{"id":37354,"date":"2026-01-01T03:40:42","date_gmt":"2026-01-01T00:40:42","guid":{"rendered":"https:\/\/fatihsoysal.com\/blog\/?p=37354"},"modified":"2026-01-01T03:40:42","modified_gmt":"2026-01-01T00:40:42","slug":"apache-ve-debian-8-uzerinde-ssl-sertifikasi-olusturma-ve-yapilandirma-rehberi","status":"publish","type":"post","link":"https:\/\/fatihsoysal.com\/blog\/apache-ve-debian-8-uzerinde-ssl-sertifikasi-olusturma-ve-yapilandirma-rehberi\/","title":{"rendered":"Apache ve Debian 8 \u00dczerinde SSL Sertifikas\u0131 Olu\u015fturma ve Yap\u0131land\u0131rma Rehberi"},"content":{"rendered":"

<\/p>\n

Apache ve Debian 8 \u00dczerinde SSL Sertifikas\u0131 Olu\u015fturma ve Yap\u0131land\u0131rma Rehberi<\/h2>\n

\u0130nternet d\u00fcnyas\u0131nda g\u00fcvenlik, kullan\u0131c\u0131 gizlili\u011fi ve veri b\u00fct\u00fcnl\u00fc\u011f\u00fc her ge\u00e7en g\u00fcn daha da \u00f6nem kazanmaktad\u0131r. Web siteleri i\u00e7in bu \u00fc\u00e7 temel ilkeyi sa\u011flaman\u0131n en yayg\u0131n ve etkili yolu, G\u00fcvenli Yuva Katman\u0131 (SSL) veya onun daha modern hali olan Ta\u015f\u0131ma Katman\u0131 G\u00fcvenli\u011fi (TLS) protokollerini kullanmakt\u0131r. Bu teknik makale, \u00f6zellikle Debian 8 (Jessie) i\u015fletim sistemi \u00fczerinde \u00e7al\u0131\u015fan Apache web sunucusu i\u00e7in bir SSL sertifikas\u0131n\u0131n nas\u0131l olu\u015fturulaca\u011f\u0131n\u0131 ve yap\u0131land\u0131r\u0131laca\u011f\u0131n\u0131 ad\u0131m ad\u0131m detayland\u0131racakt\u0131r. Amac\u0131m\u0131z, hem kendinden imzal\u0131 (self-signed) sertifikalar\u0131n nas\u0131l olu\u015fturulaca\u011f\u0131n\u0131 hem de Apache’nin bu sertifikalar\u0131 kullanarak g\u00fcvenli HTTPS ba\u011flant\u0131lar\u0131 sunacak \u015fekilde nas\u0131l yap\u0131land\u0131r\u0131laca\u011f\u0131n\u0131 kapsaml\u0131 bir \u015fekilde a\u00e7\u0131klamakt\u0131r.<\/p>\n

SSL\/TLS Nedir ve Neden Gereklidir?<\/h3>\n

SSL (Secure Sockets Layer) ve onun halefi TLS (Transport Layer Security), bir web sunucusu ile bir web taray\u0131c\u0131s\u0131 aras\u0131ndaki \u015fifreli ba\u011flant\u0131y\u0131 kurmak i\u00e7in kullan\u0131lan kriptografik protokollerdir. Temel olarak, bu protokoller \u00fc\u00e7 ana g\u00fcvenlik i\u015flevi sunar:<\/p>\n

1. \u015eifreleme (Encryption):<\/strong> Sunucu ve istemci aras\u0131ndaki t\u00fcm ileti\u015fimi \u015fifreleyerek, hassas verilerin (kullan\u0131c\u0131 adlar\u0131, \u015fifreler, kredi kart\u0131 bilgileri vb.) k\u00f6t\u00fc niyetli \u00fc\u00e7\u00fcnc\u00fc \u015fah\u0131slar taraf\u0131ndan okunmas\u0131n\u0131 veya ele ge\u00e7irilmesini engeller.
\n2. Veri B\u00fct\u00fcnl\u00fc\u011f\u00fc (Data Integrity):<\/strong> \u0130letilen verilerin yolculuk s\u0131ras\u0131nda de\u011fi\u015ftirilmedi\u011fini veya bozulmad\u0131\u011f\u0131n\u0131 garanti eder.
\n3. Kimlik Do\u011frulama (Authentication):<\/strong> Kullan\u0131c\u0131n\u0131n ger\u00e7ekten bekledi\u011fi sunucuyla ileti\u015fim kurdu\u011fundan emin olmas\u0131n\u0131 sa\u011flar. Bu, \u00f6zellikle bir Sertifika Yetkilisi (CA) taraf\u0131ndan imzalanm\u0131\u015f sertifikalar kullan\u0131ld\u0131\u011f\u0131nda ge\u00e7erlidir.<\/p>\n

Neden SSL\/TLS Kullanmal\u0131y\u0131z?<\/strong><\/p>\n

* Kullan\u0131c\u0131 G\u00fcveni:<\/strong> Ziyaret\u00e7iler, adres \u00e7ubu\u011fundaki kilit simgesini ve “https:\/\/” \u00f6n ekini g\u00f6rd\u00fcklerinde sitenizin g\u00fcvenli oldu\u011funu bilirler. Bu, \u00f6zellikle e-ticaret siteleri i\u00e7in kritik \u00f6neme sahiptir.
\n* Veri G\u00fcvenli\u011fi:<\/strong> \u015eifreleme sayesinde, kullan\u0131c\u0131lar\u0131n ki\u015fisel ve finansal bilgileri g\u00fcvende kal\u0131r.
\n* SEO Avantajlar\u0131:<\/strong> Google gibi arama motorlar\u0131, HTTPS kullanan siteleri s\u0131ralamada \u00f6ncelikli tutmaktad\u0131r. Bu, sitenizin organik arama sonu\u00e7lar\u0131ndaki g\u00f6r\u00fcn\u00fcrl\u00fc\u011f\u00fcn\u00fc art\u0131rabilir.
\n* Yasal Uyumluluk:<\/strong> Baz\u0131 sekt\u00f6rlerde (\u00f6rne\u011fin sa\u011fl\u0131k veya finans), hassas verileri i\u015fleyen web sitelerinin SSL\/TLS kullanmas\u0131 yasal bir zorunluluktur.
\n* Modern Taray\u0131c\u0131 Gereksinimleri:<\/strong> G\u00fcn\u00fcm\u00fcz taray\u0131c\u0131lar\u0131, HTTPS olmayan siteleri “g\u00fcvenli de\u011fil” olarak i\u015faretlemekte ve baz\u0131 API’leri (\u00f6rne\u011fin konum hizmetleri) yaln\u0131zca HTTPS \u00fczerinden sunmaktad\u0131r.<\/p>\n

Kendinden \u0130mzal\u0131 (Self-Signed) Sertifikalar vs. CA Taraf\u0131ndan \u0130mzalanm\u0131\u015f Sertifikalar:<\/strong><\/p>\n

* Kendinden \u0130mzal\u0131 Sertifikalar:<\/strong> Kendi sunucunuz taraf\u0131ndan olu\u015fturulur ve imzalan\u0131r. \u00dccretsizdir ve test ortamlar\u0131, geli\u015ftirme veya dahili a\u011flar i\u00e7in uygundur. Ancak, taray\u0131c\u0131lar taraf\u0131ndan g\u00fcvenilir kabul edilmezler ve ziyaret\u00e7ilere g\u00fcvenlik uyar\u0131s\u0131 g\u00f6sterirler, \u00e7\u00fcnk\u00fc sertifika bir Sertifika Yetkilisi (CA) taraf\u0131ndan do\u011frulanmam\u0131\u015ft\u0131r.
\n* CA Taraf\u0131ndan \u0130mzalanm\u0131\u015f Sertifikalar:<\/strong> Global olarak tan\u0131nan ve g\u00fcvenilen bir Sertifika Yetkilisi (CA) taraf\u0131ndan verilir ve imzalan\u0131r. Taray\u0131c\u0131lar bu sertifikalara otomatik olarak g\u00fcvenir ve kullan\u0131c\u0131ya herhangi bir uyar\u0131 g\u00f6stermez. \u00dcretim ortamlar\u0131 i\u00e7in standart ve \u00f6nerilen \u00e7\u00f6z\u00fcmd\u00fcr. Let’s Encrypt gibi hizmetler sayesinde art\u0131k \u00fccretsiz CA imzal\u0131 sertifikalar da edinmek m\u00fcmk\u00fcnd\u00fcr.<\/p>\n

Bu makalede, \u00f6ncelikle kendinden imzal\u0131 bir sertifikan\u0131n nas\u0131l olu\u015fturulaca\u011f\u0131n\u0131 ve yap\u0131land\u0131r\u0131laca\u011f\u0131n\u0131 detayland\u0131raca\u011f\u0131z. Bu bilgi, bir CA taraf\u0131ndan imzalanm\u0131\u015f bir sertifikay\u0131 yap\u0131land\u0131rmak i\u00e7in de temel te\u015fkil edecektir.<\/p>\n

Debian 8 (Jessie) Ortam\u0131n\u0131n Haz\u0131rlanmas\u0131<\/h3>\n

SSL sertifikas\u0131 olu\u015fturma ve yap\u0131land\u0131rma i\u015flemine ba\u015flamadan \u00f6nce, Debian 8 sunucumuzun g\u00fcncel oldu\u011fundan ve Apache web sunucusunun kurulu oldu\u011fundan emin olmal\u0131y\u0131z.<\/p>\n

Ad\u0131m 1: Sistem G\u00fcncellemesi<\/h4>\n

Sunucunuzdaki paket listesini g\u00fcncelleyin ve y\u00fckl\u00fc paketleri en son s\u00fcr\u00fcmlerine y\u00fckseltin:<\/p>\n

sudo apt update\nsudo apt upgrade<\/code><\/pre>\n
Bu komutlar, olas\u0131 g\u00fcvenlik a\u00e7\u0131klar\u0131n\u0131 kapat\u0131r ve en yeni yaz\u0131l\u0131m s\u00fcr\u00fcmlerine sahip olman\u0131z\u0131 sa\u011flar.<\/p>\n
Ad\u0131m 2: Apache Web Sunucusunun Kurulmas\u0131 (Gerekliyse)<\/h4>\n
E\u011fer Apache hen\u00fcz sunucunuzda kurulu de\u011filse, a\u015fa\u011f\u0131daki komutla kurabilirsiniz:<\/p>\n
sudo apt install apache2<\/code><\/pre>\n
Kurulum tamamland\u0131ktan sonra, Apache servisinin \u00e7al\u0131\u015ft\u0131\u011f\u0131ndan emin olun:<\/p>\n
sudo systemctl start apache2\nsudo systemctl enable apache2\nsudo systemctl status apache2<\/code><\/pre>\n
systemctl status apache2<\/code> komutunun \u00e7\u0131kt\u0131s\u0131nda “active (running)” ifadesini g\u00f6rmelisiniz.<\/p>\n
Ad\u0131m 3: Gerekli Apache Mod\u00fcllerini Etkinle\u015ftirme<\/h4>\n
Apache’nin SSL ba\u011flant\u0131lar\u0131n\u0131 i\u015fleyebilmesi i\u00e7in mod_ssl<\/code> mod\u00fcl\u00fcn\u00fcn etkinle\u015ftirilmesi gerekir. Debian’da bu i\u015flem a2enmod<\/code> arac\u0131yla kolayca yap\u0131l\u0131r:<\/p>\n
sudo a2enmod ssl<\/code><\/pre>\n
Bu komut, mod_ssl<\/code> mod\u00fcl\u00fcn\u00fc etkinle\u015ftirir. De\u011fi\u015fikliklerin etkili olmas\u0131 i\u00e7in Apache’yi yeniden ba\u015flatman\u0131z gerekecektir, ancak bunu sertifika olu\u015fturma ve yap\u0131land\u0131rma ad\u0131mlar\u0131ndan sonra yapaca\u011f\u0131z.<\/p>\n
Kendinden \u0130mzal\u0131 (Self-Signed) SSL Sertifikas\u0131 Olu\u015fturma<\/h3>\n
Kendinden imzal\u0131 bir SSL sertifikas\u0131 olu\u015fturmak i\u00e7in OpenSSL arac\u0131n\u0131 kullanaca\u011f\u0131z. OpenSSL, kriptografik i\u015flevler sunan g\u00fc\u00e7l\u00fc bir komut sat\u0131r\u0131 arac\u0131d\u0131r ve \u00e7o\u011fu Linux da\u011f\u0131t\u0131m\u0131nda varsay\u0131lan olarak bulunur.<\/p>\n
Ad\u0131m 1: Gerekli Paketleri Kurma (OpenSSL)<\/h4>\n
OpenSSL genellikle Debian sistemlerinde varsay\u0131lan olarak y\u00fckl\u00fcd\u00fcr. Ancak, emin olmak i\u00e7in veya herhangi bir nedenle eksikse, a\u015fa\u011f\u0131daki komutla kurabilirsiniz:<\/p>\n
sudo apt install openssl<\/code><\/pre>\n
Ad\u0131m 2: \u00d6zel Anahtar (Private Key) Olu\u015fturma<\/h4>\n
SSL sertifikalar\u0131n\u0131n temelinde bir \u00f6zel anahtar (private key) ve bir genel anahtar (public key) \u00e7ifti bulunur. \u00d6zel anahtar gizli tutulmal\u0131 ve sunucu \u00fczerinde g\u00fcvenli bir yerde saklanmal\u0131d\u0131r. \u0130lk olarak, 2048 bit uzunlu\u011funda bir RSA \u00f6zel anahtar\u0131 olu\u015fturaca\u011f\u0131z. Bu uzunluk, g\u00fcn\u00fcm\u00fcz g\u00fcvenlik standartlar\u0131 i\u00e7in yeterlidir.<\/p>\n
sudo openssl genrsa -out \/etc\/ssl\/private\/apache-selfsigned.key 2048<\/code><\/pre>\n
*   genrsa<\/code>: RSA \u00f6zel anahtar\u0131 olu\u015fturma komutu.
\n*   -out \/etc\/ssl\/private\/apache-selfsigned.key<\/code>: Olu\u015fturulan \u00f6zel anahtar\u0131n kaydedilece\u011fi dosya yolu. \/etc\/ssl\/private\/<\/code> dizini, \u00f6zel anahtarlar i\u00e7in standart bir konumdur ve genellikle sadece root kullan\u0131c\u0131s\u0131 taraf\u0131ndan okunabilir olmal\u0131d\u0131r.
\n*   2048<\/code>: Anahtar\u0131n bit cinsinden uzunlu\u011fu.<\/p>\n
Bu komut, \/etc\/ssl\/private\/apache-selfsigned.key<\/code> yolunda apache-selfsigned.key<\/code> ad\u0131nda bir \u00f6zel anahtar dosyas\u0131 olu\u015fturacakt\u0131r. Bu dosyan\u0131n izinlerini yaln\u0131zca root kullan\u0131c\u0131s\u0131n\u0131n okuyabilece\u011fi \u015fekilde ayarlamak \u00f6nemlidir:<\/p>\n
sudo chmod 600 \/etc\/ssl\/private\/apache-selfsigned.key<\/code><\/pre>\n
Ad\u0131m 3: Sertifika \u0130mzalama \u0130ste\u011fi (CSR) Olu\u015fturma<\/h4>\n
\u00d6zel anahtar\u0131m\u0131z\u0131 olu\u015fturduktan sonra, bir Sertifika \u0130mzalama \u0130ste\u011fi (Certificate Signing Request – CSR) olu\u015fturmal\u0131y\u0131z. CSR, sunucunuz ve sertifikan\u0131z hakk\u0131nda bilgi i\u00e7eren bir dosyad\u0131r ve bir CA’ya sertifika imzalatmak i\u00e7in kullan\u0131l\u0131r. Kendinden imzal\u0131 bir sertifika olu\u015ftururken de bu ad\u0131m\u0131 atlamak yerine, \u00f6nce bir CSR olu\u015fturup sonra bu CSR’\u0131 kendi \u00f6zel anahtar\u0131m\u0131zla imzalayaca\u011f\u0131z.<\/p>\n
sudo openssl req -new -key \/etc\/ssl\/private\/apache-selfsigned.key -out \/etc\/ssl\/certs\/apache-selfsigned.csr<\/code><\/pre>\n
*   req<\/code>: Sertifika imzalama iste\u011fi (CSR) y\u00f6netimi i\u00e7in kullan\u0131lan OpenSSL komutu.
\n*   -new<\/code>: Yeni bir CSR olu\u015fturulaca\u011f\u0131n\u0131 belirtir.
\n*   -key \/etc\/ssl\/private\/apache-selfsigned.key<\/code>: CSR’\u0131n olu\u015fturulaca\u011f\u0131 \u00f6zel anahtar dosyas\u0131n\u0131n yolunu belirtir.
\n*   -out \/etc\/ssl\/certs\/apache-selfsigned.csr<\/code>: Olu\u015fturulan CSR dosyas\u0131n\u0131n kaydedilece\u011fi yol. \/etc\/ssl\/certs\/<\/code> dizini, sertifika dosyalar\u0131 i\u00e7in standart bir konumdur.<\/p>\n
Bu komutu \u00e7al\u0131\u015ft\u0131rd\u0131\u011f\u0131n\u0131zda, OpenSSL sizden sertifika hakk\u0131nda \u00e7e\u015fitli bilgiler isteyecektir. Bu bilgiler, sertifikan\u0131n kimlik bilgilerini olu\u015fturur:<\/p>\n
*   Country Name (2 letter code) [AU]:<\/strong> \u00dclke kodu (\u00f6rne\u011fin, TR).
\n*   State or Province Name (full name) [Some-State]:<\/strong> Eyalet veya il ad\u0131 (\u00f6rne\u011fin, \u0130stanbul).
\n*   Locality Name (eg, city) []:<\/strong> \u015eehir ad\u0131 (\u00f6rne\u011fin, Kad\u0131k\u00f6y).
\n*   Organization Name (eg, company) [Internet Widgits Pty Ltd]:<\/strong> \u015eirket veya kurulu\u015f ad\u0131 (\u00f6rne\u011fin, Benim \u015eirketim A.\u015e.).
\n*   Organizational Unit Name (eg, section) []:<\/strong> Departman veya birim ad\u0131 (\u00f6rne\u011fin, IT Departman\u0131).
\n*   Common Name (e.g. server FQDN or YOUR name) []:<\/strong> Bu k\u0131s\u0131m \u00e7ok \u00f6nemlidir.<\/strong> Web sitenizin tam alan ad\u0131n\u0131 (FQDN) girmelisiniz (\u00f6rne\u011fin, www.ornek.com<\/code> veya ornek.com<\/code>). E\u011fer bir IP adresi \u00fczerinden eri\u015fim sa\u011fl\u0131yorsan\u0131z, IP adresini de girebilirsiniz. Kendinden imzal\u0131 sertifikalarda bu, taray\u0131c\u0131lar\u0131n “g\u00fcvenli de\u011fil” uyar\u0131s\u0131 vermesinin ana nedenlerinden biri olabilir, \u00e7\u00fcnk\u00fc taray\u0131c\u0131 bu ad\u0131 sorgular ve e\u015fle\u015fmezse uyar\u0131 verir.
\n*   Email Address []:<\/strong> \u0130lgili e-posta adresi.
\n*   A challenge password []:<\/strong> \u0130ste\u011fe ba\u011fl\u0131 bir parola. Genellikle bo\u015f b\u0131rak\u0131l\u0131r.
\n*   An optional company name []:<\/strong> \u0130ste\u011fe ba\u011fl\u0131 bir \u015firket ad\u0131. Genellikle bo\u015f b\u0131rak\u0131l\u0131r.<\/p>\n
Bu bilgileri do\u011fru ve eksiksiz bir \u015fekilde doldurun.<\/p>\n
Ad\u0131m 4: Kendinden \u0130mzal\u0131 Sertifika Olu\u015fturma<\/h4>\n
\u015eimdi \u00f6zel anahtar\u0131m\u0131z\u0131 ve CSR dosyam\u0131z\u0131 kullanarak kendinden imzal\u0131 SSL sertifikam\u0131z\u0131 olu\u015fturabiliriz. Bu sertifika, taray\u0131c\u0131lar taraf\u0131ndan “g\u00fcvenilir” olarak kabul edilmeyecek olsa da, \u015fifreleme i\u015flevini yerine getirecektir.<\/p>\n
sudo openssl x509 -req -days 365 -in \/etc\/ssl\/certs\/apache-selfsigned.csr -signkey \/etc\/ssl\/private\/apache-selfsigned.key -out \/etc\/ssl\/certs\/apache-selfsigned.crt<\/code><\/pre>\n
*   x509<\/code>: X.509 sertifika y\u00f6netimi i\u00e7in kullan\u0131lan OpenSSL komutu.
\n*   -req<\/code>: Giri\u015f dosyas\u0131n\u0131n bir CSR oldu\u011funu belirtir.
\n*   -days 365<\/code>: Sertifikan\u0131n ge\u00e7erlilik s\u00fcresini g\u00fcn cinsinden belirtir (burada 1 y\u0131l).
\n*   -in \/etc\/ssl\/certs\/apache-selfsigned.csr<\/code>: Sertifika olu\u015fturmak i\u00e7in kullan\u0131lacak CSR dosyas\u0131n\u0131n yolu.
\n*   -signkey \/etc\/ssl\/private\/apache-selfsigned.key<\/code>: Sertifikay\u0131 imzalamak i\u00e7in kullan\u0131lacak \u00f6zel anahtar\u0131n yolu. Kendinden imzal\u0131 oldu\u011fu i\u00e7in kendi \u00f6zel anahtar\u0131m\u0131z\u0131 kullan\u0131yoruz.
\n*   -out \/etc\/ssl\/certs\/apache-selfsigned.crt<\/code>: Olu\u015fturulan sertifika dosyas\u0131n\u0131n kaydedilece\u011fi yol. .crt<\/code> uzant\u0131s\u0131, sertifika dosyalar\u0131 i\u00e7in yayg\u0131n olarak kullan\u0131l\u0131r.<\/p>\n
Bu ad\u0131mlarla, \/etc\/ssl\/private\/apache-selfsigned.key<\/code> adresinde \u00f6zel anahtar\u0131n\u0131z\u0131 ve \/etc\/ssl\/certs\/apache-selfsigned.crt<\/code> adresinde kendinden imzal\u0131 SSL sertifikan\u0131z\u0131 olu\u015fturmu\u015f oldunuz.<\/p>\n
Apache Sunucusunu SSL \u0130\u00e7in Yap\u0131land\u0131rma<\/h3>\n
Sertifikalar\u0131m\u0131z\u0131 olu\u015fturduktan sonra, Apache’yi bu sertifikalar\u0131 kullanarak HTTPS ba\u011flant\u0131lar\u0131 sunacak \u015fekilde yap\u0131land\u0131rmam\u0131z gerekiyor.<\/p>\n
Ad\u0131m 1: SSL Mod\u00fcl\u00fcn\u00fc Etkinle\u015ftirme (Tekrar Kontrol)<\/h4>\n
Daha \u00f6nce mod_ssl<\/code>‘i etkinle\u015ftirdi\u011fimizden emin olun:<\/p>\n
sudo a2enmod ssl<\/code><\/pre>\n
Ad\u0131m 2: Sanal Host Dosyas\u0131n\u0131 Olu\u015fturma\/D\u00fczenleme<\/h4>\n
Apache, sanal host (VirtualHost) yap\u0131land\u0131rmalar\u0131 arac\u0131l\u0131\u011f\u0131yla farkl\u0131 web sitelerini veya farkl\u0131 protokolleri (HTTP\/HTTPS) y\u00f6netir. Genellikle, SSL i\u00e7in ayr\u0131 bir sanal host yap\u0131land\u0131rmas\u0131 olu\u015fturulur. Debian’da, sanal host yap\u0131land\u0131rmalar\u0131 \/etc\/apache2\/sites-available\/<\/code> dizininde bulunur. Varsay\u0131lan olarak, bu dizinde default-ssl.conf<\/code> ad\u0131nda bir \u00f6rnek dosya bulunabilir. Bu dosyay\u0131 kopyalayarak veya d\u00fczenleyerek ba\u015flayabiliriz.<\/p>\n
\u00d6rnek olarak, default-ssl.conf<\/code> dosyas\u0131n\u0131 kopyalayarak kendi yap\u0131land\u0131rma dosyam\u0131z\u0131 olu\u015ftural\u0131m:<\/p>\n
sudo cp \/etc\/apache2\/sites-available\/default-ssl.conf \/etc\/apache2\/sites-available\/000-default-ssl.conf\nsudo nano \/etc\/apache2\/sites-available\/000-default-ssl.conf<\/code><\/pre>\n
000-default-ssl.conf<\/code> dosyas\u0131n\u0131n i\u00e7eri\u011fini a\u015fa\u011f\u0131daki gibi d\u00fczenleyin (veya kendi sitenizin ihtiya\u00e7lar\u0131na g\u00f6re uyarlay\u0131n):<\/p>\n
\n        \n                ServerAdmin webmaster@localhost\n                ServerName your_domain_or_ip # Kendi alan ad\u0131n\u0131z\u0131 veya IP adresinizi buraya yaz\u0131n\n                DocumentRoot \/var\/www\/html\n\n                ErrorLog ${APACHE_LOG_DIR}\/error.log\n                CustomLog ${APACHE_LOG_DIR}\/access.log combined\n\n                SSLEngine on\n                SSLCertificateFile      \/etc\/ssl\/certs\/apache-selfsigned.crt\n                SSLCertificateKeyFile \/etc\/ssl\/private\/apache-selfsigned.key\n\n                \n                                SSLOptions +StdEnvVars\n                <\/FilesMatch>\n                \n                                SSLOptions +StdEnvVars\n                <\/Directory>\n\n                BrowserMatch \"MSIE [2-6]\" \\\n                                nokeepalive ssl-unclean-shutdown \\\n                                downgrade-1.0 force-response-1.0\n                BrowserMatch \"MSIE [17-9]\" ssl-unclean-shutdown\n        <\/VirtualHost>\n<\/IfModule><\/code><\/pre>\n
Yukar\u0131daki yap\u0131land\u0131rmadaki \u00f6nemli noktalar:<\/strong><\/p>\n
   :443><\/code>: Bu blok, HTTPS’in standart ba\u011flant\u0131 noktas\u0131 olan 443 \u00fczerinden gelen istekleri dinler.
\n*   ServerName your_domain_or_ip<\/code>: Buraya web sitenizin alan ad\u0131n\u0131 (\u00f6rne\u011fin, www.ornek.com<\/code>) veya sunucunuzun IP adresini girin. Bu, daha \u00f6nce CSR olu\u015ftururken girdi\u011finiz Common Name (CN) ile e\u015fle\u015fmelidir.
\n*   DocumentRoot \/var\/www\/html<\/code>: Web sitenizin dosyalar\u0131n\u0131n bulundu\u011fu dizin. Varsay\u0131lan Apache k\u00f6k dizinidir.
\n*   SSLEngine on<\/code>: Bu y\u00f6nerge, SSL motorunu bu sanal host i\u00e7in etkinle\u015ftirir.
\n*   SSLCertificateFile \/etc\/ssl\/certs\/apache-selfsigned.crt<\/code>: Olu\u015fturdu\u011fumuz SSL sertifikas\u0131n\u0131n tam yolu.
\n*   SSLCertificateKeyFile \/etc\/ssl\/private\/apache-selfsigned.key<\/code>: Olu\u015fturdu\u011fumuz \u00f6zel anahtar\u0131n tam yolu.<\/p>\n
E\u011fer bir CA taraf\u0131ndan imzalanm\u0131\u015f bir sertifika kullan\u0131yorsan\u0131z, SSLCertificateChainFile<\/code> veya SSLCACertificateFile<\/code> gibi ek y\u00f6nergelerle ara sertifikalar\u0131 (intermediate certificates) da belirtmeniz gerekebilir. Ancak kendinden imzal\u0131 bir sertifika i\u00e7in bu gerekli de\u011fildir.<\/p>\n
Ad\u0131m 3: Sanal Hostu Etkinle\u015ftirme<\/h4>\n
Yeni olu\u015fturdu\u011fumuz veya d\u00fczenledi\u011fimiz SSL sanal host yap\u0131land\u0131rma dosyas\u0131n\u0131 etkinle\u015ftirmek i\u00e7in a2ensite<\/code> komutunu kullan\u0131n:<\/p>\n
sudo a2ensite 000-default-ssl.conf<\/code><\/pre>\n
Bu komut, \/etc\/apache2\/sites-available\/<\/code> dizinindeki yap\u0131land\u0131rma dosyan\u0131za \/etc\/apache2\/sites-enabled\/<\/code> dizininden bir sembolik ba\u011flant\u0131 (symlink) olu\u015fturur.<\/p>\n
Ad\u0131m 4: Apache’yi Yeniden Ba\u015flatma<\/h4>\n
T\u00fcm de\u011fi\u015fikliklerin etkili olmas\u0131 i\u00e7in Apache servisini yeniden ba\u015flatman\u0131z gerekir:<\/p>\n
sudo systemctl restart apache2<\/code><\/pre>\n
Herhangi bir hata olup olmad\u0131\u011f\u0131n\u0131 kontrol etmek i\u00e7in Apache’nin durumunu kontrol edebilirsiniz:<\/p>\n
sudo systemctl status apache2<\/code><\/pre>\n
E\u011fer herhangi bir hata mesaj\u0131 g\u00f6rm\u00fcyorsan\u0131z, Apache’niz art\u0131k SSL sertifikan\u0131z\u0131 kullanarak HTTPS ba\u011flant\u0131lar\u0131 sunmaya haz\u0131r demektir.<\/p>\n
\u015eimdi web taray\u0131c\u0131n\u0131z\u0131 a\u00e7\u0131p https:\/\/your_domain_or_ip<\/code> adresine giderek sitenize eri\u015fmeye \u00e7al\u0131\u015f\u0131n. Kendinden imzal\u0131 bir sertifika kulland\u0131\u011f\u0131n\u0131z i\u00e7in taray\u0131c\u0131n\u0131z muhtemelen bir g\u00fcvenlik uyar\u0131s\u0131 g\u00f6sterecektir (“Ba\u011flant\u0131n\u0131z gizli de\u011fil”, “Bu site g\u00fcvenli de\u011fil” vb.). Bu uyar\u0131y\u0131 “Geli\u015fmi\u015f” veya “Devam et” se\u00e7ene\u011fiyle atlayarak sitenize eri\u015febilirsiniz. Bu, sertifikan\u0131z\u0131n do\u011fru \u00e7al\u0131\u015ft\u0131\u011f\u0131n\u0131 ancak bir CA taraf\u0131ndan do\u011frulanmad\u0131\u011f\u0131n\u0131 g\u00f6sterir.<\/p>\n
Sertifika Yetkilisi (CA) Taraf\u0131ndan \u0130mzalanm\u0131\u015f Sertifika Kullan\u0131m\u0131 (K\u0131saca)<\/h3>\n
\u00dcretim ortamlar\u0131 i\u00e7in her zaman bir Sertifika Yetkilisi (CA) taraf\u0131ndan imzalanm\u0131\u015f bir sertifika kullanman\u0131z \u015fiddetle tavsiye edilir. S\u00fcre\u00e7, kendinden imzal\u0131 sertifika olu\u015fturmaya benzer, ancak baz\u0131 temel farkl\u0131l\u0131klar vard\u0131r:<\/p>\n
1.  \u00d6zel Anahtar ve CSR Olu\u015fturma:<\/strong> Yine bir \u00f6zel anahtar olu\u015fturur ve bu anahtarla bir CSR dosyas\u0131 haz\u0131rlars\u0131n\u0131z (yukar\u0131daki ad\u0131mlar 2 ve 3 ile ayn\u0131).
\n2.  CSR’\u0131 CA’ya G\u00f6nderme:<\/strong> Olu\u015fturdu\u011funuz CSR dosyas\u0131n\u0131 se\u00e7ti\u011finiz Sertifika Yetkilisine (\u00f6rne\u011fin, Comodo, DigiCert, Let’s Encrypt) g\u00f6nderirsiniz. CA, kimli\u011finizi do\u011frulad\u0131ktan sonra CSR’\u0131n\u0131z\u0131 kendi anahtarlar\u0131yla imzalar ve size sertifika dosyalar\u0131n\u0131 geri g\u00f6nderir.
\n3.  Sertifika Dosyalar\u0131n\u0131 Alma:<\/strong> CA size genellikle birka\u00e7 dosya g\u00f6nderir:
\n    *   Ana sertifika (domain certificate, genellikle your_domain.crt<\/code> veya your_domain.pem<\/code>).
\n    *   Ara sertifikalar (intermediate certificates, intermediate.crt<\/code> veya ca-bundle.crt<\/code>).
\n    *   K\u00f6k sertifika (root certificate, bazen ayr\u0131 bir dosya olarak verilir).
\n4.  Apache Yap\u0131land\u0131rmas\u0131:<\/strong> Apache VirtualHost yap\u0131land\u0131rman\u0131zda, SSLCertificateFile<\/code> y\u00f6nergesini ana sertifikan\u0131z\u0131n yoluna ayarlars\u0131n\u0131z. Ayr\u0131ca, CA taraf\u0131ndan verilen ara sertifikalar\u0131 belirtmek i\u00e7in SSLCertificateChainFile<\/code> veya SSLCACertificateFile<\/code> y\u00f6nergesini kullanman\u0131z gerekebilir. Bu, taray\u0131c\u0131lar\u0131n sertifika zincirini do\u011fru bir \u015fekilde do\u011frulamas\u0131n\u0131 sa\u011flar.<\/p>\n
SSLCertificateFile      \/etc\/ssl\/certs\/your_domain.crt\n    SSLCertificateKeyFile   \/etc\/ssl\/private\/your_domain.key\n    SSLCertificateChainFile \/etc\/ssl\/certs\/intermediate_bundle.crt # Gerekliyse<\/code><\/pre>\n
Let’s Encrypt, \u00fccretsiz ve otomatik sertifikalar sa\u011flayan pop\u00fcler bir CA’d\u0131r. Debian 8 i\u00e7in Let’s Encrypt (Certbot) kurulumu, genellikle backports deposundan veya manuel kurulumla yap\u0131l\u0131r, \u00e7\u00fcnk\u00fc Jessie’nin varsay\u0131lan depolar\u0131nda Certbot’un en yeni s\u00fcr\u00fcm\u00fc bulunmayabilir.<\/p>\n
Ek G\u00fcvenlik \u00d6nlemleri ve \u0130yi Uygulamalar<\/h3>\n
SSL sertifikas\u0131n\u0131 yap\u0131land\u0131rmak sadece ba\u015flang\u0131\u00e7t\u0131r. G\u00fcvenli\u011fi art\u0131rmak ve en iyi uygulamalar\u0131 takip etmek i\u00e7in ek ad\u0131mlar at\u0131labilir:<\/p>\n
1. HTTP’yi HTTPS’ye Y\u00f6nlendirme<\/h4>\n
Kullan\u0131c\u0131lar\u0131n her zaman g\u00fcvenli ba\u011flant\u0131 \u00fczerinden sitenize eri\u015fmesini sa\u011flamak i\u00e7in, HTTP \u00fczerinden gelen t\u00fcm istekleri HTTPS’ye y\u00f6nlendirmek iyi bir uygulamad\u0131r. Bunu Apache’de mod_rewrite<\/code> mod\u00fcl\u00fcn\u00fc kullanarak yapabilirsiniz:<\/p>\n
\u00d6nce mod_rewrite<\/code>‘\u0131 etkinle\u015ftirin:<\/p>\n
sudo a2enmod rewrite<\/code><\/pre>\n
Ard\u0131ndan, HTTP sanal host yap\u0131land\u0131rman\u0131za (genellikle \/etc\/apache2\/sites-available\/000-default.conf<\/code>) a\u015fa\u011f\u0131daki kurallar\u0131 ekleyin:<\/p>\n
\n    ServerName your_domain_or_ip\n    Redirect permanent \/ https:\/\/your_domain_or_ip\/\n<\/VirtualHost><\/code><\/pre>\n
Veya daha esnek bir RewriteRule<\/code> kullanabilirsiniz:<\/p>\n
\n    ServerName your_domain_or_ip\n    RewriteEngine On\n    RewriteCond %{HTTPS} off\n    RewriteRule ^\/?(.*) https:\/\/%{SERVER_NAME}\/$1 [R,L]\n<\/VirtualHost><\/code><\/pre>\n
Bu de\u011fi\u015fikliklerden sonra Apache’yi yeniden ba\u015flatmay\u0131 unutmay\u0131n.<\/p>\n
2. G\u00fc\u00e7l\u00fc \u015eifreler ve Protokoller Kullanma<\/h4>\n
Varsay\u0131lan Apache SSL yap\u0131land\u0131rmas\u0131 bazen eski ve zay\u0131f \u015fifrelemeleri destekleyebilir. G\u00fcvenli\u011fi art\u0131rmak i\u00e7in yaln\u0131zca g\u00fc\u00e7l\u00fc TLS protokollerini (TLSv1.2, TLSv1.3) ve g\u00fc\u00e7l\u00fc \u015fifreleme algoritmalar\u0131n\u0131 kullanmal\u0131s\u0131n\u0131z. Bunu, SSL VirtualHost yap\u0131land\u0131rman\u0131za ekleyece\u011finiz veya \/etc\/apache2\/mods-available\/ssl.conf<\/code> dosyas\u0131nda d\u00fczenleyece\u011finiz SSLProtocol<\/code> ve SSLCipherSuite<\/code> y\u00f6nergeleriyle yapabilirsiniz:<\/p>\n
SSLProtocol All -SSLv2 -SSLv3 -TLSv1 -TLSv1.1\nSSLCipherSuite EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH\nSSLHonorCipherOrder on<\/code><\/pre>\n
Bu, SSLv2, SSLv3, TLSv1.0 ve TLSv1.1 gibi eski ve potansiyel olarak zay\u0131f protokolleri devre d\u0131\u015f\u0131 b\u0131rak\u0131r ve sadece daha g\u00fc\u00e7l\u00fc \u015fifreleri tercih eder.<\/p>\n
3. HSTS (HTTP Strict Transport Security)<\/h4>\n
HSTS, taray\u0131c\u0131lara sitenize her zaman HTTPS \u00fczerinden ba\u011flanmalar\u0131n\u0131 s\u00f6yleyen bir g\u00fcvenlik mekanizmas\u0131d\u0131r. Bu, ilk ba\u011flant\u0131 HTTP \u00fczerinden yap\u0131lsa bile, taray\u0131c\u0131n\u0131n otomatik olarak HTTPS’ye ge\u00e7mesini sa\u011flar ve ortadaki adam (Man-in-the-Middle) sald\u0131r\u0131lar\u0131na kar\u015f\u0131 koruma sa\u011flar. HSTS’yi etkinle\u015ftirmek i\u00e7in Apache’de mod_headers<\/code> mod\u00fcl\u00fcn\u00fc kullanabilirsiniz:<\/p>\n
\u00d6nce mod_headers<\/code>‘\u0131 etkinle\u015ftirin:<\/p>\n
sudo a2enmod headers<\/code><\/pre>\n
Ard\u0131ndan, SSL VirtualHost yap\u0131land\u0131rman\u0131za a\u015fa\u011f\u0131daki sat\u0131r\u0131 ekleyin:<\/p>\n
\n    Header always set Strict-Transport-Security \"max-age=31536000; includeSubDomains; preload\"\n<\/IfModule><\/code><\/pre>\n
max-age<\/code> de\u011feri, taray\u0131c\u0131n\u0131n bu kural\u0131 ne kadar s\u00fcreyle hat\u0131rlayaca\u011f\u0131n\u0131 saniye cinsinden belirtir. includeSubDomains<\/code> alt alan adlar\u0131n\u0131 da kapsar. preload<\/code> ise sitenizi HSTS preload listesine eklemek i\u00e7in kullan\u0131l\u0131r (ancak bu ek bir ad\u0131md\u0131r ve dikkatli yap\u0131lmal\u0131d\u0131r).<\/p>\n
4. Sertifika Yenileme<\/h4>\n
Kendinden imzal\u0131 veya CA taraf\u0131ndan imzalanm\u0131\u015f t\u00fcm sertifikalar\u0131n bir ge\u00e7erlilik s\u00fcresi vard\u0131r. Sertifikan\u0131z\u0131n s\u00fcresi dolmadan \u00f6nce yeniledi\u011finizden emin olun. CA taraf\u0131ndan imzalanm\u0131\u015f sertifikalar i\u00e7in genellikle CA size bir yenileme hat\u0131rlat\u0131c\u0131s\u0131 g\u00f6nderir. Let’s Encrypt gibi hizmetler, otomatik yenileme ara\u00e7lar\u0131 (Certbot) sunar.<\/p>\n
5. \u00d6zel Anahtar G\u00fcvenli\u011fi<\/h4>\n
\u00d6zel anahtar\u0131n\u0131z\u0131n g\u00fcvenli\u011fi, SSL g\u00fcvenli\u011finizin temelidir. Bu dosya, yaln\u0131zca root kullan\u0131c\u0131s\u0131 taraf\u0131ndan okunabilir olmal\u0131 ve asla halka a\u00e7\u0131k bir \u015fekilde payla\u015f\u0131lmamal\u0131d\u0131r.<\/p>\n
Sorun Giderme (Troubleshooting)<\/h3>\n
SSL yap\u0131land\u0131rmas\u0131nda sorunlarla kar\u015f\u0131la\u015fmak yayg\u0131nd\u0131r. \u0130\u015fte baz\u0131 yayg\u0131n sorunlar ve \u00e7\u00f6z\u00fcmleri:<\/p>\n
*   Apache Ba\u015flam\u0131yor veya Hata Veriyor:<\/strong>
\n    *   Apache hata g\u00fcnl\u00fcklerini kontrol edin: \/var\/log\/apache2\/error.log<\/code>. Bu g\u00fcnl\u00fckler, yap\u0131land\u0131rma hatalar\u0131 hakk\u0131nda de\u011ferli bilgiler sa\u011flar.
\n    *   Yap\u0131land\u0131rma dosyas\u0131ndaki s\u00f6zdizimi hatalar\u0131n\u0131 kontrol edin: sudo apache2ctl configtest<\/code>. Bu komut, Apache’yi yeniden ba\u015flatmadan \u00f6nce yap\u0131land\u0131rma dosyalar\u0131n\u0131zdaki hatalar\u0131 kontrol eder.
\n    *   Yanl\u0131\u015f dosya yollar\u0131 veya dosya izinleri olabilir. SSLCertificateFile<\/code> ve SSLCertificateKeyFile<\/code> yollar\u0131n\u0131n do\u011fru oldu\u011fundan ve Apache’nin bu dosyalara okuma iznine sahip oldu\u011fundan emin olun. \u00d6zel anahtar dosyas\u0131n\u0131n izni 600<\/code> olmal\u0131d\u0131r.<\/p>\n
*   Taray\u0131c\u0131 Hala “G\u00fcvenli De\u011fil” Uyar\u0131s\u0131 Veriyor (CA Sertifikas\u0131 Olmas\u0131na Ra\u011fmen):<\/strong>
\n    *   CA taraf\u0131ndan verilen ara sertifikalar\u0131 (intermediate certificates) SSLCertificateChainFile<\/code> y\u00f6nergesiyle do\u011fru bir \u015fekilde yap\u0131land\u0131rd\u0131\u011f\u0131n\u0131zdan emin olun. Taray\u0131c\u0131lar\u0131n g\u00fcven zincirini tamamlayabilmesi i\u00e7in bu sertifikalar gereklidir.
\n    *   ServerName<\/code> y\u00f6nergesinin, sertifikadaki Common Name (CN) ile tam olarak e\u015fle\u015fti\u011finden emin olun.<\/p>\n
*   HTTPS Ba\u011flant\u0131s\u0131 Kurulam\u0131yor (Ba\u011flant\u0131 Zaman A\u015f\u0131m\u0131na U\u011fruyor):<\/strong>
\n    *   Sunucunuzun g\u00fcvenlik duvar\u0131n\u0131n (\u00f6rne\u011fin, UFW veya iptables) 443 numaral\u0131 ba\u011flant\u0131 noktas\u0131n\u0131 (port) a\u00e7t\u0131\u011f\u0131ndan emin olun. Debian 8’de UFW kullan\u0131yorsan\u0131z: sudo ufw allow 443\/tcp<\/code> veya sudo ufw allow 'Apache Full'<\/code>.
\n    *   Apache’nin 443 portunu dinledi\u011finden emin olun. sudo netstat -tulnp | grep 443<\/code> komutuyla kontrol edebilirsiniz.<\/p>\n
*   Eski Taray\u0131c\u0131larda Sorunlar:<\/strong>
\n    *   Yukar\u0131da belirtilen SSLProtocol<\/code> ve SSLCipherSuite<\/code> ayarlar\u0131 \u00e7ok kat\u0131 olabilir. Eski taray\u0131c\u0131lar\u0131 desteklemeniz gerekiyorsa, baz\u0131 zay\u0131f \u015fifreleri veya protokolleri yeniden etkinle\u015ftirmeniz gerekebilir, ancak bu g\u00fcvenlik riskleri ta\u015f\u0131r.<\/p>\n
*   SSL Labs Testi:<\/strong> SSL Labs’\u0131n \u00fccretsiz SSL Sunucu Testi (https:\/\/www.ssllabs.com\/ssltest\/), sunucunuzun SSL\/TLS yap\u0131land\u0131rmas\u0131n\u0131 derinlemesine analiz etmek ve potansiyel sorunlar\u0131 veya zay\u0131fl\u0131klar\u0131 belirlemek i\u00e7in harika bir ara\u00e7t\u0131r.<\/p>\n
Sonu\u00e7<\/h3>\n
Bu makale, Debian 8 i\u015fletim sistemi \u00fczerinde \u00e7al\u0131\u015fan bir Apache web sunucusu i\u00e7in kendinden imzal\u0131 bir SSL sertifikas\u0131n\u0131n nas\u0131l olu\u015fturulaca\u011f\u0131n\u0131 ve yap\u0131land\u0131r\u0131laca\u011f\u0131n\u0131 ad\u0131m ad\u0131m detayland\u0131rm\u0131\u015ft\u0131r. SSL\/TLS’nin ne oldu\u011fu, neden \u00f6nemli oldu\u011fu ve kendinden imzal\u0131 sertifikalar\u0131n test ve geli\u015ftirme ortamlar\u0131 i\u00e7in nas\u0131l kullan\u0131labilece\u011fi a\u00e7\u0131klanm\u0131\u015ft\u0131r. Ayr\u0131ca, Apache’yi SSL i\u00e7in yap\u0131land\u0131rma, CA taraf\u0131ndan imzalanm\u0131\u015f sertifikalar\u0131n kullan\u0131m\u0131 ve ek g\u00fcvenlik \u00f6nlemleri gibi konulara da de\u011finilmi\u015ftir.<\/p>\n
Unutulmamal\u0131d\u0131r ki, kendinden imzal\u0131 sertifikalar \u00fcretim ortamlar\u0131 i\u00e7in uygun de\u011fildir \u00e7\u00fcnk\u00fc taray\u0131c\u0131lar taraf\u0131ndan g\u00fcvenilmez kabul edilirler. Ger\u00e7ek d\u00fcnya uygulamalar\u0131 i\u00e7in her zaman bir Sertifika Yetkilisi (CA) taraf\u0131ndan imzalanm\u0131\u015f bir sertifika kullanmal\u0131s\u0131n\u0131z. Let’s Encrypt gibi hizmetler, bu s\u00fcreci basitle\u015ftirmi\u015f ve \u00fccretsiz hale getirmi\u015ftir.<\/p>\n
Web sitenizin g\u00fcvenli\u011fini sa\u011flamak, kullan\u0131c\u0131lar\u0131n\u0131z\u0131n gizlili\u011fini korumak ve modern web standartlar\u0131na uymak i\u00e7in SSL\/TLS kullan\u0131m\u0131 art\u0131k bir l\u00fcks de\u011fil, bir zorunluluktur. Bu rehberdeki ad\u0131mlar\u0131 takip ederek, Apache sunucunuzu g\u00fcvenli HTTPS ba\u011flant\u0131lar\u0131 sunacak \u015fekilde ba\u015far\u0131yla yap\u0131land\u0131rabilirsiniz. G\u00fcvenli bir web deneyimi i\u00e7in SSL\/TLS yap\u0131land\u0131rman\u0131z\u0131 d\u00fczenli olarak g\u00f6zden ge\u00e7irmeyi ve g\u00fcncel tutmay\u0131 unutmay\u0131n.<\/body><\/p>\n","protected":false},"excerpt":{"rendered":"Apache ve Debian 8 \u00dczerinde SSL Sertifikas\u0131 Olu\u015fturma ve Yap\u0131land\u0131rma Rehberi\n\u0130nternet d\u00fcnyas\u0131nda g\u00fcvenlik, kullan\u0131c\u0131 gizlili\u011fi ve veri b","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"csco_page_header_type":"","csco_page_load_nextpost":"","csco_page_subscribe_form":"","csco_page_contact_form":"","footnotes":""},"categories":[241],"tags":[],"class_list":{"0":"post-37354","1":"post","2":"type-post","3":"status-publish","4":"format-standard","6":"category-linux","7":"cs-entry","8":"cs-video-wrap"},"yoast_head":"\nApache ve Debian 8 \u00dczerinde SSL Sertifikas\u0131 Olu\u015fturma ve Yap\u0131land\u0131rma Rehberi - Kodlar\u0131n Gizemli D\u00fcnyas\u0131<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/fatihsoysal.com\/blog\/apache-ve-debian-8-uzerinde-ssl-sertifikasi-olusturma-ve-yapilandirma-rehberi\/\" \/>\n<meta property=\"og:locale\" content=\"tr_TR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Apache ve Debian 8 \u00dczerinde SSL Sertifikas\u0131 Olu\u015fturma ve Yap\u0131land\u0131rma Rehberi\" \/>\n<meta property=\"og:description\" content=\"Apache ve Debian 8 \u00dczerinde SSL Sertifikas\u0131 Olu\u015fturma ve Yap\u0131land\u0131rma Rehberi \u0130nternet d\u00fcnyas\u0131nda g\u00fcvenlik, kullan\u0131c\u0131 gizlili\u011fi ve veri b\" \/>\n<meta property=\"og:url\" content=\"https:\/\/fatihsoysal.com\/blog\/apache-ve-debian-8-uzerinde-ssl-sertifikasi-olusturma-ve-yapilandirma-rehberi\/\" \/>\n<meta property=\"og:site_name\" content=\"Kodlar\u0131n Gizemli D\u00fcnyas\u0131\" \/>\n<meta property=\"article:published_time\" content=\"2026-01-01T00:40:42+00:00\" \/>\n<meta name=\"author\" content=\"Fatih Soysal\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Yazan:\" \/>\n\t<meta name=\"twitter:data1\" content=\"Fatih Soysal\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tahmini okuma s\u00fcresi\" \/>\n\t<meta name=\"twitter:data2\" content=\"18 dakika\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/apache-ve-debian-8-uzerinde-ssl-sertifikasi-olusturma-ve-yapilandirma-rehberi\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/apache-ve-debian-8-uzerinde-ssl-sertifikasi-olusturma-ve-yapilandirma-rehberi\/\"},\"author\":{\"name\":\"Fatih Soysal\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"headline\":\"Apache ve Debian 8 \u00dczerinde SSL Sertifikas\u0131 Olu\u015fturma ve Yap\u0131land\u0131rma Rehberi\",\"datePublished\":\"2026-01-01T00:40:42+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/apache-ve-debian-8-uzerinde-ssl-sertifikasi-olusturma-ve-yapilandirma-rehberi\/\"},\"wordCount\":3228,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"articleSection\":[\"Linux\"],\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/apache-ve-debian-8-uzerinde-ssl-sertifikasi-olusturma-ve-yapilandirma-rehberi\/#respond\"]}],\"copyrightYear\":\"2026\",\"copyrightHolder\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/apache-ve-debian-8-uzerinde-ssl-sertifikasi-olusturma-ve-yapilandirma-rehberi\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/apache-ve-debian-8-uzerinde-ssl-sertifikasi-olusturma-ve-yapilandirma-rehberi\/\",\"name\":\"Apache ve Debian 8 \u00dczerinde SSL Sertifikas\u0131 Olu\u015fturma ve Yap\u0131land\u0131rma Rehberi - Kodlar\u0131n Gizemli D\u00fcnyas\u0131\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\"},\"datePublished\":\"2026-01-01T00:40:42+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/apache-ve-debian-8-uzerinde-ssl-sertifikasi-olusturma-ve-yapilandirma-rehberi\/#breadcrumb\"},\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/apache-ve-debian-8-uzerinde-ssl-sertifikasi-olusturma-ve-yapilandirma-rehberi\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/apache-ve-debian-8-uzerinde-ssl-sertifikasi-olusturma-ve-yapilandirma-rehberi\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Anasayfa\",\"item\":\"https:\/\/fatihsoysal.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Apache ve Debian 8 \u00dczerinde SSL Sertifikas\u0131 Olu\u015fturma ve Yap\u0131land\u0131rma Rehberi\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/\",\"name\":\"Fatihsoysal.com\",\"description\":\"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim\",\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"tr\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\",\"name\":\"Fatih Soysal\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"tr\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"contentUrl\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"width\":512,\"height\":512,\"caption\":\"Fatih Soysal\"},\"logo\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\"},\"description\":\"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Apache ve Debian 8 \u00dczerinde SSL Sertifikas\u0131 Olu\u015fturma ve Yap\u0131land\u0131rma Rehberi - Kodlar\u0131n Gizemli D\u00fcnyas\u0131","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/fatihsoysal.com\/blog\/apache-ve-debian-8-uzerinde-ssl-sertifikasi-olusturma-ve-yapilandirma-rehberi\/","og_locale":"tr_TR","og_type":"article","og_title":"Apache ve Debian 8 \u00dczerinde SSL Sertifikas\u0131 Olu\u015fturma ve Yap\u0131land\u0131rma Rehberi","og_description":"Apache ve Debian 8 \u00dczerinde SSL Sertifikas\u0131 Olu\u015fturma ve Yap\u0131land\u0131rma Rehberi \u0130nternet d\u00fcnyas\u0131nda g\u00fcvenlik, kullan\u0131c\u0131 gizlili\u011fi ve veri b","og_url":"https:\/\/fatihsoysal.com\/blog\/apache-ve-debian-8-uzerinde-ssl-sertifikasi-olusturma-ve-yapilandirma-rehberi\/","og_site_name":"Kodlar\u0131n Gizemli D\u00fcnyas\u0131","article_published_time":"2026-01-01T00:40:42+00:00","author":"Fatih Soysal","twitter_card":"summary_large_image","twitter_misc":{"Yazan:":"Fatih Soysal","Tahmini okuma s\u00fcresi":"18 dakika"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/fatihsoysal.com\/blog\/apache-ve-debian-8-uzerinde-ssl-sertifikasi-olusturma-ve-yapilandirma-rehberi\/#article","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/apache-ve-debian-8-uzerinde-ssl-sertifikasi-olusturma-ve-yapilandirma-rehberi\/"},"author":{"name":"Fatih Soysal","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"headline":"Apache ve Debian 8 \u00dczerinde SSL Sertifikas\u0131 Olu\u015fturma ve Yap\u0131land\u0131rma Rehberi","datePublished":"2026-01-01T00:40:42+00:00","mainEntityOfPage":{"@id":"https:\/\/fatihsoysal.com\/blog\/apache-ve-debian-8-uzerinde-ssl-sertifikasi-olusturma-ve-yapilandirma-rehberi\/"},"wordCount":3228,"commentCount":0,"publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"articleSection":["Linux"],"inLanguage":"tr","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/fatihsoysal.com\/blog\/apache-ve-debian-8-uzerinde-ssl-sertifikasi-olusturma-ve-yapilandirma-rehberi\/#respond"]}],"copyrightYear":"2026","copyrightHolder":{"@id":"https:\/\/fatihsoysal.com\/blog\/#organization"}},{"@type":"WebPage","@id":"https:\/\/fatihsoysal.com\/blog\/apache-ve-debian-8-uzerinde-ssl-sertifikasi-olusturma-ve-yapilandirma-rehberi\/","url":"https:\/\/fatihsoysal.com\/blog\/apache-ve-debian-8-uzerinde-ssl-sertifikasi-olusturma-ve-yapilandirma-rehberi\/","name":"Apache ve Debian 8 \u00dczerinde SSL Sertifikas\u0131 Olu\u015fturma ve Yap\u0131land\u0131rma Rehberi - Kodlar\u0131n Gizemli D\u00fcnyas\u0131","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/#website"},"datePublished":"2026-01-01T00:40:42+00:00","breadcrumb":{"@id":"https:\/\/fatihsoysal.com\/blog\/apache-ve-debian-8-uzerinde-ssl-sertifikasi-olusturma-ve-yapilandirma-rehberi\/#breadcrumb"},"inLanguage":"tr","potentialAction":[{"@type":"ReadAction","target":["https:\/\/fatihsoysal.com\/blog\/apache-ve-debian-8-uzerinde-ssl-sertifikasi-olusturma-ve-yapilandirma-rehberi\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/fatihsoysal.com\/blog\/apache-ve-debian-8-uzerinde-ssl-sertifikasi-olusturma-ve-yapilandirma-rehberi\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Anasayfa","item":"https:\/\/fatihsoysal.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Apache ve Debian 8 \u00dczerinde SSL Sertifikas\u0131 Olu\u015fturma ve Yap\u0131land\u0131rma Rehberi"}]},{"@type":"WebSite","@id":"https:\/\/fatihsoysal.com\/blog\/#website","url":"https:\/\/fatihsoysal.com\/blog\/","name":"Fatihsoysal.com","description":"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim","publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"tr"},{"@type":["Person","Organization"],"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1","name":"Fatih Soysal","image":{"@type":"ImageObject","inLanguage":"tr","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","contentUrl":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","width":512,"height":512,"caption":"Fatih Soysal"},"logo":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/"},"description":"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.","url":"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/"}]}},"yoast_meta":{"yoast_wpseo_title":"","yoast_wpseo_metadesc":"","yoast_wpseo_canonical":""},"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/37354","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/comments?post=37354"}],"version-history":[{"count":1,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/37354\/revisions"}],"predecessor-version":[{"id":37355,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/37354\/revisions\/37355"}],"wp:attachment":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/media?parent=37354"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/categories?post=37354"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/tags?post=37354"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}