{"id":36318,"date":"2025-12-13T15:41:27","date_gmt":"2025-12-13T12:41:27","guid":{"rendered":"https:\/\/fatihsoysal.com\/blog\/?p=36318"},"modified":"2025-12-13T15:41:27","modified_gmt":"2025-12-13T12:41:27","slug":"nginx-uzerinde-kendinden-imzali-self-signed-ssl-sertifikasi-olusturma-rehberi-debian-8","status":"publish","type":"post","link":"https:\/\/fatihsoysal.com\/blog\/nginx-uzerinde-kendinden-imzali-self-signed-ssl-sertifikasi-olusturma-rehberi-debian-8\/","title":{"rendered":"Nginx \u00dczerinde Kendinden \u0130mzal\u0131 (Self-Signed) SSL Sertifikas\u0131 Olu\u015fturma Rehberi (Debian 8)"},"content":{"rendered":"<p><body><\/p>\n<h2>Nginx \u00dczerinde Kendinden \u0130mzal\u0131 (Self-Signed) SSL Sertifikas\u0131 Olu\u015fturma Rehberi (Debian 8)<\/h2>\n<p>G\u00fcn\u00fcm\u00fczde internet g\u00fcvenli\u011fi her zamankinden daha \u00f6nemli hale gelmi\u015ftir. Web sitelerinin HTTPS protokol\u00fc \u00fczerinden g\u00fcvenli bir ba\u011flant\u0131 sunmas\u0131, hem kullan\u0131c\u0131 verilerinin korunmas\u0131 hem de arama motoru s\u0131ralamalar\u0131 a\u00e7\u0131s\u0131ndan kritik bir fakt\u00f6rd\u00fcr. Genellikle bu, bir sertifika yetkilisinden (CA) al\u0131nan \u00fccretli veya \u00fccretsiz (Let&#8217;s Encrypt gibi) bir SSL\/TLS sertifikas\u0131 ile sa\u011flan\u0131r. Ancak geli\u015ftirme ortamlar\u0131, dahili uygulamalar veya ki\u015fisel projeler gibi belirli senaryolarda, kendinden imzal\u0131 (self-signed) bir SSL sertifikas\u0131 kullanmak pratik ve maliyetsiz bir \u00e7\u00f6z\u00fcm sunar.<\/p>\n<p>Bu rehberde, Debian 8 i\u015fletim sistemi \u00fczerinde \u00e7al\u0131\u015fan Nginx web sunucunuz i\u00e7in nas\u0131l kendinden imzal\u0131 bir SSL sertifikas\u0131 olu\u015fturaca\u011f\u0131n\u0131z\u0131 ve yap\u0131land\u0131raca\u011f\u0131n\u0131z\u0131 ad\u0131m ad\u0131m \u00f6\u011freneceksiniz. Kendinden imzal\u0131 sertifikalar, taray\u0131c\u0131n\u0131z taraf\u0131ndan &#8220;g\u00fcvenilir&#8221; olarak kabul edilmez ve bir uyar\u0131 mesaj\u0131 g\u00f6r\u00fcnt\u00fclenmesine neden olur, ancak ba\u011flant\u0131y\u0131 \u015fifreleyerek veri b\u00fct\u00fcnl\u00fc\u011f\u00fcn\u00fc ve gizlili\u011fini sa\u011flar. Bu, \u00f6zellikle hassas verilerin internet \u00fczerinden test edildi\u011fi veya dahili a\u011flarda kullan\u0131ld\u0131\u011f\u0131 durumlar i\u00e7in idealdir.<\/p>\n<h3>\u00d6n Haz\u0131rl\u0131klar ve Gerekli Ara\u00e7lar<\/h3>\n<p>Kendinden imzal\u0131 bir SSL sertifikas\u0131 olu\u015fturmaya ba\u015flamadan \u00f6nce, sisteminizin g\u00fcncel oldu\u011fundan ve gerekli paketlerin kurulu oldu\u011fundan emin olmal\u0131y\u0131z. Bu ad\u0131mlar, sorunsuz bir kurulum s\u00fcreci i\u00e7in temel te\u015fkil eder.<\/p>\n<h4>Sistemi G\u00fcncelleme<\/h4>\n<p>\u0130lk olarak, Debian 8 sisteminizin paket listesini g\u00fcncelleyelim ve mevcut paketleri y\u00fckseltelim. Bu, olas\u0131 ba\u011f\u0131ml\u0131l\u0131k sorunlar\u0131n\u0131 \u00f6nlemeye yard\u0131mc\u0131 olacakt\u0131r:<\/p>\n<pre><code class=\"language-bash\">sudo apt-get update\nsudo apt-get upgrade -y<\/code><\/pre>\n<h4>Nginx ve OpenSSL Kurulumu<\/h4>\n<p>E\u011fer sisteminizde Nginx web sunucusu kurulu de\u011filse, a\u015fa\u011f\u0131daki komutla kurabilirsiniz:<\/p>\n<pre><code class=\"language-bash\">sudo apt-get install nginx -y<\/code><\/pre>\n<p>SSL sertifikalar\u0131 olu\u015fturmak ve y\u00f6netmek i\u00e7in <code>openssl<\/code> arac\u0131 gereklidir. \u00c7o\u011fu Debian sisteminde varsay\u0131lan olarak y\u00fckl\u00fc olsa da, kurulu olup olmad\u0131\u011f\u0131n\u0131 kontrol etmek ve gerekirse kurmak iyi bir uygulamad\u0131r:<\/p>\n<pre><code class=\"language-bash\">sudo apt-get install openssl -y<\/code><\/pre>\n<p>Bu ad\u0131mlar\u0131 tamamlad\u0131ktan sonra, art\u0131k kendinden imzal\u0131 SSL sertifikan\u0131z\u0131 olu\u015fturmaya haz\u0131rs\u0131n\u0131z.<\/p>\n<h3>Kendinden \u0130mzal\u0131 SSL Sertifikas\u0131 Olu\u015fturma<\/h3>\n<p>Kendinden imzal\u0131 bir SSL sertifikas\u0131 olu\u015fturma s\u00fcreci, <code>openssl<\/code> komut sat\u0131r\u0131 arac\u0131n\u0131 kullanmay\u0131 i\u00e7erir. Bu ad\u0131mda hem \u00f6zel anahtar\u0131 (private key) hem de sertifika imzalama iste\u011fini (CSR) olu\u015fturacak, ard\u0131ndan bu CSR&#8217;\u0131 kullanarak sertifikay\u0131 imzalayaca\u011f\u0131z.<\/p>\n<h4>Sertifika Dosyalar\u0131n\u0131 Saklama Dizini Olu\u015fturma<\/h4>\n<p>\u00d6ncelikle, olu\u015fturaca\u011f\u0131m\u0131z sertifika ve anahtar dosyalar\u0131n\u0131 g\u00fcvenli ve d\u00fczenli bir \u015fekilde saklamak i\u00e7in bir dizin olu\u015ftural\u0131m. <code>\/etc\/nginx\/ssl<\/code> veya <code>\/etc\/ssl\/nginx<\/code> gibi bir dizin genellikle bu ama\u00e7 i\u00e7in kullan\u0131l\u0131r. Biz <code>\/etc\/nginx\/ssl<\/code> dizinini kullanaca\u011f\u0131z:<\/p>\n<pre><code class=\"language-bash\">sudo mkdir \/etc\/nginx\/ssl<\/code><\/pre>\n<p>Bu dizinin Nginx taraf\u0131ndan okunabilir oldu\u011fundan emin olun. Varsay\u0131lan izinler genellikle yeterlidir.<\/p>\n<h4>\u00d6zel Anahtar ve Sertifika Olu\u015fturma<\/h4>\n<p>\u015eimdi <code>openssl<\/code> komutunu kullanarak \u00f6zel anahtar\u0131m\u0131z\u0131 ve sertifikam\u0131z\u0131 tek bir ad\u0131mda olu\u015ftural\u0131m. Bu komut, hem \u00f6zel anahtar\u0131 olu\u015fturacak hem de bir sertifika imzalama iste\u011fi (CSR) olu\u015fturarak bunu kendisi imzalayacakt\u0131r.<\/p>\n<pre><code class=\"language-bashbash\">sudo openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout \/etc\/nginx\/ssl\/nginx.key -out \/etc\/nginx\/ssl\/nginx.crt<\/code><\/pre>\n<p>Bu komutu ad\u0131m ad\u0131m inceleyelim:<\/p>\n<p>*   <code>sudo openssl req<\/code>: Bir sertifika imzalama iste\u011fi (CSR) olu\u015fturmak i\u00e7in <code>openssl<\/code> arac\u0131n\u0131 kullan\u0131r. <code>-x509<\/code> bayra\u011f\u0131 ile bu iste\u011fi kendimiz imzalayarak bir X.509 sertifikas\u0131 olu\u015fturaca\u011f\u0131m\u0131z\u0131 belirtiriz.<br \/>\n*   <code>-nodes<\/code>: &#8220;no DES&#8221; anlam\u0131na gelir. Bu, \u00f6zel anahtar\u0131n \u015fifrelenmeyece\u011fi anlam\u0131na gelir. Geli\u015ftirme ortamlar\u0131nda bu genellikle tercih edilir, \u00e7\u00fcnk\u00fc her Nginx yeniden ba\u015flat\u0131l\u0131\u015f\u0131nda bir parola girmenize gerek kalmaz. Ancak \u00fcretim ortamlar\u0131nda \u00f6zel anahtar\u0131n bir parola ile \u015fifrelenmesi daha g\u00fcvenlidir.<br \/>\n*   <code>-days 365<\/code>: Sertifikan\u0131n ge\u00e7erlilik s\u00fcresini g\u00fcn cinsinden belirtir. Burada 365 g\u00fcn (1 y\u0131l) olarak ayarlanm\u0131\u015ft\u0131r. Bu s\u00fcreyi ihtiyac\u0131n\u0131za g\u00f6re de\u011fi\u015ftirebilirsiniz.<br \/>\n*   <code>-newkey rsa:2048<\/code>: Yeni bir \u00f6zel anahtar olu\u015fturulmas\u0131n\u0131 sa\u011flar. <code>rsa:2048<\/code> anahtar\u0131n RSA algoritmas\u0131 ve 2048 bit uzunlu\u011funda olaca\u011f\u0131n\u0131 belirtir. 2048 bit, g\u00fcn\u00fcm\u00fcz standartlar\u0131na g\u00f6re g\u00fcvenli kabul edilen bir anahtar uzunlu\u011fudur.<br \/>\n*   <code>-keyout \/etc\/nginx\/ssl\/nginx.key<\/code>: Olu\u015fturulacak \u00f6zel anahtar dosyas\u0131n\u0131n yolunu belirtir.<br \/>\n*   <code>-out \/etc\/nginx\/ssl\/nginx.crt<\/code>: Olu\u015fturulacak sertifika dosyas\u0131n\u0131n yolunu belirtir.<\/p>\n<p>Komutu \u00e7al\u0131\u015ft\u0131rd\u0131ktan sonra, sizden baz\u0131 bilgiler istenecektir. Bu bilgiler sertifikan\u0131za g\u00f6m\u00fclecektir:<\/p>\n<pre><code class=\"language-\">Country Name (2 letter code) [AU]:TR\nState or Province Name (full name) [Some-State]:Istanbul\nLocality Name (eg, city) []:Istanbul\nOrganization Name (eg, company) [Internet Widgits Pty Ltd]:MyCompany\nOrganizational Unit Name (eg, section) []:IT Department\nCommon Name (e.g. server FQDN or YOUR name) []:example.com  # BURASI \u00c7OK \u00d6NEML\u0130!\nEmail Address []:admin@example.com<\/code><\/pre>\n<p><strong>Common Name (Ortak Ad)<\/strong> alan\u0131 \u00f6zellikle \u00f6nemlidir. Buraya web sitenizin alan ad\u0131n\u0131 (\u00f6rne\u011fin <code>example.com<\/code> veya <code>www.example.com<\/code>) veya sunucunuzun IP adresini girmelisiniz. Taray\u0131c\u0131lar, sertifikadaki &#8220;Common Name&#8221; ile eri\u015fmeye \u00e7al\u0131\u015ft\u0131\u011f\u0131n\u0131z alan ad\u0131n\u0131 veya IP adresini kar\u015f\u0131la\u015ft\u0131r\u0131r. E\u011fer e\u015fle\u015fmezse, kendinden imzal\u0131 olsa bile daha \u015fiddetli bir uyar\u0131 al\u0131rs\u0131n\u0131z. E\u011fer bir IP adresi \u00fczerinden eri\u015fim sa\u011flayacaksan\u0131z, buraya IP adresini girmeniz gerekir (\u00f6rn. <code>192.168.1.100<\/code>).<\/p>\n<p>Bu ad\u0131mlar\u0131 tamamlad\u0131\u011f\u0131n\u0131zda, <code>\/etc\/nginx\/ssl\/<\/code> dizininde <code>nginx.key<\/code> (\u00f6zel anahtar\u0131n\u0131z) ve <code>nginx.crt<\/code> (sertifikan\u0131z) ad\u0131nda iki dosya bulunacakt\u0131r.<\/p>\n<h4>Dosya \u0130zinlerini Ayarlama<\/h4>\n<p>\u00d6zel anahtar\u0131n\u0131z\u0131n g\u00fcvenli\u011fi kritik \u00f6neme sahiptir. Bu nedenle, <code>nginx.key<\/code> dosyas\u0131n\u0131n yaln\u0131zca root kullan\u0131c\u0131s\u0131 taraf\u0131ndan okunabilir oldu\u011fundan emin olmak i\u00e7in izinlerini ayarlayal\u0131m:<\/p>\n<pre><code class=\"language-bash\">sudo chmod 600 \/etc\/nginx\/ssl\/nginx.key<\/code><\/pre>\n<p>Bu komut, dosyan\u0131n yaln\u0131zca sahibi (root) taraf\u0131ndan okunabilir ve yaz\u0131labilir olmas\u0131n\u0131 sa\u011flar. Sertifika dosyas\u0131 (<code>nginx.crt<\/code>) ise daha geni\u015f bir okuma iznine sahip olabilir, \u00e7\u00fcnk\u00fc genel bilgiler i\u00e7erir ve Nginx&#8217;in onu okuyabilmesi gerekir.<\/p>\n<h3>Nginx&#8217;i SSL Kullanacak \u015eekilde Yap\u0131land\u0131rma<\/h3>\n<p>Sertifika dosyalar\u0131m\u0131z haz\u0131r oldu\u011funa g\u00f6re, Nginx web sunucumuzu bu sertifikalar\u0131 kullanarak g\u00fcvenli (HTTPS) ba\u011flant\u0131lar\u0131 kabul edecek \u015fekilde yap\u0131land\u0131rabiliriz.<\/p>\n<h4>Nginx Yap\u0131land\u0131rma Dosyas\u0131n\u0131 D\u00fczenleme<\/h4>\n<p>Nginx&#8217;in varsay\u0131lan yap\u0131land\u0131rma dosyas\u0131 genellikle <code>\/etc\/nginx\/sites-available\/default<\/code> konumundad\u0131r. Bu dosyay\u0131 d\u00fczenleyebilir veya yeni bir site yap\u0131land\u0131rma dosyas\u0131 olu\u015fturabilirsiniz (\u00f6rne\u011fin <code>\/etc\/nginx\/sites-available\/default-ssl<\/code>). Biz varsay\u0131lan dosyay\u0131 d\u00fczenleyerek ilerleyece\u011fiz.<\/p>\n<pre><code class=\"language-bash\">sudo nano \/etc\/nginx\/sites-available\/default<\/code><\/pre>\n<p>Dosyay\u0131 a\u00e7t\u0131ktan sonra, mevcut <code>server<\/code> blo\u011funuzu bulman\u0131z veya yeni bir <code>server<\/code> blo\u011fu eklemeniz gerekecektir. A\u015fa\u011f\u0131daki \u00f6rne\u011fi kendi yap\u0131land\u0131rman\u0131za ekleyebilir veya mevcut HTTP blo\u011funuzu HTTPS&#8217;ye y\u00f6nlendirecek \u015fekilde d\u00fczenleyebilirsiniz.<\/p>\n<pre><code class=\"language-nginx\">server {\n    listen 80;\n    listen [::]:80;\n    server_name example.com www.example.com; # Kendi alan ad\u0131n\u0131z\u0131 veya IP adresinizi yaz\u0131n\n\n    # HTTP isteklerini HTTPS'ye y\u00f6nlendirme (iste\u011fe ba\u011fl\u0131 ama \u00f6nerilir)\n    return 301 https:\/\/$host$request_uri;\n}\n\nserver {\n    listen 443 ssl http2; # HTTPS ve HTTP\/2 i\u00e7in dinle\n    listen [::]:443 ssl http2;\n    server_name example.com www.example.com; # Kendi alan ad\u0131n\u0131z\u0131 veya IP adresinizi yaz\u0131n\n\n    ssl_certificate \/etc\/nginx\/ssl\/nginx.crt; # Sertifika dosyan\u0131z\u0131n yolu\n    ssl_certificate_key \/etc\/nginx\/ssl\/nginx.key; # \u00d6zel anahtar dosyan\u0131z\u0131n yolu\n\n    # SSL Ayarlar\u0131 (g\u00fcvenlik i\u00e7in \u00f6nerilir)\n    ssl_protocols TLSv1.2 TLSv1.3; # Yaln\u0131zca g\u00fcvenli TLS versiyonlar\u0131n\u0131 kullan\n    ssl_ciphers 'TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256:ECDHE-RSA-AES256-GCM-SHA512:DHE-RSA-AES256-GCM-SHA512:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES128-GCM-SHA256';\n    ssl_prefer_server_ciphers on;\n    ssl_session_cache shared:SSL:10m;\n    ssl_session_timeout 10m;\n    ssl_stapling on;\n    ssl_stapling_verify on;\n    resolver 8.8.8.8 8.8.4.4 valid=300s; # DNS \u00e7\u00f6z\u00fcmleyici\n    resolver_timeout 5s;\n    add_header Strict-Transport-Security \"max-age=63072000; includeSubDomains; preload\"; # HSTS\n    add_header X-Frame-Options DENY;\n    add_header X-Content-Type-Options nosniff;\n    add_header X-XSS-Protection \"1; mode=block\";\n\n    root \/var\/www\/html; # Web sitenizin k\u00f6k dizini\n    index index.html index.htm;\n\n    location \/ {\n        try_files $uri $uri\/ =404;\n    }\n\n    # Di\u011fer Nginx ayarlar\u0131 buraya gelebilir (loglar, hata sayfalar\u0131 vb.)\n}<\/code><\/pre>\n<p><strong>\u00d6nemli Notlar:<\/strong><\/p>\n<p>*   <code>server_name<\/code>: Buraya, sertifika olu\u015ftururken <code>Common Name<\/code> olarak girdi\u011finiz alan ad\u0131n\u0131 veya IP adresini yaz\u0131n.<br \/>\n*   <code>ssl_certificate<\/code> ve <code>ssl_certificate_key<\/code>: Bu yollar\u0131n, sertifika ve \u00f6zel anahtar dosyalar\u0131n\u0131z\u0131 kaydetti\u011finiz dizini ve dosya adlar\u0131n\u0131 do\u011fru bir \u015fekilde i\u015faret etti\u011finden emin olun.<br \/>\n*   <code>ssl_protocols<\/code> ve <code>ssl_ciphers<\/code>: Bu ayarlar, daha modern ve g\u00fcvenli TLS protokollerini ve \u015fifreleme paketlerini kullanman\u0131z\u0131 sa\u011flar. Debian 8&#8217;deki Nginx s\u00fcr\u00fcm\u00fcn\u00fcz bu ayarlar\u0131 desteklemeyebilir veya farkl\u0131 bir yap\u0131land\u0131rma gerektirebilir. E\u011fer Nginx servisini ba\u015flat\u0131rken hata al\u0131rsan\u0131z, bu sat\u0131rlar\u0131 ge\u00e7ici olarak yorum sat\u0131r\u0131 yap\u0131p daha temel bir yap\u0131land\u0131rma ile ba\u015flayabilirsiniz. Ancak g\u00fcvenlik i\u00e7in bu ayarlar\u0131 kullanmak her zaman \u00f6nerilir.<br \/>\n*   <code>http2<\/code>: HTTP\/2, daha h\u0131zl\u0131 ve verimli bir web deneyimi sunar. Nginx&#8217;iniz bu \u00f6zelli\u011fi destekliyorsa kullanman\u0131z \u00f6nerilir.<\/p>\n<p>Yap\u0131land\u0131rma dosyas\u0131n\u0131 kaydettikten sonra (Nano&#8217;da <code>Ctrl+O<\/code>, <code>Enter<\/code>, <code>Ctrl+X<\/code>), Nginx yap\u0131land\u0131rman\u0131z\u0131n s\u00f6zdizimi a\u00e7\u0131s\u0131ndan do\u011fru oldu\u011fundan emin olmak i\u00e7in test etmelisiniz:<\/p>\n<pre><code class=\"language-bash\">sudo nginx -t<\/code><\/pre>\n<p>E\u011fer herhangi bir hata mesaj\u0131 almazsan\u0131z ve &#8220;syntax is ok&#8221; ile &#8220;test is successful&#8221; gibi \u00e7\u0131kt\u0131lar g\u00f6r\u00fcrseniz, Nginx&#8217;i yeniden y\u00fckleyerek yeni yap\u0131land\u0131rmay\u0131 etkinle\u015ftirebilirsiniz:<\/p>\n<pre><code class=\"language-bash\">sudo systemctl reload nginx<\/code><\/pre>\n<p>\u015eimdi web taray\u0131c\u0131n\u0131zdan <code>https:\/\/your_domain_or_ip<\/code> adresine giderek sitenize g\u00fcvenli ba\u011flant\u0131 \u00fczerinden eri\u015fmeyi deneyebilirsiniz.<\/p>\n<h3>Taray\u0131c\u0131 Uyar\u0131lar\u0131 ve \u00c7\u00f6z\u00fcmler<\/h3>\n<p>Kendinden imzal\u0131 bir SSL sertifikas\u0131 kulland\u0131\u011f\u0131n\u0131zda, web taray\u0131c\u0131lar\u0131 bu sertifikay\u0131 otomatik olarak g\u00fcvenilir bulmayacakt\u0131r. Bunun nedeni, sertifikan\u0131n bilinen ve g\u00fcvenilir bir sertifika yetkilisi (CA) taraf\u0131ndan imzalanmam\u0131\u015f olmas\u0131d\u0131r. Bu durum, taray\u0131c\u0131n\u0131zda bir g\u00fcvenlik uyar\u0131s\u0131 g\u00f6rmenize neden olacakt\u0131r.<\/p>\n<h4>Taray\u0131c\u0131 Uyar\u0131lar\u0131n\u0131 Anlama<\/h4>\n<p>Taray\u0131c\u0131n\u0131z, sertifikan\u0131n g\u00fcvenilir olmad\u0131\u011f\u0131n\u0131 belirten bir uyar\u0131 g\u00f6sterecektir. Bu uyar\u0131 genellikle &#8220;Ba\u011flant\u0131n\u0131z gizli de\u011fil&#8221;, &#8220;Bu site g\u00fcvenli de\u011fil&#8221; veya benzeri bir ifadeyle kar\u015f\u0131n\u0131za \u00e7\u0131kar. Bu uyar\u0131, taray\u0131c\u0131n\u0131n sertifikan\u0131n kimli\u011fini do\u011frulayamad\u0131\u011f\u0131n\u0131 ve dolay\u0131s\u0131yla ba\u011flant\u0131n\u0131n kim taraf\u0131ndan sa\u011fland\u0131\u011f\u0131 konusunda \u015f\u00fcpheleri oldu\u011funu g\u00f6sterir.<\/p>\n<p><strong>\u00d6rnek Taray\u0131c\u0131 Uyar\u0131lar\u0131:<\/strong><\/p>\n<p>*   <strong>Chrome:<\/strong> &#8220;Gizlili\u011finiz risk alt\u0131nda olabilir&#8221; veya &#8220;Ba\u011flant\u0131n\u0131z gizli de\u011fil&#8221;<br \/>\n*   <strong>Firefox:<\/strong> &#8220;Risk Almaya Haz\u0131r m\u0131s\u0131n\u0131z?&#8221; veya &#8220;Ba\u011flant\u0131n\u0131z g\u00fcvenli de\u011fil&#8221;<br \/>\n*   <strong>Edge:<\/strong> &#8220;Bu site g\u00fcvenli de\u011fil&#8221;<\/p>\n<p>Bu uyar\u0131lar, bir kendinden imzal\u0131 sertifika kullan\u0131ld\u0131\u011f\u0131nda beklenen bir durumdur ve genellikle &#8220;Geli\u015fmi\u015f&#8221; veya &#8220;Devam et&#8221; se\u00e7eneklerini t\u0131klayarak siteye eri\u015fmeye devam edebilirsiniz.<\/p>\n<h4>Taray\u0131c\u0131n\u0131za Sertifikay\u0131 Ekleme (\u0130ste\u011fe Ba\u011fl\u0131)<\/h4>\n<p>E\u011fer bu kendinden imzal\u0131 sertifikay\u0131 s\u0131k s\u0131k kullanaca\u011f\u0131n\u0131z bir geli\u015ftirme ortam\u0131 veya dahili bir uygulama i\u00e7in kurduysan\u0131z, her seferinde uyar\u0131y\u0131 atlamak yerine sertifikay\u0131 taray\u0131c\u0131n\u0131z\u0131n veya i\u015fletim sisteminizin g\u00fcvenilen k\u00f6k sertifika deposuna ekleyebilirsiniz. Bu i\u015flem, taray\u0131c\u0131n\u0131n ilgili siteye eri\u015firken uyar\u0131 g\u00f6stermesini engelleyecektir.<\/p>\n<p><strong>Genel Ad\u0131mlar (Taray\u0131c\u0131ya g\u00f6re de\u011fi\u015fir):<\/strong><\/p>\n<p>1.  <strong>Sertifikay\u0131 \u0130ndirme:<\/strong> Taray\u0131c\u0131n\u0131zda siteye eri\u015firken \u00e7\u0131kan uyar\u0131 sayfas\u0131nda genellikle sertifika detaylar\u0131n\u0131 g\u00f6r\u00fcnt\u00fcleme veya indirme se\u00e7ene\u011fi bulunur. Veya do\u011frudan sunucunuzdan <code>\/etc\/nginx\/ssl\/nginx.crt<\/code> dosyas\u0131n\u0131 bilgisayar\u0131n\u0131za kopyalayabilirsiniz.<br \/>\n2.  <strong>Sertifikay\u0131 \u0130\u00e7e Aktarma:<\/strong><br \/>\n    *   <strong>Chrome (Windows):<\/strong> Ayarlar > Gizlilik ve g\u00fcvenlik > G\u00fcvenlik > Sertifikalar\u0131 y\u00f6net > G\u00fcvenilen K\u00f6k Sertifika Yetkilileri > \u0130\u00e7e Aktar.<br \/>\n    *   <strong>Firefox:<\/strong> Ayarlar > Gizlilik ve G\u00fcvenlik > Sertifikalar > Sertifikalar\u0131 G\u00f6r\u00fcnt\u00fcle > Yetkililer > \u0130\u00e7e Aktar.<br \/>\n    *   <strong>macOS:<\/strong> Anahtar Zinciri Eri\u015fimi uygulamas\u0131na sertifikay\u0131 s\u00fcr\u00fckleyip b\u0131rakarak veya Dosya > \u00d6\u011feleri \u0130\u00e7e Aktar se\u00e7ene\u011fini kullanarak.<br \/>\n    *   <strong>Linux (\u00f6rne\u011fin Debian):<\/strong> Sertifika dosyas\u0131n\u0131 <code>\/usr\/local\/share\/ca-certificates\/<\/code> dizinine kopyalay\u0131p ard\u0131ndan <code>sudo update-ca-certificates<\/code> komutunu \u00e7al\u0131\u015ft\u0131rarak sistem genelinde g\u00fcvenilir hale getirebilirsiniz.<\/p>\n<p>Sertifikay\u0131 taray\u0131c\u0131n\u0131za veya i\u015fletim sisteminize ekledikten sonra, taray\u0131c\u0131n\u0131z\u0131 yeniden ba\u015flatman\u0131z gerekebilir. Bu i\u015flemden sonra, ayn\u0131 siteye eri\u015fti\u011finizde art\u0131k g\u00fcvenlik uyar\u0131s\u0131 almamal\u0131s\u0131n\u0131z. Ancak bu \u00e7\u00f6z\u00fcm, yaln\u0131zca sizin kendi bilgisayar\u0131n\u0131zda veya y\u00f6netti\u011finiz cihazlarda i\u015fe yarar. Genel kullan\u0131ma a\u00e7\u0131k bir web sitesi i\u00e7in bu y\u00f6ntem uygun de\u011fildir.<\/p>\n<h3>Sonu\u00e7 ve S\u0131k\u00e7a Sorulan Sorular (SSS)<\/h3>\n<p>Bu rehberde, Debian 8 \u00fczerinde Nginx i\u00e7in kendinden imzal\u0131 bir SSL sertifikas\u0131 olu\u015fturma ve yap\u0131land\u0131rma s\u00fcrecini detayl\u0131 bir \u015fekilde ele ald\u0131k. Kendinden imzal\u0131 sertifikalar, geli\u015ftirme ve dahili kullan\u0131m senaryolar\u0131nda b\u00fcy\u00fck kolayl\u0131k sa\u011flarken, \u00fcretim ortamlar\u0131nda profesyonel bir CA taraf\u0131ndan imzalanm\u0131\u015f sertifikalar\u0131n kullan\u0131lmas\u0131 gerekti\u011fini unutmamak \u00f6nemlidir. Bu sertifikalar, ba\u011flant\u0131y\u0131 \u015fifreleyerek veri g\u00fcvenli\u011fini sa\u011flasa da, sunucunun kimli\u011fini \u00fc\u00e7\u00fcnc\u00fc bir taraf\u00e7a do\u011frulamad\u0131klar\u0131 i\u00e7in taray\u0131c\u0131lar taraf\u0131ndan g\u00fcvenilir olarak kabul edilmezler.<\/p>\n<p>Bu ad\u0131mlar\u0131 takip ederek, kendi g\u00fcvenli test ortam\u0131n\u0131z\u0131 veya dahili uygulaman\u0131z\u0131 h\u0131zla kurabilir ve HTTPS&#8217;nin faydalar\u0131ndan yararlanabilirsiniz.<\/p>\n<h4>S\u0131k\u00e7a Sorulan Sorular (SSS)<\/h4>\n<p><strong>S: Kendinden imzal\u0131 sertifika nedir?<\/strong><br \/>\nC: Kendinden imzal\u0131 (self-signed) bir sertifika, bir sertifika yetkilisi (CA) taraf\u0131ndan de\u011fil, do\u011frudan sertifikay\u0131 kullanan sunucu veya ki\u015fi taraf\u0131ndan imzalanm\u0131\u015f bir SSL\/TLS sertifikas\u0131d\u0131r. Bu, kimlik do\u011frulama s\u00fcrecinin \u00fc\u00e7\u00fcnc\u00fc bir taraf\u00e7a onaylanmad\u0131\u011f\u0131 anlam\u0131na gelir.<\/p>\n<p><strong>S: Neden kendinden imzal\u0131 sertifika kullanmal\u0131y\u0131m?<\/strong><br \/>\nC: Kendinden imzal\u0131 sertifikalar genellikle geli\u015ftirme ortamlar\u0131, test sunucular\u0131, dahili a\u011f uygulamalar\u0131 veya ki\u015fisel projeler i\u00e7in kullan\u0131l\u0131r. \u00dccretsizdir, kurulumu h\u0131zl\u0131d\u0131r ve ba\u011flant\u0131y\u0131 \u015fifreleyerek veri gizlili\u011fini sa\u011flar.<\/p>\n<p><strong>S: Kendinden imzal\u0131 sertifika g\u00fcvenli midir?<\/strong><br \/>\nC: Evet, kendinden imzal\u0131 sertifikalar ba\u011flant\u0131y\u0131 \u015fifreleyerek verilerinizi d\u0131\u015far\u0131dan gelebilecek dinlemelere kar\u015f\u0131 korur. Ancak, sertifikay\u0131 imzalayan\u0131n kimli\u011fi \u00fc\u00e7\u00fcnc\u00fc bir g\u00fcvenilir taraf\u00e7a do\u011frulanmad\u0131\u011f\u0131 i\u00e7in taray\u0131c\u0131lar taraf\u0131ndan &#8220;g\u00fcvenilir&#8221; kabul edilmez ve g\u00fcvenlik uyar\u0131s\u0131 verirler. Bu nedenle, genel kullan\u0131ma a\u00e7\u0131k siteler i\u00e7in \u00f6nerilmez.<\/p>\n<p><strong>S: Sertifika s\u00fcresi dolarsa ne olur?<\/strong><br \/>\nC: Sertifikan\u0131z\u0131n s\u00fcresi doldu\u011funda (bizim \u00f6rne\u011fimizde 365 g\u00fcn sonra), taray\u0131c\u0131lar daha \u015fiddetli bir g\u00fcvenlik uyar\u0131s\u0131 g\u00f6sterecek ve siteye eri\u015fiminiz kesilebilir. Bu durumda, yeni bir sertifika olu\u015fturman\u0131z ve Nginx yap\u0131land\u0131rmas\u0131n\u0131 g\u00fcncellemeniz gerekir.<\/p>\n<p><strong>S: Ortak Ad (Common Name) neden \u00f6nemlidir?<\/strong><br \/>\nC: Common Name (CN), sertifikan\u0131n hangi alan ad\u0131 veya IP adresi i\u00e7in ge\u00e7erli oldu\u011funu belirtir. Taray\u0131c\u0131lar, eri\u015fmeye \u00e7al\u0131\u015ft\u0131\u011f\u0131n\u0131z adres ile sertifikadaki CN&#8217;yi kar\u015f\u0131la\u015ft\u0131r\u0131r. E\u015fle\u015fmezse, uyar\u0131 mesaj\u0131 al\u0131rs\u0131n\u0131z. Bu nedenle, CN alan\u0131na do\u011fru alan ad\u0131n\u0131 veya IP adresini girmek kritik \u00f6neme sahiptir.<\/p>\n<p><strong>S: Nginx&#8217;i HTTP&#8217;den HTTPS&#8217;ye nas\u0131l y\u00f6nlendiririm?<\/strong><br \/>\nC: Rehberdeki Nginx yap\u0131land\u0131rma \u00f6rne\u011finde g\u00f6sterildi\u011fi gibi, <code>listen 80;<\/code> blo\u011funa <code>return 301 https:\/\/$host$request_uri;<\/code> sat\u0131r\u0131n\u0131 ekleyerek t\u00fcm HTTP isteklerini HTTPS&#8217;ye kal\u0131c\u0131 olarak y\u00f6nlendirebilirsiniz.<\/p>\n<p><strong>S: Debian 8&#8217;den daha yeni s\u00fcr\u00fcmler i\u00e7in s\u00fcre\u00e7 farkl\u0131 m\u0131?<\/strong><br \/>\nC: Temel s\u00fcre\u00e7 (openssl komutlar\u0131 ve Nginx yap\u0131land\u0131rma mant\u0131\u011f\u0131) Debian&#8217;\u0131n daha yeni s\u00fcr\u00fcmlerinde (Debian 9, 10, 11 gibi) b\u00fcy\u00fck \u00f6l\u00e7\u00fcde ayn\u0131d\u0131r. Ancak <code>apt-get<\/code> yerine <code>apt<\/code> komutu kullan\u0131lmas\u0131, Nginx&#8217;in varsay\u0131lan yap\u0131land\u0131rma dizinlerinde veya baz\u0131 SSL\/TLS ayarlar\u0131nda k\u00fc\u00e7\u00fck farkl\u0131l\u0131klar olabilir. Genel prensipler ayn\u0131 kal\u0131r.<\/p>\n<p><\/body><\/p>\n","protected":false},"excerpt":{"rendered":"Nginx \u00dczerinde Kendinden \u0130mzal\u0131 (Self-Signed) SSL Sertifikas\u0131 Olu\u015fturma Rehberi (Debian 8)\nG\u00fcn\u00fcm\u00fczde internet g\u00fcvenli\u011fi her zamankinden d","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"csco_page_header_type":"","csco_page_load_nextpost":"","csco_page_subscribe_form":"","csco_page_contact_form":"","footnotes":""},"categories":[241],"tags":[],"class_list":{"0":"post-36318","1":"post","2":"type-post","3":"status-publish","4":"format-standard","6":"category-linux","7":"cs-entry","8":"cs-video-wrap"},"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v20.5 (Yoast SEO v25.3.1) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Nginx \u00dczerinde Kendinden \u0130mzal\u0131 (Self-Signed) SSL Sertifikas\u0131 Olu\u015fturma Rehberi (Debian 8) - Kodlar\u0131n Gizemli D\u00fcnyas\u0131<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/fatihsoysal.com\/blog\/nginx-uzerinde-kendinden-imzali-self-signed-ssl-sertifikasi-olusturma-rehberi-debian-8\/\" \/>\n<meta property=\"og:locale\" content=\"tr_TR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Nginx \u00dczerinde Kendinden \u0130mzal\u0131 (Self-Signed) SSL Sertifikas\u0131 Olu\u015fturma Rehberi (Debian 8)\" \/>\n<meta property=\"og:description\" content=\"Nginx \u00dczerinde Kendinden \u0130mzal\u0131 (Self-Signed) SSL Sertifikas\u0131 Olu\u015fturma Rehberi (Debian 8) G\u00fcn\u00fcm\u00fczde internet g\u00fcvenli\u011fi her zamankinden d\" \/>\n<meta property=\"og:url\" content=\"https:\/\/fatihsoysal.com\/blog\/nginx-uzerinde-kendinden-imzali-self-signed-ssl-sertifikasi-olusturma-rehberi-debian-8\/\" \/>\n<meta property=\"og:site_name\" content=\"Kodlar\u0131n Gizemli D\u00fcnyas\u0131\" \/>\n<meta property=\"article:published_time\" content=\"2025-12-13T12:41:27+00:00\" \/>\n<meta name=\"author\" content=\"Fatih Soysal\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Yazan:\" \/>\n\t<meta name=\"twitter:data1\" content=\"Fatih Soysal\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tahmini okuma s\u00fcresi\" \/>\n\t<meta name=\"twitter:data2\" content=\"13 dakika\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/nginx-uzerinde-kendinden-imzali-self-signed-ssl-sertifikasi-olusturma-rehberi-debian-8\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/nginx-uzerinde-kendinden-imzali-self-signed-ssl-sertifikasi-olusturma-rehberi-debian-8\/\"},\"author\":{\"name\":\"Fatih Soysal\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"headline\":\"Nginx \u00dczerinde Kendinden \u0130mzal\u0131 (Self-Signed) SSL Sertifikas\u0131 Olu\u015fturma Rehberi (Debian 8)\",\"datePublished\":\"2025-12-13T12:41:27+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/nginx-uzerinde-kendinden-imzali-self-signed-ssl-sertifikasi-olusturma-rehberi-debian-8\/\"},\"wordCount\":2225,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"articleSection\":[\"Linux\"],\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/nginx-uzerinde-kendinden-imzali-self-signed-ssl-sertifikasi-olusturma-rehberi-debian-8\/#respond\"]}],\"copyrightYear\":\"2025\",\"copyrightHolder\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/nginx-uzerinde-kendinden-imzali-self-signed-ssl-sertifikasi-olusturma-rehberi-debian-8\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/nginx-uzerinde-kendinden-imzali-self-signed-ssl-sertifikasi-olusturma-rehberi-debian-8\/\",\"name\":\"Nginx \u00dczerinde Kendinden \u0130mzal\u0131 (Self-Signed) SSL Sertifikas\u0131 Olu\u015fturma Rehberi (Debian 8) - Kodlar\u0131n Gizemli D\u00fcnyas\u0131\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\"},\"datePublished\":\"2025-12-13T12:41:27+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/nginx-uzerinde-kendinden-imzali-self-signed-ssl-sertifikasi-olusturma-rehberi-debian-8\/#breadcrumb\"},\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/nginx-uzerinde-kendinden-imzali-self-signed-ssl-sertifikasi-olusturma-rehberi-debian-8\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/nginx-uzerinde-kendinden-imzali-self-signed-ssl-sertifikasi-olusturma-rehberi-debian-8\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Anasayfa\",\"item\":\"https:\/\/fatihsoysal.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Nginx \u00dczerinde Kendinden \u0130mzal\u0131 (Self-Signed) SSL Sertifikas\u0131 Olu\u015fturma Rehberi (Debian 8)\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/\",\"name\":\"Fatihsoysal.com\",\"description\":\"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim\",\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"tr\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\",\"name\":\"Fatih Soysal\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"tr\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"contentUrl\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"width\":512,\"height\":512,\"caption\":\"Fatih Soysal\"},\"logo\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\"},\"description\":\"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Nginx \u00dczerinde Kendinden \u0130mzal\u0131 (Self-Signed) SSL Sertifikas\u0131 Olu\u015fturma Rehberi (Debian 8) - Kodlar\u0131n Gizemli D\u00fcnyas\u0131","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/fatihsoysal.com\/blog\/nginx-uzerinde-kendinden-imzali-self-signed-ssl-sertifikasi-olusturma-rehberi-debian-8\/","og_locale":"tr_TR","og_type":"article","og_title":"Nginx \u00dczerinde Kendinden \u0130mzal\u0131 (Self-Signed) SSL Sertifikas\u0131 Olu\u015fturma Rehberi (Debian 8)","og_description":"Nginx \u00dczerinde Kendinden \u0130mzal\u0131 (Self-Signed) SSL Sertifikas\u0131 Olu\u015fturma Rehberi (Debian 8) G\u00fcn\u00fcm\u00fczde internet g\u00fcvenli\u011fi her zamankinden d","og_url":"https:\/\/fatihsoysal.com\/blog\/nginx-uzerinde-kendinden-imzali-self-signed-ssl-sertifikasi-olusturma-rehberi-debian-8\/","og_site_name":"Kodlar\u0131n Gizemli D\u00fcnyas\u0131","article_published_time":"2025-12-13T12:41:27+00:00","author":"Fatih Soysal","twitter_card":"summary_large_image","twitter_misc":{"Yazan:":"Fatih Soysal","Tahmini okuma s\u00fcresi":"13 dakika"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/fatihsoysal.com\/blog\/nginx-uzerinde-kendinden-imzali-self-signed-ssl-sertifikasi-olusturma-rehberi-debian-8\/#article","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/nginx-uzerinde-kendinden-imzali-self-signed-ssl-sertifikasi-olusturma-rehberi-debian-8\/"},"author":{"name":"Fatih Soysal","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"headline":"Nginx \u00dczerinde Kendinden \u0130mzal\u0131 (Self-Signed) SSL Sertifikas\u0131 Olu\u015fturma Rehberi (Debian 8)","datePublished":"2025-12-13T12:41:27+00:00","mainEntityOfPage":{"@id":"https:\/\/fatihsoysal.com\/blog\/nginx-uzerinde-kendinden-imzali-self-signed-ssl-sertifikasi-olusturma-rehberi-debian-8\/"},"wordCount":2225,"commentCount":0,"publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"articleSection":["Linux"],"inLanguage":"tr","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/fatihsoysal.com\/blog\/nginx-uzerinde-kendinden-imzali-self-signed-ssl-sertifikasi-olusturma-rehberi-debian-8\/#respond"]}],"copyrightYear":"2025","copyrightHolder":{"@id":"https:\/\/fatihsoysal.com\/blog\/#organization"}},{"@type":"WebPage","@id":"https:\/\/fatihsoysal.com\/blog\/nginx-uzerinde-kendinden-imzali-self-signed-ssl-sertifikasi-olusturma-rehberi-debian-8\/","url":"https:\/\/fatihsoysal.com\/blog\/nginx-uzerinde-kendinden-imzali-self-signed-ssl-sertifikasi-olusturma-rehberi-debian-8\/","name":"Nginx \u00dczerinde Kendinden \u0130mzal\u0131 (Self-Signed) SSL Sertifikas\u0131 Olu\u015fturma Rehberi (Debian 8) - Kodlar\u0131n Gizemli D\u00fcnyas\u0131","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/#website"},"datePublished":"2025-12-13T12:41:27+00:00","breadcrumb":{"@id":"https:\/\/fatihsoysal.com\/blog\/nginx-uzerinde-kendinden-imzali-self-signed-ssl-sertifikasi-olusturma-rehberi-debian-8\/#breadcrumb"},"inLanguage":"tr","potentialAction":[{"@type":"ReadAction","target":["https:\/\/fatihsoysal.com\/blog\/nginx-uzerinde-kendinden-imzali-self-signed-ssl-sertifikasi-olusturma-rehberi-debian-8\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/fatihsoysal.com\/blog\/nginx-uzerinde-kendinden-imzali-self-signed-ssl-sertifikasi-olusturma-rehberi-debian-8\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Anasayfa","item":"https:\/\/fatihsoysal.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Nginx \u00dczerinde Kendinden \u0130mzal\u0131 (Self-Signed) SSL Sertifikas\u0131 Olu\u015fturma Rehberi (Debian 8)"}]},{"@type":"WebSite","@id":"https:\/\/fatihsoysal.com\/blog\/#website","url":"https:\/\/fatihsoysal.com\/blog\/","name":"Fatihsoysal.com","description":"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim","publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"tr"},{"@type":["Person","Organization"],"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1","name":"Fatih Soysal","image":{"@type":"ImageObject","inLanguage":"tr","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","contentUrl":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","width":512,"height":512,"caption":"Fatih Soysal"},"logo":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/"},"description":"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.","url":"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/"}]}},"yoast_meta":{"yoast_wpseo_title":"","yoast_wpseo_metadesc":"","yoast_wpseo_canonical":""},"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/36318","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/comments?post=36318"}],"version-history":[{"count":1,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/36318\/revisions"}],"predecessor-version":[{"id":36319,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/36318\/revisions\/36319"}],"wp:attachment":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/media?parent=36318"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/categories?post=36318"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/tags?post=36318"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}