"ListItem","position":2,"name":"SSL Do\u011frulamas\u0131 Nedir ve Neden \u00d6nemlidir?"}]},{"@type":"WebSite","@id":"https:\/\/fatihsoysal.com\/blog\/#website","url":"https:\/\/fatihsoysal.com\/blog\/","name":"Fatihsoysal.com","description":"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim","publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"tr"},{"@type":["Person","Organization"],"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1","name":"Fatih Soysal","image":{"@type":"ImageObject","inLanguage":"tr","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","contentUrl":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","width":512,"height":512,"caption":"Fatih Soysal"},"logo":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/"},"description":"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.","url":"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/"}]}},"yoast_meta":{"yoast_wpseo_title":"","yoast_wpseo_metadesc":"","yoast_wpseo_canonical":""},"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/33584","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/comments?post=33584"}],"version-history":[{"count":1,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/33584\/revisions"}],"predecessor-version":[{"id":33585,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/33584\/revisions\/33585"}],"wp:attachment":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/media?parent=33584"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/categories?post=33584"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/tags?post=33584"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}