{"id":38120,"date":"2026-01-23T17:30:52","date_gmt":"2026-01-23T14:30:52","guid":{"rendered":"https:\/\/fatihsoysal.com\/blog\/mariadb-error-2002-hy000-cozumu-tls-el-sikisma-hatasi-ve-host-is-not-allowed-to-connect-sorunu\/"},"modified":"2026-01-23T17:30:52","modified_gmt":"2026-01-23T14:30:52","slug":"mariadb-error-2002-hy000-cozumu-tls-el-sikisma-hatasi-ve-host-is-not-allowed-to-connect-sorunu","status":"publish","type":"post","link":"https:\/\/fatihsoysal.com\/blog\/mariadb-error-2002-hy000-cozumu-tls-el-sikisma-hatasi-ve-host-is-not-allowed-to-connect-sorunu\/","title":{"rendered":"MariaDB ERROR 2002 (HY000) \u00c7\u00f6z\u00fcm\u00fc: TLS El S\u0131k\u0131\u015fma Hatas\u0131 ve &#8220;Host Is Not Allowed to Connect&#8221; Sorunu"},"content":{"rendered":"<h2>MariaDB ERROR 2002 (HY000) \u00c7\u00f6z\u00fcm\u00fc: TLS El S\u0131k\u0131\u015fma Hatas\u0131 ve &#8220;Host Is Not Allowed to Connect&#8221; Sorunu<\/h2>\n<p>MariaDB veritaban\u0131 sunucular\u0131nda kar\u015f\u0131la\u015f\u0131lan <code>ERROR 2002 (HY000): TLS Handshake Fails with \"Host Is Not Allowed to Connect\"<\/code> hatas\u0131, hem ba\u011flant\u0131 g\u00fcvenli\u011fi (TLS\/SSL) hem de sunucu eri\u015fim izinleriyle ilgili karma\u015f\u0131k bir soruna i\u015faret eder. Bu makale, bu hatan\u0131n k\u00f6kenlerini anlaman\u0131za, olas\u0131 nedenlerini belirlemenize ve ad\u0131m ad\u0131m \u00e7\u00f6z\u00fcmler uygulaman\u0131za yard\u0131mc\u0131 olmay\u0131 ama\u00e7lamaktad\u0131r. Hem sunucu hem de istemci taraf\u0131ndaki yap\u0131land\u0131rmalar\u0131 detayl\u0131ca inceleyerek, veritaban\u0131 ba\u011flant\u0131lar\u0131n\u0131z\u0131 g\u00fcvenli ve sorunsuz hale getirme yolculu\u011funuzda size rehberlik edece\u011fiz.<\/p>\n<h3>1. Hatay\u0131 Anlamak: ERROR 2002 ve TLS El S\u0131k\u0131\u015fma S\u00fcreci<\/h3>\n<p>MariaDB&#8217;de kar\u015f\u0131la\u015f\u0131lan <code>ERROR 2002 (HY000)<\/code> genellikle bir ba\u011flant\u0131 hatas\u0131d\u0131r. Ancak bu \u00f6zel durumda, hatan\u0131n devam\u0131nda yer alan &#8220;TLS Handshake Fails&#8221; ve &#8220;Host Is Not Allowed to Connect&#8221; ifadeleri, sorunun sadece basit bir ba\u011flant\u0131 reddinden \u00f6te, g\u00fcvenlik katman\u0131nda ve eri\u015fim politikalar\u0131nda yatt\u0131\u011f\u0131n\u0131 g\u00f6sterir. Bu b\u00f6l\u00fcm, bu ifadelerin ne anlama geldi\u011fini ve TLS el s\u0131k\u0131\u015fma s\u00fcrecinin nas\u0131l i\u015fledi\u011fini a\u00e7\u0131klayacakt\u0131r.<\/p>\n<h4>1.1. TLS\/SSL Nedir ve Neden \u00d6nemlidir?<\/h4>\n<p>TLS (Transport Layer Security) ve selefi SSL (Secure Sockets Layer), internet \u00fczerinden g\u00f6nderilen verilerin g\u00fcvenli\u011fini sa\u011flamak i\u00e7in kullan\u0131lan kriptografik protokollerdir. MariaDB gibi veritaban\u0131 sistemlerinde TLS kullan\u0131m\u0131, istemci ile sunucu aras\u0131ndaki t\u00fcm ileti\u015fimin \u015fifrelenmesini sa\u011flayarak hassas verilerin dinlenmesini (eavesdropping) ve kurcalanmas\u0131n\u0131 (tampering) engeller. Ayr\u0131ca, sunucu kimlik do\u011frulamas\u0131 (server authentication) ve iste\u011fe ba\u011fl\u0131 olarak istemci kimlik do\u011frulamas\u0131 (client authentication) yaparak ba\u011flant\u0131n\u0131n do\u011fru taraflar aras\u0131nda kuruldu\u011fundan emin olur.<\/p>\n<h4>1.2. El S\u0131k\u0131\u015fma S\u00fcrecinde Neler Yanl\u0131\u015f Gidebilir?<\/h4>\n<p>TLS el s\u0131k\u0131\u015fma (handshake) s\u00fcreci, istemci ve sunucunun g\u00fcvenli bir ba\u011flant\u0131 kurmak i\u00e7in birbirleriyle ileti\u015fim kurdu\u011fu ad\u0131mlar dizisidir. Bu s\u00fcre\u00e7te bir\u00e7ok \u015fey yanl\u0131\u015f gidebilir:<\/p>\n<ul>\n<li><strong>Sertifika Sorunlar\u0131:<\/strong> Sunucu sertifikas\u0131n\u0131n s\u00fcresinin dolmas\u0131, ge\u00e7ersiz olmas\u0131, g\u00fcvenilmeyen bir CA (Certificate Authority) taraf\u0131ndan imzalanmas\u0131 veya istemcinin CA sertifikas\u0131na sahip olmamas\u0131.<\/li>\n<li><strong>Anahtar Sorunlar\u0131:<\/strong> Sertifikayla e\u015fle\u015fmeyen \u00f6zel anahtar (private key) kullan\u0131lmas\u0131.<\/li>\n<li><strong>Protokol veya \u015eifre Uyu\u015fmazl\u0131\u011f\u0131:<\/strong> \u0130stemci ve sunucunun destekledi\u011fi TLS protokol versiyonlar\u0131 (\u00f6rn. TLSv1.2, TLSv1.3) veya \u015fifre s\u00fcitlerinin (cipher suites) uyumsuz olmas\u0131.<\/li>\n<li><strong>Saat Fark\u0131:<\/strong> \u0130stemci ve sunucu aras\u0131ndaki \u00f6nemli saat farklar\u0131, sertifika ge\u00e7erlilik kontrollerini etkileyebilir.<\/li>\n<li><strong>\u0130stemci Sertifikas\u0131 Zorunlulu\u011fu:<\/strong> Sunucunun istemciden bir sertifika talep etmesi ancak istemcinin bunu sa\u011flamamas\u0131 veya ge\u00e7ersiz bir sertifika sunmas\u0131.<\/li>\n<\/ul>\n<h4>1.3. &#8220;Host Is Not Allowed to Connect&#8221; \u0130fadesinin Anlam\u0131<\/h4>\n<p>Bu ifade genellikle iki ana senaryoda kar\u015f\u0131m\u0131za \u00e7\u0131kar:<\/p>\n<ol>\n<li><strong>Kullan\u0131c\u0131 \u0130zinleri:<\/strong> MariaDB&#8217;de tan\u0131ml\u0131 kullan\u0131c\u0131n\u0131n, ba\u011flant\u0131 kurmaya \u00e7al\u0131\u015ft\u0131\u011f\u0131 IP adresi veya ana bilgisayar ad\u0131ndan ba\u011flanma izni olmamas\u0131. \u00d6rne\u011fin, bir kullan\u0131c\u0131 sadece <code>user@'localhost'<\/code> olarak tan\u0131mlanm\u0131\u015fken, ba\u015fka bir IP adresinden ba\u011flanmaya \u00e7al\u0131\u015fmas\u0131.<\/li>\n<li><strong>TLS Ko\u015fullar\u0131:<\/strong> Kullan\u0131c\u0131n\u0131n veya sunucunun, ba\u011flant\u0131n\u0131n TLS \u00fczerinden yap\u0131lmas\u0131n\u0131 zorunlu k\u0131lmas\u0131 (\u00f6rn. <code>REQUIRE SSL<\/code> veya <code>REQUIRE X509<\/code> gibi <code>GRANT<\/code> se\u00e7enekleri). E\u011fer TLS el s\u0131k\u0131\u015fmas\u0131 ba\u015far\u0131s\u0131z olursa, sunucu ba\u011flant\u0131y\u0131 reddeder ve bu mesaj\u0131 g\u00f6sterebilir, \u00e7\u00fcnk\u00fc belirtilen ko\u015fullar sa\u011flanamam\u0131\u015ft\u0131r.<\/li>\n<li><strong><code>bind-address<\/code> K\u0131s\u0131tlamas\u0131:<\/strong> MariaDB sunucusunun sadece belirli IP adreslerinden gelen ba\u011flant\u0131lar\u0131 dinleyecek \u015fekilde yap\u0131land\u0131r\u0131lmas\u0131 ve istemcinin bu izin verilen adresler aras\u0131nda olmamas\u0131.<\/li>\n<\/ol>\n<h3>2. MariaDB Sunucu Taraf\u0131 TLS\/SSL Yap\u0131land\u0131rmas\u0131n\u0131 Kontrol Etme<\/h3>\n<p>Bu hatan\u0131n en yayg\u0131n nedenlerinden biri, MariaDB sunucusunun TLS\/SSL yap\u0131land\u0131rmas\u0131ndaki yanl\u0131\u015fl\u0131klard\u0131r. Sunucunun do\u011fru sertifikalar\u0131 kulland\u0131\u011f\u0131ndan ve g\u00fcvenli bir \u015fekilde yap\u0131land\u0131r\u0131ld\u0131\u011f\u0131ndan emin olmal\u0131y\u0131z.<\/p>\n<h4>2.1. <code>my.cnf<\/code> Dosyas\u0131n\u0131 \u0130nceleme<\/h4>\n<p>MariaDB yap\u0131land\u0131rma dosyas\u0131 olan <code>my.cnf<\/code> (veya ilgili <code>my.cnf.d<\/code> dizinindeki dosyalar), sunucunun TLS ayarlar\u0131n\u0131 i\u00e7erir. Bu dosyay\u0131 genellikle <code>\/etc\/mysql\/my.cnf<\/code>, <code>\/etc\/my.cnf<\/code> veya <code>\/etc\/mysql\/mariadb.conf.d\/50-server.cnf<\/code> gibi konumlarda bulabilirsiniz. A\u015fa\u011f\u0131daki parametreleri kontrol edin:<\/p>\n<pre><code class=\"language-ini\">[mariadb]\n# Veya [mysqld] b\u00f6l\u00fcm\u00fcnde de olabilir\nssl_ca=\/etc\/mysql\/certs\/ca.pem\nssl_cert=\/etc\/mysql\/certs\/server-cert.pem\nssl_key=\/etc\/mysql\/certs\/server-key.pem\n# \u0130ste\u011fe ba\u011fl\u0131, ancak g\u00fcvenlik i\u00e7in \u00f6nerilir\n# tls_version=TLSv1.2,TLSv1.3\n# ssl_cipher=TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256:TLS_AES_128_GCM_SHA256\n<\/pre>\n<p><\/code><\/p>\n<ul>\n<li><code>ssl_ca<\/code>: G\u00fcvenilir k\u00f6k sertifika otoritesinin (CA) sertifika dosyas\u0131n\u0131n yolu. \u0130stemci sertifikalar\u0131n\u0131 do\u011frulamak i\u00e7in kullan\u0131l\u0131r.<\/li>\n<li><code>ssl_cert<\/code>: Sunucunun kendi sertifika dosyas\u0131n\u0131n yolu.<\/li>\n<li><code>ssl_key<\/code>: Sunucunun \u00f6zel anahtar dosyas\u0131n\u0131n yolu.<\/li>\n<li><code>tls_version<\/code>: Desteklenen TLS protokol versiyonlar\u0131n\u0131 belirtir. Eski ve zay\u0131f versiyonlar\u0131 (\u00f6rn. TLSv1.0, TLSv1.1) devre d\u0131\u015f\u0131 b\u0131rakmak \u00f6nemlidir.<\/li>\n<li><code>ssl_cipher<\/code>: Kullan\u0131lacak \u015fifre s\u00fcitlerini belirtir. G\u00fcvenli ve modern s\u00fcitler tercih edilmelidir.<\/li>\n<\/ul>\n<h4>2.2. Sertifika ve Anahtar Dosyalar\u0131n\u0131n Do\u011frulu\u011fu<\/h4>\n<p>Belirtilen sertifika ve anahtar dosyalar\u0131n\u0131n:<\/p>\n<ul>\n<li><strong>Mevcut Oldu\u011fundan:<\/strong> Dosyalar\u0131n belirtilen yollarda ger\u00e7ekten bulundu\u011fundan emin olun.<\/li>\n<li><strong>Okunabilir Oldu\u011fundan:<\/strong> MariaDB kullan\u0131c\u0131s\u0131n\u0131n (genellikle <code>mysql<\/code> veya <code>mariadb<\/code>) bu dosyalara okuma izni oldu\u011fundan emin olun. \u00d6zel anahtar dosyas\u0131 i\u00e7in izinler \u00e7ok k\u0131s\u0131tl\u0131 olmal\u0131d\u0131r (\u00f6rn. <code>600<\/code>).<\/li>\n<li><strong>Ge\u00e7erli Oldu\u011fundan:<\/strong> Sertifikalar\u0131n s\u00fcresinin dolmad\u0131\u011f\u0131ndan ve bozuk olmad\u0131\u011f\u0131ndan emin olun.<\/li>\n<li><strong>E\u015fle\u015fti\u011finden:<\/strong> <code>ssl_cert<\/code> ve <code>ssl_key<\/code> ile belirtilen sertifika ve \u00f6zel anahtar\u0131n birbirine uyumlu oldu\u011fundan emin olun. Bunu a\u015fa\u011f\u0131daki komutlarla kontrol edebilirsiniz:\n<pre><code class=\"language-bash\">openssl x509 -noout -modulus -in \/etc\/mysql\/certs\/server-cert.pem | openssl md5\nopenssl rsa -noout -modulus -in \/etc\/mysql\/certs\/server-key.pem | openssl md5\n# Her iki komutun \u00e7\u0131kt\u0131s\u0131 ayn\u0131 olmal\u0131d\u0131r.<\/pre>\n<p><\/code>\n    <\/li>\n<\/ul>\n<h4>2.3. TLS Protokol Versiyonlar\u0131 ve \u015eifre S\u00fcitleri<\/h4>\n<p>Hem istemci hem de sunucunun ortak bir TLS versiyonu ve \u015fifre s\u00fciti \u00fczerinde anla\u015fabilmesi gerekir. E\u011fer sunucu \u00e7ok k\u0131s\u0131tlay\u0131c\u0131 bir yap\u0131land\u0131rmaya sahipse ve istemci bu k\u0131s\u0131tlamalar\u0131 kar\u015f\u0131layam\u0131yorsa, el s\u0131k\u0131\u015fma ba\u015far\u0131s\u0131z olur. G\u00fcvenlik i\u00e7in eski TLS versiyonlar\u0131n\u0131 (TLSv1.0, TLSv1.1) devre d\u0131\u015f\u0131 b\u0131rakmak, ancak istemcilerinizin destekledi\u011fi modern versiyonlar\u0131 (TLSv1.2, TLSv1.3) etkin b\u0131rakmak \u00f6nemlidir.<\/p>\n<h4>2.4. Sunucuyu Yeniden Ba\u015flatma ve Loglar\u0131 Kontrol Etme<\/h4>\n<p><code>my.cnf<\/code> dosyas\u0131nda yap\u0131lan herhangi bir de\u011fi\u015fiklikten sonra MariaDB hizmetini yeniden ba\u015flatman\u0131z gerekir:<\/p>\n<pre><code class=\"language-bash\">sudo systemctl restart mariadb\n<\/pre>\n<p><\/code><\/p>\n<p>Yeniden ba\u015flatman\u0131n ard\u0131ndan, MariaDB hata loglar\u0131n\u0131 kontrol ederek TLS ile ilgili herhangi bir uyar\u0131 veya hata olup olmad\u0131\u011f\u0131n\u0131 inceleyin:<\/p>\n<pre><code class=\"language-bash\">sudo journalctl -u mariadb # Systemd kullanan sistemler i\u00e7in\n# Veya\nsudo tail -f \/var\/log\/mysql\/error.log # Eski sistemler veya farkl\u0131 yap\u0131land\u0131rmalar i\u00e7in\n<\/pre>\n<p><\/code><\/p>\n<h3>3. MariaDB Kullan\u0131c\u0131 \u0130zinlerini ve Ba\u011flant\u0131 Ayarlar\u0131n\u0131 G\u00f6zden Ge\u00e7irme<\/h3>\n<p>\"Host Is Not Allowed to Connect\" mesaj\u0131, genellikle MariaDB'nin kendi i\u00e7indeki kullan\u0131c\u0131 izinleri veya a\u011f ayarlar\u0131yla ilgilidir. TLS el s\u0131k\u0131\u015fmas\u0131 ba\u015far\u0131l\u0131 olsa bile, bu sorunlar ba\u011flant\u0131y\u0131 engelleyebilir.<\/p>\n<h4>3.1. Kullan\u0131c\u0131 \u0130zinlerini ve <code>GRANT<\/code> Deyimlerini Kontrol Etme<\/h4>\n<p>Ba\u011flant\u0131 kurmaya \u00e7al\u0131\u015ft\u0131\u011f\u0131n\u0131z kullan\u0131c\u0131n\u0131n, istemcinin IP adresinden veya ana bilgisayar ad\u0131ndan ba\u011flanma izni oldu\u011fundan emin olun. Ayr\u0131ca, TLS gereksinimlerini kontrol edin.<\/p>\n<pre><code class=\"language-sql\">SELECT user, host, ssl_type FROM mysql.user WHERE user = 'your_user';\n<\/pre>\n<p><\/code><\/p>\n<p>E\u011fer kullan\u0131c\u0131n\u0131z\u0131n <code>host<\/code> de\u011feri <code>localhost<\/code> ise ve siz uzak bir IP'den ba\u011flanmaya \u00e7al\u0131\u015f\u0131yorsan\u0131z, ba\u011flant\u0131 reddedilecektir. <code>host<\/code> de\u011feri <code>%<\/code> (herhangi bir host) veya belirli bir IP adresi olmal\u0131d\u0131r. E\u011fer <code>ssl_type<\/code> de\u011feri <code>ANY<\/code>, <code>X509<\/code>, <code>SPECIFIED<\/code> veya <code>REQUIRED<\/code> ise, ba\u011flant\u0131n\u0131n TLS \u00fczerinden yap\u0131lmas\u0131 zorunludur.<\/p>\n<p>Kullan\u0131c\u0131n\u0131n izinlerini g\u00fcncellemek i\u00e7in:<\/p>\n<pre><code class=\"language-sql\">-- Kullan\u0131c\u0131n\u0131n belirli bir host'tan ba\u011flanmas\u0131na izin verme\nGRANT ALL PRIVILEGES ON your_database.* TO 'your_user'@'your_client_ip' IDENTIFIED BY 'your_password' REQUIRE SSL;\n\n-- Veya herhangi bir host'tan ba\u011flanmas\u0131na izin verme (g\u00fcvenlik riski ta\u015f\u0131yabilir, dikkatli olun)\n-- GRANT ALL PRIVILEGES ON your_database.* TO 'your_user'@'%' IDENTIFIED BY 'your_password' REQUIRE SSL;\n\n-- Sadece sertifika ile kimlik do\u011frulama gerektiren bir kullan\u0131c\u0131 olu\u015fturma\n-- CREATE USER 'tls_user'@'%' REQUIRE X509;\n-- GRANT ALL PRIVILEGES ON your_database.* TO 'tls_user'@'%';\n\nFLUSH PRIVILEGES;\n<\/pre>\n<p><\/code><\/p>\n<p><code>REQUIRE SSL<\/code>, ba\u011flant\u0131n\u0131n \u015fifreli olmas\u0131n\u0131 zorunlu k\u0131lar. <code>REQUIRE X509<\/code> ise ek olarak istemcinin ge\u00e7erli bir sertifika sunmas\u0131n\u0131 ve bu sertifikan\u0131n CA taraf\u0131ndan imzalanm\u0131\u015f olmas\u0131n\u0131 gerektirir.<\/p>\n<h4>3.2. <code>bind-address<\/code> Ayar\u0131n\u0131n \u0130ncelenmesi<\/h4>\n<p>MariaDB sunucusu, <code>my.cnf<\/code> dosyas\u0131ndaki <code>bind-address<\/code> ayar\u0131 ile hangi a\u011f aray\u00fczlerinden ba\u011flant\u0131lar\u0131 dinleyece\u011fini belirler. E\u011fer bu ayar <code>127.0.0.1<\/code> (localhost) olarak yap\u0131land\u0131r\u0131lm\u0131\u015fsa, sunucu sadece yerel ba\u011flant\u0131lar\u0131 kabul edecektir. Uzak ba\u011flant\u0131lara izin vermek i\u00e7in bu ayar\u0131 sunucunun IP adresine veya <code>0.0.0.0<\/code> (t\u00fcm aray\u00fczler) olarak de\u011fi\u015ftirmelisiniz.<\/p>\n<pre><code class=\"language-ini\">[mariadb]\nbind-address=0.0.0.0 # T\u00fcm aray\u00fczlerden gelen ba\u011flant\u0131lara izin verir\n# Veya belirli bir IP adresi:\n# bind-address=192.168.1.100\n<\/pre>\n<p><\/code><\/p>\n<p>De\u011fi\u015fiklik yapt\u0131ktan sonra MariaDB hizmetini yeniden ba\u015flatmay\u0131 unutmay\u0131n.<\/p>\n<h4>3.3. G\u00fcvenlik Duvar\u0131 (Firewall) Kontrol\u00fc<\/h4>\n<p>Sunucu \u00fczerindeki bir g\u00fcvenlik duvar\u0131 (\u00f6rn. <code>ufw<\/code>, <code>firewalld<\/code>, <code>iptables<\/code>) MariaDB'nin varsay\u0131lan portu olan 3306'ya gelen ba\u011flant\u0131lar\u0131 engelliyor olabilir. \u0130stemcinin IP adresinden bu porta eri\u015fime izin verildi\u011finden emin olun.<\/p>\n<pre><code class=\"language-bash\"># UFW i\u00e7in \u00f6rnek\nsudo ufw allow from your_client_ip to any port 3306\nsudo ufw enable\nsudo ufw status verbose\n\n# Firewalld i\u00e7in \u00f6rnek\nsudo firewall-cmd --permanent --add-source=your_client_ip --add-port=3306\/tcp\nsudo firewall-cmd --reload\n<\/pre>\n<p><\/code><\/p>\n<h3>4. MariaDB \u0130stemci Taraf\u0131 TLS\/SSL Yap\u0131land\u0131rmas\u0131<\/h3>\n<p>Sorun sadece sunucuda de\u011fil, istemcinin MariaDB'ye ba\u011flanma \u015fekli ve TLS yap\u0131land\u0131rmas\u0131nda da olabilir.<\/p>\n<h4>4.1. \u0130stemci Ba\u011flant\u0131 Dizgesini \u0130nceleme<\/h4>\n<p>\u0130stemcinizin MariaDB'ye ba\u011flanmak i\u00e7in kulland\u0131\u011f\u0131 komut veya kod dizgesini kontrol edin. TLS ba\u011flant\u0131s\u0131 kurmak i\u00e7in genellikle belirli parametreler gereklidir.<\/p>\n<pre><code class=\"language-bash\">mysql -h your_mariadb_host -u your_user -p \\\n    --ssl-mode=REQUIRED \\\n    --ssl-ca=\/path\/to\/client\/certs\/ca.pem \\\n    --ssl-cert=\/path\/to\/client\/certs\/client-cert.pem \\\n    --ssl-key=\/path\/to\/client\/certs\/client-key.pem\n<\/pre>\n<p><\/code><\/p>\n<ul>\n<li><code>--ssl-mode=REQUIRED<\/code>: \u0130stemcinin TLS ba\u011flant\u0131s\u0131 kurmas\u0131n\u0131 zorunlu k\u0131lar.<\/li>\n<li><code>--ssl-ca<\/code>: Sunucunun sertifikas\u0131n\u0131 do\u011frulamak i\u00e7in kullan\u0131lan CA sertifikas\u0131n\u0131n yolu.<\/li>\n<li><code>--ssl-cert<\/code>: \u0130stemcinin kendi sertifikas\u0131n\u0131n yolu (sunucu istemci sertifikas\u0131 talep ediyorsa).<\/li>\n<li><code>--ssl-key<\/code>: \u0130stemcinin \u00f6zel anahtar\u0131n\u0131n yolu (sunucu istemci sertifikas\u0131 talep ediyorsa).<\/li>\n<\/ul>\n<h4>4.2. \u0130stemci Sertifikalar\u0131 ve CA Dosyalar\u0131<\/h4>\n<p>E\u011fer sunucu istemci sertifikas\u0131 talep ediyorsa (<code>REQUIRE X509<\/code>), istemcinin do\u011fru ve ge\u00e7erli bir sertifika ile \u00f6zel anahtara sahip olmas\u0131 ve bunlar\u0131 ba\u011flant\u0131 s\u0131ras\u0131nda sunmas\u0131 gerekir. Ayr\u0131ca, istemcinin sunucu sertifikas\u0131n\u0131 do\u011frulamas\u0131 i\u00e7in sunucunun sertifikas\u0131n\u0131 imzalam\u0131\u015f olan CA'n\u0131n sertifikas\u0131na da ihtiyac\u0131 vard\u0131r.<\/p>\n<p>\u0130stemci taraf\u0131ndaki sertifika dosyalar\u0131n\u0131n da do\u011fru izinlere sahip oldu\u011fundan ve bozuk olmad\u0131\u011f\u0131ndan emin olun.<\/p>\n<h4>4.3. <code>ssl-mode<\/code> Parametresi<\/h4>\n<p><code>ssl-mode<\/code> parametresi, istemcinin TLS ba\u011flant\u0131s\u0131n\u0131 nas\u0131l kuraca\u011f\u0131n\u0131 belirler:<\/p>\n<ul>\n<li><code>DISABLED<\/code>: TLS kullanma. (G\u00fcvenlik riski ta\u015f\u0131r, \u00f6nerilmez)<\/li>\n<li><code>PREFERRED<\/code>: M\u00fcmk\u00fcnse TLS kullan, de\u011filse kullanma.<\/li>\n<li><code>REQUIRED<\/code>: TLS kullanmak zorunlu. E\u011fer TLS ba\u011flant\u0131s\u0131 kurulam\u0131yorsa, ba\u011flant\u0131 ba\u015far\u0131s\u0131z olur.<\/li>\n<li><code>VERIFY_CA<\/code>: TLS kullan ve sunucu sertifikas\u0131n\u0131 CA'ya g\u00f6re do\u011frula.<\/li>\n<li><code>VERIFY_IDENTITY<\/code>: TLS kullan, sunucu sertifikas\u0131n\u0131 CA'ya g\u00f6re do\u011frula ve sertifikadaki ana bilgisayar ad\u0131n\u0131n ba\u011flanmaya \u00e7al\u0131\u015f\u0131lan ana bilgisayar ad\u0131yla e\u015fle\u015fti\u011finden emin ol.<\/li>\n<\/ul>\n<p>G\u00fcvenlik i\u00e7in genellikle <code>VERIFY_CA<\/code> veya <code>VERIFY_IDENTITY<\/code> kullan\u0131lmas\u0131 \u00f6nerilir.<\/p>\n<h3>5. Ortak Hata Ay\u0131klama Ad\u0131mlar\u0131 ve Ara\u00e7lar<\/h3>\n<p>Sorunu te\u015fhis etmek i\u00e7in kullanabilece\u011finiz baz\u0131 genel hata ay\u0131klama teknikleri ve ara\u00e7lar\u0131 vard\u0131r.<\/p>\n<h4>5.1. MariaDB Hata Loglar\u0131n\u0131 \u0130nceleme<\/h4>\n<p>MariaDB hata loglar\u0131, sunucu taraf\u0131ndaki sorunlar hakk\u0131nda en de\u011ferli bilgiyi sa\u011flar. TLS el s\u0131k\u0131\u015fma hatalar\u0131, sertifika sorunlar\u0131 veya izin reddi gibi durumlar burada a\u00e7\u0131k\u00e7a belirtilebilir. Loglar\u0131 d\u00fczenli olarak kontrol etmek, sorunun k\u00f6k nedenini h\u0131zl\u0131ca bulman\u0131za yard\u0131mc\u0131 olur.<\/p>\n<pre><code class=\"language-bash\">sudo tail -f \/var\/log\/mysql\/error.log\n# Veya\nsudo journalctl -u mariadb -f\n<\/pre>\n<p><\/code><\/p>\n<h4>5.2. <code>openssl<\/code> Komutlar\u0131 ile Ba\u011flant\u0131 Testi<\/h4>\n<p><code>openssl s_client<\/code> arac\u0131, MariaDB sunucusunun TLS yap\u0131land\u0131rmas\u0131n\u0131 d\u0131\u015far\u0131dan test etmek i\u00e7in \u00e7ok g\u00fc\u00e7l\u00fc bir ara\u00e7t\u0131r. \u0130stemci taraf\u0131nda bir MariaDB ba\u011flant\u0131s\u0131 kurmadan \u00f6nce sunucunun TLS \u00f6zelliklerini kontrol edebilirsiniz.<\/p>\n<pre><code class=\"language-bash\">openssl s_client -connect your_mariadb_host:3306 -CAfile \/path\/to\/client\/certs\/ca.pem\n<\/pre>\n<p><\/code><\/p>\n<p>Bu komut, sunucu ile bir TLS el s\u0131k\u0131\u015fmas\u0131 yapmaya \u00e7al\u0131\u015f\u0131r ve ba\u011flant\u0131n\u0131n detaylar\u0131n\u0131 (kullan\u0131lan TLS versiyonu, \u015fifre s\u00fciti, sunucu sertifikas\u0131 bilgileri vb.) g\u00f6sterir. E\u011fer el s\u0131k\u0131\u015fma ba\u015far\u0131s\u0131z olursa, hatan\u0131n nerede oldu\u011funu anlaman\u0131za yard\u0131mc\u0131 olacak mesajlar g\u00f6receksiniz.<\/p>\n<h4>5.3. A\u011f \u0130zleme Ara\u00e7lar\u0131 (Wireshark, tcpdump)<\/h4>\n<p>Daha derinlemesine bir analiz i\u00e7in Wireshark veya tcpdump gibi a\u011f izleme ara\u00e7lar\u0131n\u0131 kullanabilirsiniz. Bu ara\u00e7lar, a\u011f \u00fczerinden ge\u00e7en t\u00fcm paketleri yakalayarak TLS el s\u0131k\u0131\u015fma s\u00fcrecini ad\u0131m ad\u0131m g\u00f6rmenizi sa\u011flar. Hangi taraf\u0131n hangi mesaj\u0131 g\u00f6nderdi\u011fini ve nerede bir hata olu\u015ftu\u011funu (\u00f6rn. \"Alert (Level: Fatal, Description: Handshake Failure)\") tespit etmenize yard\u0131mc\u0131 olabilir.<\/p>\n<h3>6. Pratik \u00c7\u00f6z\u00fcmler ve En \u0130yi Uygulamalar<\/h3>\n<p>Bu t\u00fcr hatalar\u0131 \u00f6nlemek ve MariaDB ba\u011flant\u0131lar\u0131n\u0131z\u0131 g\u00fcvenli tutmak i\u00e7in baz\u0131 en iyi uygulamalar mevcuttur.<\/p>\n<h4>6.1. Sertifikalar\u0131 Yenileme ve Do\u011frulama<\/h4>\n<p>Sertifikalar\u0131n\u0131z\u0131n s\u00fcresinin dolmad\u0131\u011f\u0131ndan ve do\u011fru bir \u015fekilde yap\u0131land\u0131r\u0131ld\u0131\u011f\u0131ndan emin olun. Sertifikalar\u0131 d\u00fczenli olarak yenilemek ve CA sertifikalar\u0131n\u0131n hem sunucu hem de istemci taraf\u0131nda g\u00fcncel oldu\u011fundan emin olmak \u00f6nemlidir. Let's Encrypt gibi hizmetler, otomatik sertifika yenileme i\u00e7in kullan\u0131labilir.<\/p>\n<h4>6.2. G\u00fcvenli TLS Yap\u0131land\u0131rmas\u0131 \u0130\u00e7in \u00d6neriler<\/h4>\n<ul>\n<li>Her zaman modern TLS versiyonlar\u0131n\u0131 (TLSv1.2, TLSv1.3) kullan\u0131n ve eski, zay\u0131f versiyonlar\u0131 devre d\u0131\u015f\u0131 b\u0131rak\u0131n.<\/li>\n<li>G\u00fc\u00e7l\u00fc \u015fifre s\u00fcitleri kullan\u0131n ve zay\u0131f olanlar\u0131 devre d\u0131\u015f\u0131 b\u0131rak\u0131n.<\/li>\n<li>Hem sunucu hem de istemci taraf\u0131nda sertifika do\u011frulamas\u0131n\u0131 (<code>VERIFY_CA<\/code> veya <code>VERIFY_IDENTITY<\/code>) zorunlu k\u0131l\u0131n.<\/li>\n<li>\u00d6zel anahtar dosyalar\u0131n\u0131n izinlerini \u00e7ok k\u0131s\u0131tl\u0131 tutun (sadece MariaDB kullan\u0131c\u0131s\u0131 okuyabilir).<\/li>\n<\/ul>\n<h4>6.3. Otomatik Sertifika Y\u00f6netimi<\/h4>\n<p>Let's Encrypt ve Certbot gibi ara\u00e7lar, sertifika ya\u015fam d\u00f6ng\u00fcs\u00fcn\u00fc (olu\u015fturma, yenileme, da\u011f\u0131tma) otomatikle\u015ftirmek i\u00e7in kullan\u0131labilir. Bu, manuel hatalar\u0131 azalt\u0131r ve sertifikalar\u0131n s\u00fcresinin dolmas\u0131 gibi sorunlar\u0131 \u00f6nler.<\/p>\n<h3>7. Ge\u00e7ici \u00c7\u00f6z\u00fcmler ve Riskler<\/h3>\n<p>Acil durumlarda, sorunu h\u0131zl\u0131ca \u00e7\u00f6zmek i\u00e7in baz\u0131 ge\u00e7ici \u00e7\u00f6z\u00fcmler uygulanabilir. Ancak bu \u00e7\u00f6z\u00fcmler genellikle g\u00fcvenlik riskleri ta\u015f\u0131r ve kal\u0131c\u0131 bir \u00e7\u00f6z\u00fcm olarak d\u00fc\u015f\u00fcn\u00fclmemelidir.<\/p>\n<h4>7.1. TLS'i Ge\u00e7ici Olarak Devre D\u0131\u015f\u0131 B\u0131rakma (UYARI!)<\/h4>\n<p>E\u011fer acil bir durumdaysan\u0131z ve ba\u011flant\u0131 kurman\u0131z gerekiyorsa, TLS'i ge\u00e7ici olarak devre d\u0131\u015f\u0131 b\u0131rakabilirsiniz. Bu, <code>my.cnf<\/code> dosyas\u0131ndaki <code>ssl_ca<\/code>, <code>ssl_cert<\/code>, <code>ssl_key<\/code> ayarlar\u0131n\u0131 yorum sat\u0131r\u0131 yaparak ve MariaDB'yi yeniden ba\u015flatarak yap\u0131labilir. \u0130stemci taraf\u0131nda da <code>ssl-mode=DISABLED<\/code> kullanman\u0131z gerekebilir.<\/p>\n<pre><code class=\"language-ini\">[mariadb]\n#ssl_ca=\/etc\/mysql\/certs\/ca.pem\n#ssl_cert=\/etc\/mysql\/certs\/server-cert.pem\n#ssl_key=\/etc\/mysql\/certs\/server-key.pem\n<\/pre>\n<p><\/code><\/p>\n<p><strong>UYARI:<\/strong> Bu, ba\u011flant\u0131n\u0131z\u0131 \u015fifresiz hale getirir ve verilerinizi dinlemeye kar\u015f\u0131 savunmas\u0131z b\u0131rak\u0131r. Sadece hata ay\u0131klama amac\u0131yla ve \u00e7ok k\u0131sa s\u00fcreli\u011fine kullan\u0131lmal\u0131d\u0131r.<\/p>\n<h4>7.2. <code>skip-name-resolve<\/code> Kullan\u0131m\u0131 (UYARI!)<\/h4>\n<p>E\u011fer \"Host Is Not Allowed to Connect\" hatas\u0131 DNS \u00e7\u00f6z\u00fcmleme sorunlar\u0131ndan kaynaklan\u0131yorsa, <code>my.cnf<\/code> dosyas\u0131na <code>skip-name-resolve<\/code> ekleyebilirsiniz. Bu, MariaDB'nin istemci ana bilgisayar adlar\u0131n\u0131 IP adreslerine \u00e7\u00f6z\u00fcmlemeye \u00e7al\u0131\u015fmas\u0131n\u0131 engeller ve sadece IP adresleriyle \u00e7al\u0131\u015f\u0131r.<\/p>\n<pre><code class=\"language-ini\">[mariadb]\nskip-name-resolve\n<\/pre>\n<p><\/code><\/p>\n<p><strong>UYARI:<\/strong> Bu ayar, kullan\u0131c\u0131 izinlerini sadece IP adresleri \u00fczerinden y\u00f6netmenizi gerektirir (\u00f6rn. <code>user@'192.168.1.10'<\/code>). Ayr\u0131ca, g\u00fcvenlik denetimi ve loglama a\u00e7\u0131s\u0131ndan baz\u0131 zorluklar yaratabilir. Yeniden ba\u015flatt\u0131ktan sonra, kullan\u0131c\u0131 izinlerini IP adreslerine g\u00f6re g\u00fcncellemeyi unutmay\u0131n.<\/p>\n<h3>Sonu\u00e7<\/h3>\n<p>MariaDB'deki <code>ERROR 2002 (HY000): TLS Handshake Fails with \"Host Is Not Allowed to Connect\"<\/code> hatas\u0131, genellikle TLS\/SSL yap\u0131land\u0131rmas\u0131, kullan\u0131c\u0131 izinleri ve a\u011f eri\u015fimi gibi birden fazla fakt\u00f6r\u00fcn birle\u015fimiyle ortaya \u00e7\u0131kan karma\u015f\u0131k bir sorundur. Bu makalede sunulan ad\u0131mlar\u0131 izleyerek, hem sunucu hem de istemci taraf\u0131ndaki olas\u0131 sorunlar\u0131 sistematik bir \u015fekilde te\u015fhis edebilir ve \u00e7\u00f6zebilirsiniz. G\u00fcvenli ve \u015fifreli ba\u011flant\u0131lar, veritaban\u0131 g\u00fcvenli\u011finin temel ta\u015f\u0131d\u0131r; bu nedenle, bu t\u00fcr hatalar\u0131 gidermek ve do\u011fru yap\u0131land\u0131rmalar\u0131 uygulamak kritik \u00f6neme sahiptir. Unutmay\u0131n, g\u00fcvenlik ve eri\u015filebilirlik aras\u0131nda do\u011fru dengeyi bulmak, sa\u011flam bir veritaban\u0131 altyap\u0131s\u0131 i\u00e7in elzemdir.<\/p>\n<h3>SSS (S\u0131k Sorulan Sorular)<\/h3>\n<h4>S: <code>ERROR 2002<\/code> her zaman TLS hatas\u0131 m\u0131 demektir?<\/h4>\n<p>C: Hay\u0131r, <code>ERROR 2002<\/code> genel bir ba\u011flant\u0131 hatas\u0131d\u0131r. Ancak bu makaledeki \u00f6zel durumda, hatan\u0131n devam\u0131ndaki \"TLS Handshake Fails\" ve \"Host Is Not Allowed to Connect\" ifadeleri, sorunun TLS ve host izinleriyle ilgili oldu\u011funu belirtir.<\/p>\n<h4>S: <code>my.cnf<\/code> dosyas\u0131n\u0131 nerede bulabilirim?<\/h4>\n<p>C: <code>my.cnf<\/code> dosyas\u0131 genellikle Linux sistemlerinde <code>\/etc\/mysql\/my.cnf<\/code>, <code>\/etc\/my.cnf<\/code> veya <code>\/etc\/mysql\/mariadb.conf.d\/<\/code> dizini i\u00e7inde (\u00f6rn. <code>50-server.cnf<\/code>) bulunur. Tam konum da\u011f\u0131t\u0131ma ve MariaDB s\u00fcr\u00fcm\u00fcne g\u00f6re de\u011fi\u015febilir.<\/p>\n<h4>S: Kendi imzal\u0131 (self-signed) sertifikalar\u0131 kullanabilir miyim?<\/h4>\n<p>C: Evet, kendi imzal\u0131 sertifikalar\u0131 kullanabilirsiniz, ancak istemcinizin bu sertifikaya veya onu imzalayan CA sertifikas\u0131na g\u00fcvenmesi i\u00e7in manuel olarak yap\u0131land\u0131rman\u0131z gerekir. \u00dcretim ortamlar\u0131nda genellikle g\u00fcvenilir bir CA taraf\u0131ndan imzalanm\u0131\u015f sertifikalar tercih edilir.<\/p>\n<h4>S: Ba\u011flant\u0131 kurarken neden <code>ssl-mode=DISABLED<\/code> kullanmamal\u0131y\u0131m?<\/h4>\n<p>C: <code>ssl-mode=DISABLED<\/code> kullanmak, istemci ile sunucu aras\u0131ndaki t\u00fcm ileti\u015fimin \u015fifresiz olaca\u011f\u0131 anlam\u0131na gelir. Bu, hassas verilerin a\u011f \u00fczerinde kolayca dinlenmesine (eavesdropping) yol a\u00e7abilir ve ciddi g\u00fcvenlik riskleri olu\u015fturur. Yaln\u0131zca \u00e7ok k\u0131sa s\u00fcreli hata ay\u0131klama durumlar\u0131 d\u0131\u015f\u0131nda ka\u00e7\u0131n\u0131lmal\u0131d\u0131r.<\/p>\n<h4>S: \"Host is not allowed to connect\" hatas\u0131 TLS olmadan da al\u0131nabilir mi?<\/h4>\n<p>C: Evet, bu hata TLS ile ilgili olmayan nedenlerle de al\u0131nabilir. \u00d6rne\u011fin, MariaDB kullan\u0131c\u0131s\u0131n\u0131n belirli bir IP adresinden ba\u011flanma izni yoksa (<code>GRANT<\/code> deyimleri), <code>bind-address<\/code> ayar\u0131 istemcinin eri\u015fimine izin vermiyorsa veya bir g\u00fcvenlik duvar\u0131 ba\u011flant\u0131y\u0131 engelliyorsa, TLS kullan\u0131lmasa bile bu hatayla kar\u015f\u0131la\u015fabilirsiniz.<\/p>\n","protected":false},"excerpt":{"rendered":"MariaDB&#8217;de kar\u015f\u0131la\u015f\u0131lan ERROR 2002 (HY000) genellikle bir ba\u011flant\u0131 hatas\u0131d\u0131r. Ancak bu \u00f6zel durumda, hatan\u0131n devam\u0131nda yer alan &#8220;TLS Handshake Fai&#8230;","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"csco_page_header_type":"","csco_page_load_nextpost":"","csco_page_subscribe_form":"","csco_page_contact_form":"","footnotes":""},"categories":[1],"tags":[],"class_list":{"0":"post-38120","1":"post","2":"type-post","3":"status-publish","4":"format-standard","6":"category-genel","7":"cs-entry","8":"cs-video-wrap"},"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v20.5 (Yoast SEO v25.3.1) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>MariaDB ERROR 2002 (HY000) \u00c7\u00f6z\u00fcm\u00fc: TLS El S\u0131k\u0131\u015fma Hatas\u0131 ve &quot;Host Is Not Allowed to Connect&quot; Sorunu - Kodlar\u0131n Gizemli D\u00fcnyas\u0131<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/fatihsoysal.com\/blog\/mariadb-error-2002-hy000-cozumu-tls-el-sikisma-hatasi-ve-host-is-not-allowed-to-connect-sorunu\/\" \/>\n<meta property=\"og:locale\" content=\"tr_TR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"MariaDB ERROR 2002 (HY000) \u00c7\u00f6z\u00fcm\u00fc: TLS El S\u0131k\u0131\u015fma Hatas\u0131 ve &quot;Host Is Not Allowed to Connect&quot; Sorunu\" \/>\n<meta property=\"og:description\" content=\"MariaDB&#039;de kar\u015f\u0131la\u015f\u0131lan ERROR 2002 (HY000) genellikle bir ba\u011flant\u0131 hatas\u0131d\u0131r. Ancak bu \u00f6zel durumda, hatan\u0131n devam\u0131nda yer alan &quot;TLS Handshake Fai...\" \/>\n<meta property=\"og:url\" content=\"https:\/\/fatihsoysal.com\/blog\/mariadb-error-2002-hy000-cozumu-tls-el-sikisma-hatasi-ve-host-is-not-allowed-to-connect-sorunu\/\" \/>\n<meta property=\"og:site_name\" content=\"Kodlar\u0131n Gizemli D\u00fcnyas\u0131\" \/>\n<meta property=\"article:published_time\" content=\"2026-01-23T14:30:52+00:00\" \/>\n<meta name=\"author\" content=\"Fatih Soysal\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Yazan:\" \/>\n\t<meta name=\"twitter:data1\" content=\"Fatih Soysal\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tahmini okuma s\u00fcresi\" \/>\n\t<meta name=\"twitter:data2\" content=\"16 dakika\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/mariadb-error-2002-hy000-cozumu-tls-el-sikisma-hatasi-ve-host-is-not-allowed-to-connect-sorunu\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/mariadb-error-2002-hy000-cozumu-tls-el-sikisma-hatasi-ve-host-is-not-allowed-to-connect-sorunu\/\"},\"author\":{\"name\":\"Fatih Soysal\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"headline\":\"MariaDB ERROR 2002 (HY000) \u00c7\u00f6z\u00fcm\u00fc: TLS El S\u0131k\u0131\u015fma Hatas\u0131 ve &#8220;Host Is Not Allowed to Connect&#8221; Sorunu\",\"datePublished\":\"2026-01-23T14:30:52+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/mariadb-error-2002-hy000-cozumu-tls-el-sikisma-hatasi-ve-host-is-not-allowed-to-connect-sorunu\/\"},\"wordCount\":2615,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/mariadb-error-2002-hy000-cozumu-tls-el-sikisma-hatasi-ve-host-is-not-allowed-to-connect-sorunu\/#respond\"]}],\"copyrightYear\":\"2026\",\"copyrightHolder\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/mariadb-error-2002-hy000-cozumu-tls-el-sikisma-hatasi-ve-host-is-not-allowed-to-connect-sorunu\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/mariadb-error-2002-hy000-cozumu-tls-el-sikisma-hatasi-ve-host-is-not-allowed-to-connect-sorunu\/\",\"name\":\"MariaDB ERROR 2002 (HY000) \u00c7\u00f6z\u00fcm\u00fc: TLS El S\u0131k\u0131\u015fma Hatas\u0131 ve \\\"Host Is Not Allowed to Connect\\\" Sorunu - Kodlar\u0131n Gizemli D\u00fcnyas\u0131\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\"},\"datePublished\":\"2026-01-23T14:30:52+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/mariadb-error-2002-hy000-cozumu-tls-el-sikisma-hatasi-ve-host-is-not-allowed-to-connect-sorunu\/#breadcrumb\"},\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/mariadb-error-2002-hy000-cozumu-tls-el-sikisma-hatasi-ve-host-is-not-allowed-to-connect-sorunu\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/mariadb-error-2002-hy000-cozumu-tls-el-sikisma-hatasi-ve-host-is-not-allowed-to-connect-sorunu\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Anasayfa\",\"item\":\"https:\/\/fatihsoysal.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"MariaDB ERROR 2002 (HY000) \u00c7\u00f6z\u00fcm\u00fc: TLS El S\u0131k\u0131\u015fma Hatas\u0131 ve &#8220;Host Is Not Allowed to Connect&#8221; Sorunu\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/\",\"name\":\"Fatihsoysal.com\",\"description\":\"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim\",\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"tr\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\",\"name\":\"Fatih Soysal\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"tr\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"contentUrl\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"width\":512,\"height\":512,\"caption\":\"Fatih Soysal\"},\"logo\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\"},\"description\":\"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"MariaDB ERROR 2002 (HY000) \u00c7\u00f6z\u00fcm\u00fc: TLS El S\u0131k\u0131\u015fma Hatas\u0131 ve \"Host Is Not Allowed to Connect\" Sorunu - Kodlar\u0131n Gizemli D\u00fcnyas\u0131","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/fatihsoysal.com\/blog\/mariadb-error-2002-hy000-cozumu-tls-el-sikisma-hatasi-ve-host-is-not-allowed-to-connect-sorunu\/","og_locale":"tr_TR","og_type":"article","og_title":"MariaDB ERROR 2002 (HY000) \u00c7\u00f6z\u00fcm\u00fc: TLS El S\u0131k\u0131\u015fma Hatas\u0131 ve \"Host Is Not Allowed to Connect\" Sorunu","og_description":"MariaDB'de kar\u015f\u0131la\u015f\u0131lan ERROR 2002 (HY000) genellikle bir ba\u011flant\u0131 hatas\u0131d\u0131r. Ancak bu \u00f6zel durumda, hatan\u0131n devam\u0131nda yer alan \"TLS Handshake Fai...","og_url":"https:\/\/fatihsoysal.com\/blog\/mariadb-error-2002-hy000-cozumu-tls-el-sikisma-hatasi-ve-host-is-not-allowed-to-connect-sorunu\/","og_site_name":"Kodlar\u0131n Gizemli D\u00fcnyas\u0131","article_published_time":"2026-01-23T14:30:52+00:00","author":"Fatih Soysal","twitter_card":"summary_large_image","twitter_misc":{"Yazan:":"Fatih Soysal","Tahmini okuma s\u00fcresi":"16 dakika"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/fatihsoysal.com\/blog\/mariadb-error-2002-hy000-cozumu-tls-el-sikisma-hatasi-ve-host-is-not-allowed-to-connect-sorunu\/#article","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/mariadb-error-2002-hy000-cozumu-tls-el-sikisma-hatasi-ve-host-is-not-allowed-to-connect-sorunu\/"},"author":{"name":"Fatih Soysal","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"headline":"MariaDB ERROR 2002 (HY000) \u00c7\u00f6z\u00fcm\u00fc: TLS El S\u0131k\u0131\u015fma Hatas\u0131 ve &#8220;Host Is Not Allowed to Connect&#8221; Sorunu","datePublished":"2026-01-23T14:30:52+00:00","mainEntityOfPage":{"@id":"https:\/\/fatihsoysal.com\/blog\/mariadb-error-2002-hy000-cozumu-tls-el-sikisma-hatasi-ve-host-is-not-allowed-to-connect-sorunu\/"},"wordCount":2615,"commentCount":0,"publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"inLanguage":"tr","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/fatihsoysal.com\/blog\/mariadb-error-2002-hy000-cozumu-tls-el-sikisma-hatasi-ve-host-is-not-allowed-to-connect-sorunu\/#respond"]}],"copyrightYear":"2026","copyrightHolder":{"@id":"https:\/\/fatihsoysal.com\/blog\/#organization"}},{"@type":"WebPage","@id":"https:\/\/fatihsoysal.com\/blog\/mariadb-error-2002-hy000-cozumu-tls-el-sikisma-hatasi-ve-host-is-not-allowed-to-connect-sorunu\/","url":"https:\/\/fatihsoysal.com\/blog\/mariadb-error-2002-hy000-cozumu-tls-el-sikisma-hatasi-ve-host-is-not-allowed-to-connect-sorunu\/","name":"MariaDB ERROR 2002 (HY000) \u00c7\u00f6z\u00fcm\u00fc: TLS El S\u0131k\u0131\u015fma Hatas\u0131 ve \"Host Is Not Allowed to Connect\" Sorunu - Kodlar\u0131n Gizemli D\u00fcnyas\u0131","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/#website"},"datePublished":"2026-01-23T14:30:52+00:00","breadcrumb":{"@id":"https:\/\/fatihsoysal.com\/blog\/mariadb-error-2002-hy000-cozumu-tls-el-sikisma-hatasi-ve-host-is-not-allowed-to-connect-sorunu\/#breadcrumb"},"inLanguage":"tr","potentialAction":[{"@type":"ReadAction","target":["https:\/\/fatihsoysal.com\/blog\/mariadb-error-2002-hy000-cozumu-tls-el-sikisma-hatasi-ve-host-is-not-allowed-to-connect-sorunu\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/fatihsoysal.com\/blog\/mariadb-error-2002-hy000-cozumu-tls-el-sikisma-hatasi-ve-host-is-not-allowed-to-connect-sorunu\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Anasayfa","item":"https:\/\/fatihsoysal.com\/blog\/"},{"@type":"ListItem","position":2,"name":"MariaDB ERROR 2002 (HY000) \u00c7\u00f6z\u00fcm\u00fc: TLS El S\u0131k\u0131\u015fma Hatas\u0131 ve &#8220;Host Is Not Allowed to Connect&#8221; Sorunu"}]},{"@type":"WebSite","@id":"https:\/\/fatihsoysal.com\/blog\/#website","url":"https:\/\/fatihsoysal.com\/blog\/","name":"Fatihsoysal.com","description":"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim","publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"tr"},{"@type":["Person","Organization"],"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1","name":"Fatih Soysal","image":{"@type":"ImageObject","inLanguage":"tr","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","contentUrl":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","width":512,"height":512,"caption":"Fatih Soysal"},"logo":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/"},"description":"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.","url":"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/"}]}},"yoast_meta":{"yoast_wpseo_title":"","yoast_wpseo_metadesc":"","yoast_wpseo_canonical":""},"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/38120","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/comments?post=38120"}],"version-history":[{"count":0,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/38120\/revisions"}],"wp:attachment":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/media?parent=38120"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/categories?post=38120"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/tags?post=38120"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}