{"id":42080,"date":"2026-05-26T17:00:33","date_gmt":"2026-05-26T14:00:33","guid":{"rendered":"https:\/\/fatihsoysal.com\/blog\/?p=42080"},"modified":"2026-05-26T17:00:56","modified_gmt":"2026-05-26T14:00:56","slug":"apache-sunucusu-icin-ubuntu-20-04te-kendinden-imzali-ssl-sertifikasi-olusturma","status":"publish","type":"post","link":"https:\/\/fatihsoysal.com\/blog\/apache-sunucusu-icin-ubuntu-20-04te-kendinden-imzali-ssl-sertifikasi-olusturma\/","title":{"rendered":"Apache Sunucusu \u0130\u00e7in Ubuntu 20.04’te Kendinden \u0130mzal\u0131 SSL Sertifikas\u0131 Olu\u015fturma"},"content":{"rendered":"

Apache Sunucusu \u0130\u00e7in Ubuntu 20.04’te Kendinden \u0130mzal\u0131 SSL Sertifikas\u0131 Olu\u015fturma<\/h2>\n

G\u00fcn\u00fcm\u00fczde internet \u00fczerinde g\u00fcvenli ileti\u015fim, kullan\u0131c\u0131lar\u0131n hassas bilgilerini korumak ve web sitelerinin g\u00fcvenilirli\u011fini art\u0131rmak i\u00e7in kritik \u00f6neme sahiptir. SSL\/TLS sertifikalar\u0131, bu g\u00fcvenli ileti\u015fimin temelini olu\u015fturur. SSL sertifikalar\u0131, web sunucunuz ile ziyaret\u00e7ilerinizin taray\u0131c\u0131lar\u0131 aras\u0131ndaki veri ak\u0131\u015f\u0131n\u0131 \u015fifreleyerek yetkisiz eri\u015fimi engeller. Genellikle, bu sertifikalar g\u00fcvenilir Sertifika Otoriteleri (CA) taraf\u0131ndan verilir. Ancak, geli\u015ftirme ortamlar\u0131nda, test sunucular\u0131nda veya belirli i\u00e7 a\u011f uygulamalar\u0131nda, tam te\u015fekk\u00fcll\u00fc bir CA sertifikas\u0131 almak gereksiz veya maliyetli olabilir. Bu gibi durumlarda, kendinden imzal\u0131 (self-signed) bir SSL sertifikas\u0131 olu\u015fturmak pratik ve h\u0131zl\u0131 bir \u00e7\u00f6z\u00fcm sunar.<\/p>\n

Bu makalede, Ubuntu 20.04 \u00fczerinde \u00e7al\u0131\u015fan Apache web sunucusu i\u00e7in nas\u0131l kendinden imzal\u0131 bir SSL sertifikas\u0131 olu\u015fturulaca\u011f\u0131n\u0131 ad\u0131m ad\u0131m inceleyece\u011fiz. Bu s\u00fcre\u00e7, sertifika olu\u015fturma, Apache yap\u0131land\u0131rmas\u0131n\u0131 ayarlama ve taray\u0131c\u0131 uyar\u0131lar\u0131n\u0131 anlama gibi temel bilgileri kapsayacakt\u0131r.<\/p>\n

Neden Kendinden \u0130mzal\u0131 SSL Sertifikas\u0131 Kullan\u0131l\u0131r?<\/h3>\n

Kendinden imzal\u0131 sertifikalar, genellikle a\u015fa\u011f\u0131daki senaryolarda tercih edilir:<\/p>\n

* Geli\u015ftirme Ortamlar\u0131:<\/strong> Web siteleri veya uygulamalar geli\u015ftirilirken, yerel sunucularda veya test ortamlar\u0131nda g\u00fcvenli ba\u011flant\u0131 sa\u011flamak i\u00e7in kullan\u0131l\u0131r. Bu, ger\u00e7ek bir CA sertifikas\u0131 maliyetinden ve karma\u015f\u0131kl\u0131\u011f\u0131ndan ka\u00e7\u0131nmay\u0131 sa\u011flar.
\n* \u0130\u00e7 A\u011f Uygulamalar\u0131:<\/strong> Sadece \u015firket i\u00e7i a\u011fda eri\u015filebilen uygulamalar veya hizmetler i\u00e7in g\u00fcvenlik katman\u0131 eklemek amac\u0131yla kullan\u0131labilir.
\n* Test ve Prototipleme:<\/strong> Yeni web teknolojilerini veya yap\u0131land\u0131rmalar\u0131n\u0131 test ederken h\u0131zl\u0131 bir \u015fekilde SSL\/TLS etkinle\u015ftirmek i\u00e7in idealdir.
\n* E\u011fitim Ama\u00e7l\u0131:<\/strong> SSL\/TLS ve sunucu g\u00fcvenli\u011fi konular\u0131n\u0131 \u00f6\u011frenmek isteyenler i\u00e7in pratik bir ara\u00e7t\u0131r.<\/p>\n

Ancak, kendinden imzal\u0131 sertifikalar\u0131n \u00f6nemli bir dezavantaj\u0131 vard\u0131r: G\u00fcvenilmezdirler. Taray\u0131c\u0131lar ve i\u015fletim sistemleri, kendinden imzal\u0131 sertifikalar\u0131 otomatik olarak g\u00fcvenilir kabul etmez. Bu nedenle, bu sertifikalar\u0131 kullanan bir web sitesini ziyaret eden kullan\u0131c\u0131lar, genellikle bir g\u00fcvenlik uyar\u0131s\u0131 ile kar\u015f\u0131la\u015f\u0131rlar. Bu uyar\u0131, sertifikan\u0131n bir \u00fc\u00e7\u00fcnc\u00fc taraf taraf\u0131ndan do\u011frulanmad\u0131\u011f\u0131n\u0131 ve potansiyel olarak g\u00fcvenli olmad\u0131\u011f\u0131n\u0131 belirtir. Bu nedenle, halka a\u00e7\u0131k ve geni\u015f kitlelere hitap eden \u00fcretim ortamlar\u0131nda kendinden imzal\u0131 sertifikalar kesinlikle kullan\u0131lmamal\u0131d\u0131r.<\/p>\n

Gereksinimler<\/h3>\n

Bu rehberi takip etmek i\u00e7in a\u015fa\u011f\u0131daki gereksinimlere sahip olman\u0131z gerekmektedir:<\/p>\n

* Ubuntu 20.04 LTS kurulu ve \u00e7al\u0131\u015fan bir sunucu.
\n* Apache2 web sunucusunun kurulu ve \u00e7al\u0131\u015f\u0131r durumda olmas\u0131.
\n* Sunucuya SSH eri\u015fimi veya do\u011frudan komut sat\u0131r\u0131 eri\u015fimi.
\n* sudo<\/code> ayr\u0131cal\u0131klar\u0131na sahip bir kullan\u0131c\u0131.<\/p>\n

Ad\u0131m 1: Gerekli Mod\u00fclleri Kontrol Etme ve Etkinle\u015ftirme<\/h3>\n

Apache’nin SSL\/TLS deste\u011fini kullanabilmesi i\u00e7in baz\u0131 mod\u00fcllerin etkinle\u015ftirilmi\u015f olmas\u0131 gerekir. \u00d6zellikle mod_ssl<\/code> mod\u00fcl\u00fc gereklidir. Ubuntu 20.04’te bu mod\u00fcl genellikle varsay\u0131lan olarak kuruludur, ancak kontrol etmek ve gerekirse etkinle\u015ftirmek iyi bir pratiktir.<\/p>\n

\u00d6ncelikle, mod_ssl<\/code> mod\u00fcl\u00fcn\u00fcn etkin olup olmad\u0131\u011f\u0131n\u0131 kontrol edelim:<\/p>\n

sudo a2query -m ssl<\/code><\/pre>\n
E\u011fer \u00e7\u0131kt\u0131 ssl<\/code> ise, mod\u00fcl etkindir. E\u011fer mod\u00fcl etkin de\u011filse, a\u015fa\u011f\u0131daki komutla etkinle\u015ftirebilirsiniz:<\/p>\n
sudo a2enmod ssl<\/code><\/pre>\n
Bu komutu \u00e7al\u0131\u015ft\u0131rd\u0131ktan sonra Apache’yi yeniden ba\u015flatman\u0131z gerekecektir:<\/p>\n
sudo systemctl restart apache2<\/code><\/pre>\n
Ayr\u0131ca, sanal host yap\u0131land\u0131rmalar\u0131 i\u00e7in mod_socache_shmcb<\/code> mod\u00fcl\u00fcn\u00fcn de etkin olmas\u0131 genellikle tavsiye edilir. Bu mod\u00fcl, SSL oturumlar\u0131n\u0131n \u00f6nbelle\u011fe al\u0131nmas\u0131n\u0131 sa\u011flayarak performans\u0131 art\u0131r\u0131r.<\/p>\n
sudo a2enmod socache_shmcb\nsudo systemctl restart apache2<\/code><\/pre>\n
Ad\u0131m 2: Kendinden \u0130mzal\u0131 SSL Sertifikas\u0131 ve \u00d6zel Anahtar Olu\u015fturma<\/h3>\n
Kendinden imzal\u0131 SSL sertifikas\u0131 ve \u00f6zel anahtar olu\u015fturmak i\u00e7in openssl<\/code> komut sat\u0131r\u0131 arac\u0131n\u0131 kullanaca\u011f\u0131z. Bu i\u015flem, sertifika i\u00e7in gerekli bilgileri (alan ad\u0131, organizasyon ad\u0131 vb.) girmenizi gerektirecektir.<\/p>\n
\u00d6ncelikle, sertifika ve anahtar dosyalar\u0131n\u0131z\u0131n saklanaca\u011f\u0131 bir dizin olu\u015fturmak iyi bir pratiktir. Genellikle bu t\u00fcr dosyalar \/etc\/ssl\/private\/<\/code> veya \/etc\/apache2\/ssl\/<\/code> gibi dizinlerde saklan\u0131r. Biz, Apache’nin varsay\u0131lan SSL yap\u0131land\u0131rmas\u0131na daha uygun olaca\u011f\u0131n\u0131 d\u00fc\u015f\u00fcnd\u00fc\u011f\u00fcm\u00fcz \/etc\/apache2\/ssl\/<\/code> dizinini kullanaca\u011f\u0131z.<\/p>\n
sudo mkdir -p \/etc\/apache2\/ssl\/\ncd \/etc\/apache2\/ssl\/<\/code><\/pre>\n
\u015eimdi, sertifika ve \u00f6zel anahtar\u0131 olu\u015fturacak openssl<\/code> komutunu \u00e7al\u0131\u015ft\u0131ral\u0131m. Bu komut, hem \u00f6zel anahtar\u0131 hem de sertifikay\u0131 tek bir ad\u0131mda olu\u015fturacakt\u0131r.<\/p>\n
sudo openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout apache-selfsigned.key -out apache-selfsigned.crt<\/code><\/pre>\n
Bu komut \u00e7al\u0131\u015ft\u0131r\u0131ld\u0131\u011f\u0131nda, sizden baz\u0131 bilgiler istenecektir. Bu bilgiler, sertifikan\u0131n i\u00e7eri\u011fini olu\u015fturur. \u0130\u015fte istenen bilgiler ve ne anlama geldikleri:<\/p>\n
*   Country Name (2 letter code):<\/strong> \u00dclke kodu (\u00f6rn: TR).
\n*   State or Province Name (full name):<\/strong> Eyalet veya il ad\u0131 (\u00f6rn: Istanbul).
\n*   Locality Name (eg, city):<\/strong> \u015eehir ad\u0131 (\u00f6rn: Istanbul).
\n*   Organization Name (eg, company):<\/strong> Organizasyon veya \u015firket ad\u0131 (\u00f6rn: Benim \u015eirketim).
\n*   Organizational Unit Name (eg, section):<\/strong> Departman veya birim ad\u0131 (\u00f6rn: IT Departman\u0131).
\n*   Common Name (e.g. server FQDN or YOUR name):<\/strong> Bu en kritik aland\u0131r. Web sitenizin tam nitelikli alan ad\u0131n\u0131 (FQDN) veya sunucunuzun IP adresini buraya girmelisiniz. \u00d6rne\u011fin, www.ornekalanadi.com<\/code> veya 192.168.1.100<\/code>. E\u011fer bu alana sunucu ad\u0131n\u0131 girerseniz, taray\u0131c\u0131lar bu alan ad\u0131yla e\u015fle\u015fmedi\u011fi s\u00fcrece uyar\u0131 verecektir. Test sunucular\u0131 i\u00e7in genellikle IP adresi kullan\u0131l\u0131r.
\n*   Email Address:<\/strong> \u0130leti\u015fim e-posta adresi (iste\u011fe ba\u011fl\u0131).<\/p>\n
Bu bilgileri girdikten sonra, apache-selfsigned.key<\/code> ad\u0131nda \u00f6zel anahtar\u0131n\u0131z ve apache-selfsigned.crt<\/code> ad\u0131nda sertifika dosyan\u0131z \/etc\/apache2\/ssl\/<\/code> dizininde olu\u015fturulacakt\u0131r.<\/p>\n
\u00d6nemli Not:<\/strong> openssl req -x509<\/code> komutu, sertifikay\u0131 do\u011frudan kendisi imzalar. -nodes<\/code> se\u00e7ene\u011fi, \u00f6zel anahtar\u0131n \u015fifrelenmeyece\u011fi anlam\u0131na gelir, bu da sunucu yeniden ba\u015flat\u0131ld\u0131\u011f\u0131nda \u015fifre girme ihtiyac\u0131n\u0131 ortadan kald\u0131r\u0131r. -days 365<\/code> sertifikan\u0131n 365 g\u00fcn ge\u00e7erli olaca\u011f\u0131n\u0131 belirtir. \u0130htiyac\u0131n\u0131za g\u00f6re bu s\u00fcreyi de\u011fi\u015ftirebilirsiniz. -newkey rsa:2048<\/code> ise 2048 bit uzunlu\u011funda bir RSA \u00f6zel anahtar\u0131 olu\u015fturur.<\/p>\n
Olu\u015fturulan dosyalar\u0131n do\u011fru dizinde ve do\u011fru izinlerle oldu\u011fundan emin olun. \u00d6zel anahtar dosyas\u0131, yaln\u0131zca root taraf\u0131ndan okunabilir olmal\u0131d\u0131r.<\/p>\n
sudo chmod 600 \/etc\/apache2\/ssl\/apache-selfsigned.key<\/code><\/pre>\n
### Ad\u0131m 3: Apache SSL Sanal Host Yap\u0131land\u0131rmas\u0131n\u0131 Olu\u015fturma<\/p>\n
Apache’nin SSL’i kullanabilmesi i\u00e7in bir SSL sanal host yap\u0131land\u0131rmas\u0131 olu\u015fturmam\u0131z gerekiyor. Genellikle bu, \/etc\/apache2\/sites-available\/<\/code> dizininde yeni bir yap\u0131land\u0131rma dosyas\u0131 olu\u015fturularak yap\u0131l\u0131r. Mevcut varsay\u0131lan SSL yap\u0131land\u0131rmas\u0131n\u0131 kopyalayarak ba\u015flayabiliriz.<\/p>\n
sudo cp \/etc\/apache2\/sites-available\/default-ssl.conf \/etc\/apache2\/sites-available\/ornekalanadi-ssl.conf<\/code><\/pre>\n
\u015eimdi, yeni olu\u015fturdu\u011fumuz ornekalanadi-ssl.conf<\/code> dosyas\u0131n\u0131 d\u00fczenleyelim. Bu dosya, sanal host’un nas\u0131l \u00e7al\u0131\u015faca\u011f\u0131n\u0131 belirleyen direktifleri i\u00e7erir.<\/p>\n
sudo nano \/etc\/apache2\/sites-available\/ornekalanadi-ssl.conf<\/code><\/pre>\n
Dosya i\u00e7eri\u011finde a\u015fa\u011f\u0131daki de\u011fi\u015fiklikleri yapman\u0131z gerekmektedir:<\/p>\n
1.  ServerAdmin<\/code>:<\/strong> E-posta adresinizi g\u00fcncelleyin.
\n2.  ServerName<\/code>:<\/strong> Web sitenizin alan ad\u0131n\u0131 veya IP adresini buraya girin. Bu, sertifika olu\u015ftururken Common Name<\/code> alan\u0131na girdi\u011finiz de\u011ferle e\u015fle\u015fmelidir.
\n3.  SSLEngine on<\/code>:<\/strong> Bu direktifin etkin oldu\u011fundan emin olun.
\n4.  SSLCertificateFile<\/code>:<\/strong> Olu\u015fturdu\u011fumuz sertifika dosyas\u0131n\u0131n yolunu belirtin.
\n5.  SSLCertificateKeyFile<\/code>:<\/strong> Olu\u015fturdu\u011fumuz \u00f6zel anahtar dosyas\u0131n\u0131n yolunu belirtin.<\/p>\n
Dosyan\u0131n ilgili b\u00f6l\u00fcmleri a\u015fa\u011f\u0131daki gibi g\u00f6r\u00fcnmelidir (kendi alan ad\u0131n\u0131za ve yollara g\u00f6re ayarlay\u0131n):<\/p>\n
<IfModule mod_ssl.c>\n        <VirtualHost *:443>\n                ServerAdmin webmaster@localhost\n                ServerName www.ornekalanadi.com  # Kendi alan ad\u0131n\u0131z\u0131 veya IP adresinizi girin\n                DocumentRoot \/var\/www\/html      # Web sitenizin k\u00f6k dizini\n\n                ErrorLog ${APACHE_LOG_DIR}\/error.log\n                CustomLog ${APACHE_LOG_DIR}\/access.log combined\n\n                SSLEngine on\n\n                SSLCertificateFile      \/etc\/apache2\/ssl\/apache-selfsigned.crt\n                SSLCertificateKeyFile   \/etc\/apache2\/ssl\/apache-selfsigned.key\n\n                <FilesMatch "\\.(cgi|shtml|phtml|php)$">\n                                SSLOptions +StdEnvVars\n                <\/FilesMatch>\n                <Directory \/usr\/share\/cgi-bin>\n                                SSLOptions +StdEnvVars\n                <\/Directory>\n\n        <\/VirtualHost>\n<\/IfModule><\/code><\/pre>\n
De\u011fi\u015fiklikleri kaydettikten sonra dosyadan \u00e7\u0131k\u0131n.<\/p>\n
### Ad\u0131m 4: Sanal Host Yap\u0131land\u0131rmas\u0131n\u0131 Etkinle\u015ftirme ve Apache’yi Yeniden Ba\u015flatma<\/p>\n
Yeni SSL sanal host yap\u0131land\u0131rmam\u0131z\u0131 etkinle\u015ftirmemiz gerekiyor.<\/p>\n
sudo a2ensite ornekalanadi-ssl.conf<\/code><\/pre>\n
Bu komut, \/etc\/apache2\/sites-available\/ornekalanadi-ssl.conf<\/code> dosyas\u0131n\u0131 \/etc\/apache2\/sites-enabled\/<\/code> dizinine sembolik bir ba\u011flant\u0131 olu\u015fturarak etkinle\u015ftirir.<\/p>\n
Apache yap\u0131land\u0131rmas\u0131nda herhangi bir hata olup olmad\u0131\u011f\u0131n\u0131 kontrol etmek i\u00e7in a\u015fa\u011f\u0131daki komutu \u00e7al\u0131\u015ft\u0131rabilirsiniz:<\/p>\n
sudo apache2ctl configtest<\/code><\/pre>\n
E\u011fer \u00e7\u0131kt\u0131 Syntax OK<\/code> ise, yap\u0131land\u0131rma do\u011frudur. Aksi takdirde, hata mesajlar\u0131n\u0131 dikkatlice inceleyerek ornekalanadi-ssl.conf<\/code> dosyas\u0131ndaki yanl\u0131\u015flar\u0131 d\u00fczeltin.<\/p>\n
Son olarak, Apache’yi yeniden ba\u015flatarak de\u011fi\u015fikliklerin uygulanmas\u0131n\u0131 sa\u011flay\u0131n:<\/p>\n
sudo systemctl restart apache2<\/code><\/pre>\n
### Ad\u0131m 5: HTTP’den HTTPS’e Y\u00f6nlendirme (\u0130ste\u011fe Ba\u011fl\u0131)<\/p>\n
Genellikle, kullan\u0131c\u0131lar\u0131n\u0131z\u0131 otomatik olarak g\u00fcvenli HTTPS ba\u011flant\u0131s\u0131na y\u00f6nlendirmek istersiniz. Bunu yapmak i\u00e7in, varsay\u0131lan HTTP sanal host yap\u0131land\u0131rmas\u0131n\u0131 d\u00fczenleyebilir ve t\u00fcm istekleri HTTPS’e y\u00f6nlendiren bir kural ekleyebilirsiniz.<\/p>\n
Varsay\u0131lan HTTP yap\u0131land\u0131rma dosyas\u0131n\u0131 a\u00e7al\u0131m:<\/p>\n
sudo nano \/etc\/apache2\/sites-available\/000-default.conf<\/code><\/pre>\n
Dosyan\u0131n i\u00e7ine, VirtualHost *:80<\/code> blo\u011funun i\u00e7ine a\u015fa\u011f\u0131daki sat\u0131rlar\u0131 ekleyin:<\/p>\n
<VirtualHost *:80>\n    ServerAdmin webmaster@localhost\n    DocumentRoot \/var\/www\/html\n\n    # HTTP'den HTTPS'e y\u00f6nlendirme\n    RewriteEngine On\n    RewriteCond %{HTTPS} off\n    RewriteRule ^(.*)$ https:\/\/%{HTTP_HOST}%{REQUEST_URI} [L,R=301]\n\n    ErrorLog ${APACHE_LOG_DIR}\/error.log\n    CustomLog ${APACHE_LOG_DIR}\/access.log combined\n<\/VirtualHost><\/code><\/pre>\n
Bu yap\u0131land\u0131rma, gelen t\u00fcm HTTP isteklerini yakalar (RewriteEngine On<\/code>). E\u011fer ba\u011flant\u0131 g\u00fcvenli de\u011filse (RewriteCond %{HTTPS} off<\/code>), t\u00fcm istekleri ayn\u0131 URL’ye ancak HTTPS protokol\u00fc ile yeniden y\u00f6nlendirir (RewriteRule ^(.*)$ https:\/\/%{HTTP_HOST}%{REQUEST_URI} [L,R=301]<\/code>). [L,R=301]<\/code> bayraklar\u0131, bu kural\u0131n son kural oldu\u011funu ve kal\u0131c\u0131 bir y\u00f6nlendirme (301 Moved Permanently) oldu\u011funu belirtir.<\/p>\n
De\u011fi\u015fiklikleri kaydedin ve Apache’yi tekrar ba\u015flat\u0131n:<\/p>\n
sudo systemctl restart apache2<\/code><\/pre>\n
### Ad\u0131m 6: Taray\u0131c\u0131da Test Etme ve G\u00fcvenlik Uyar\u0131lar\u0131<\/p>\n
\u015eimdi, web taray\u0131c\u0131n\u0131zda sunucunuzun alan ad\u0131n\u0131 veya IP adresini kullanarak HTTPS \u00fczerinden eri\u015fmeyi deneyin (\u00f6rn: https:\/\/www.ornekalanadi.com<\/code> veya https:\/\/192.168.1.100<\/code>).<\/p>\n
Muhtemelen bir g\u00fcvenlik uyar\u0131s\u0131 ile kar\u015f\u0131la\u015facaks\u0131n\u0131z. Bu uyar\u0131, taray\u0131c\u0131n\u0131n sertifikay\u0131 g\u00fcvendi\u011fi bir Sertifika Otoritesi (CA) taraf\u0131ndan verilmedi\u011fini belirtir. Bu, kendinden imzal\u0131 sertifikalar\u0131n do\u011fas\u0131nda vard\u0131r.<\/p>\n
Taray\u0131c\u0131n\u0131zda bu uyar\u0131y\u0131 ge\u00e7ici olarak kabul edip devam etmenin yollar\u0131 genellikle \u015funlard\u0131r:<\/p>\n
*   Chrome:<\/strong> “Advanced” (Geli\u015fmi\u015f) veya “Details” (Detaylar) gibi bir se\u00e7ene\u011fe t\u0131klay\u0131n ve ard\u0131ndan “Proceed to [alan ad\u0131n\u0131z] (unsafe)” (Devam et [alan ad\u0131n\u0131z] (g\u00fcvenli de\u011fil)) gibi bir se\u00e7ene\u011fi se\u00e7in.
\n*   Firefox:<\/strong> “Advanced” (Geli\u015fmi\u015f) butonuna t\u0131klay\u0131n, “Accept the Risk and Continue” (Riski Kabul Et ve Devam Et) se\u00e7ene\u011fini se\u00e7in.
\n*   Di\u011fer Taray\u0131c\u0131lar:<\/strong> Benzer \u015fekilde, g\u00fcvenlik uyar\u0131lar\u0131n\u0131 ge\u00e7ersiz k\u0131lma se\u00e7enekleri bulunur.<\/p>\n
Bu uyar\u0131y\u0131 kal\u0131c\u0131 olarak kald\u0131rmak i\u00e7in, sertifikay\u0131 taray\u0131c\u0131n\u0131za veya i\u015fletim sisteminize g\u00fcvenilir k\u00f6k sertifikalar listesine eklemeniz gerekir. Ancak bu, her kullan\u0131c\u0131 i\u00e7in manuel olarak yap\u0131lmas\u0131 gereken bir i\u015flemdir ve bu nedenle \u00fcretim ortamlar\u0131nda pratik de\u011fildir.<\/p>\n
### Sonu\u00e7<\/p>\n
Bu makalede, Ubuntu 20.04 \u00fczerinde Apache web sunucusu i\u00e7in kendinden imzal\u0131 bir SSL sertifikas\u0131 olu\u015fturmay\u0131 ve yap\u0131land\u0131rmay\u0131 \u00f6\u011frendiniz. Bu y\u00f6ntem, geli\u015ftirme, test veya i\u00e7 a\u011f uygulamalar\u0131 i\u00e7in h\u0131zl\u0131 ve maliyetsiz bir SSL\/TLS \u00e7\u00f6z\u00fcm\u00fc sunar. Ancak, halka a\u00e7\u0131k web siteleri i\u00e7in her zaman g\u00fcvenilir bir Sertifika Otoritesi’nden (CA) al\u0131nan bir sertifika kullanman\u0131z gerekti\u011fini unutmay\u0131n. Kendinden imzal\u0131 sertifikalar\u0131n g\u00fcvenlik uyar\u0131lar\u0131, ziyaret\u00e7ilerinizde g\u00fcven kayb\u0131na neden olabilir.<\/p>\n
SSL\/TLS g\u00fcvenli\u011fi, g\u00fcn\u00fcm\u00fcz web d\u00fcnyas\u0131nda vazge\u00e7ilmezdir. Kendinden imzal\u0131 sertifikalar bu yolculukta bir ba\u015flang\u0131\u00e7 noktas\u0131 olsa da, ger\u00e7ek d\u00fcnya uygulamalar\u0131 i\u00e7in Let’s Encrypt gibi \u00fccretsiz ve otomatik sertifika sa\u011flay\u0131c\u0131lar\u0131n\u0131 veya ticari CA’lar\u0131 tercih etmek en do\u011fru yakla\u015f\u0131md\u0131r.<\/p>\n
\u00d6rnek kod:<\/strong> github.com\/fatihsoysalcom\/generate-self-signed-ssl-certificate-apache<\/a><\/div>\n","protected":false},"excerpt":{"rendered":"Apache Sunucusu \u0130\u00e7in Ubuntu 20.","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"csco_page_header_type":"","csco_page_load_nextpost":"","csco_page_subscribe_form":"","csco_page_contact_form":"","footnotes":""},"categories":[1468],"tags":[],"class_list":{"0":"post-42080","1":"post","2":"type-post","3":"status-publish","4":"format-standard","6":"category-ubuntu","7":"cs-entry","8":"cs-video-wrap"},"yoast_head":"\nApache Sunucusu \u0130\u00e7in Ubuntu 20.04'te Kendinden \u0130mzal\u0131 SSL Sertifikas\u0131 Olu\u015fturma - Kodlar\u0131n Gizemli D\u00fcnyas\u0131<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/fatihsoysal.com\/blog\/apache-sunucusu-icin-ubuntu-20-04te-kendinden-imzali-ssl-sertifikasi-olusturma\/\" \/>\n<meta property=\"og:locale\" content=\"tr_TR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Apache Sunucusu \u0130\u00e7in Ubuntu 20.04'te Kendinden \u0130mzal\u0131 SSL Sertifikas\u0131 Olu\u015fturma\" \/>\n<meta property=\"og:description\" content=\"Apache Sunucusu \u0130\u00e7in Ubuntu 20.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/fatihsoysal.com\/blog\/apache-sunucusu-icin-ubuntu-20-04te-kendinden-imzali-ssl-sertifikasi-olusturma\/\" \/>\n<meta property=\"og:site_name\" content=\"Kodlar\u0131n Gizemli D\u00fcnyas\u0131\" \/>\n<meta property=\"article:published_time\" content=\"2026-05-26T14:00:33+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-05-26T14:00:56+00:00\" \/>\n<meta name=\"author\" content=\"Fatih Soysal\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Yazan:\" \/>\n\t<meta name=\"twitter:data1\" content=\"Fatih Soysal\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tahmini okuma s\u00fcresi\" \/>\n\t<meta name=\"twitter:data2\" content=\"10 dakika\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/apache-sunucusu-icin-ubuntu-20-04te-kendinden-imzali-ssl-sertifikasi-olusturma\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/apache-sunucusu-icin-ubuntu-20-04te-kendinden-imzali-ssl-sertifikasi-olusturma\/\"},\"author\":{\"name\":\"Fatih Soysal\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"headline\":\"Apache Sunucusu \u0130\u00e7in Ubuntu 20.04’te Kendinden \u0130mzal\u0131 SSL Sertifikas\u0131 Olu\u015fturma\",\"datePublished\":\"2026-05-26T14:00:33+00:00\",\"dateModified\":\"2026-05-26T14:00:56+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/apache-sunucusu-icin-ubuntu-20-04te-kendinden-imzali-ssl-sertifikasi-olusturma\/\"},\"wordCount\":1756,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"articleSection\":[\"Ubuntu\"],\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/apache-sunucusu-icin-ubuntu-20-04te-kendinden-imzali-ssl-sertifikasi-olusturma\/#respond\"]}],\"copyrightYear\":\"2026\",\"copyrightHolder\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/apache-sunucusu-icin-ubuntu-20-04te-kendinden-imzali-ssl-sertifikasi-olusturma\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/apache-sunucusu-icin-ubuntu-20-04te-kendinden-imzali-ssl-sertifikasi-olusturma\/\",\"name\":\"Apache Sunucusu \u0130\u00e7in Ubuntu 20.04'te Kendinden \u0130mzal\u0131 SSL Sertifikas\u0131 Olu\u015fturma - Kodlar\u0131n Gizemli D\u00fcnyas\u0131\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\"},\"datePublished\":\"2026-05-26T14:00:33+00:00\",\"dateModified\":\"2026-05-26T14:00:56+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/apache-sunucusu-icin-ubuntu-20-04te-kendinden-imzali-ssl-sertifikasi-olusturma\/#breadcrumb\"},\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/apache-sunucusu-icin-ubuntu-20-04te-kendinden-imzali-ssl-sertifikasi-olusturma\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/apache-sunucusu-icin-ubuntu-20-04te-kendinden-imzali-ssl-sertifikasi-olusturma\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Anasayfa\",\"item\":\"https:\/\/fatihsoysal.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Apache Sunucusu \u0130\u00e7in Ubuntu 20.04’te Kendinden \u0130mzal\u0131 SSL Sertifikas\u0131 Olu\u015fturma\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/\",\"name\":\"Fatihsoysal.com\",\"description\":\"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim\",\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"tr\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\",\"name\":\"Fatih Soysal\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"tr\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"contentUrl\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"width\":512,\"height\":512,\"caption\":\"Fatih Soysal\"},\"logo\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\"},\"description\":\"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Apache Sunucusu \u0130\u00e7in Ubuntu 20.04'te Kendinden \u0130mzal\u0131 SSL Sertifikas\u0131 Olu\u015fturma - Kodlar\u0131n Gizemli D\u00fcnyas\u0131","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/fatihsoysal.com\/blog\/apache-sunucusu-icin-ubuntu-20-04te-kendinden-imzali-ssl-sertifikasi-olusturma\/","og_locale":"tr_TR","og_type":"article","og_title":"Apache Sunucusu \u0130\u00e7in Ubuntu 20.04'te Kendinden \u0130mzal\u0131 SSL Sertifikas\u0131 Olu\u015fturma","og_description":"Apache Sunucusu \u0130\u00e7in Ubuntu 20.","og_url":"https:\/\/fatihsoysal.com\/blog\/apache-sunucusu-icin-ubuntu-20-04te-kendinden-imzali-ssl-sertifikasi-olusturma\/","og_site_name":"Kodlar\u0131n Gizemli D\u00fcnyas\u0131","article_published_time":"2026-05-26T14:00:33+00:00","article_modified_time":"2026-05-26T14:00:56+00:00","author":"Fatih Soysal","twitter_card":"summary_large_image","twitter_misc":{"Yazan:":"Fatih Soysal","Tahmini okuma s\u00fcresi":"10 dakika"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/fatihsoysal.com\/blog\/apache-sunucusu-icin-ubuntu-20-04te-kendinden-imzali-ssl-sertifikasi-olusturma\/#article","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/apache-sunucusu-icin-ubuntu-20-04te-kendinden-imzali-ssl-sertifikasi-olusturma\/"},"author":{"name":"Fatih Soysal","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"headline":"Apache Sunucusu \u0130\u00e7in Ubuntu 20.04’te Kendinden \u0130mzal\u0131 SSL Sertifikas\u0131 Olu\u015fturma","datePublished":"2026-05-26T14:00:33+00:00","dateModified":"2026-05-26T14:00:56+00:00","mainEntityOfPage":{"@id":"https:\/\/fatihsoysal.com\/blog\/apache-sunucusu-icin-ubuntu-20-04te-kendinden-imzali-ssl-sertifikasi-olusturma\/"},"wordCount":1756,"commentCount":0,"publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"articleSection":["Ubuntu"],"inLanguage":"tr","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/fatihsoysal.com\/blog\/apache-sunucusu-icin-ubuntu-20-04te-kendinden-imzali-ssl-sertifikasi-olusturma\/#respond"]}],"copyrightYear":"2026","copyrightHolder":{"@id":"https:\/\/fatihsoysal.com\/blog\/#organization"}},{"@type":"WebPage","@id":"https:\/\/fatihsoysal.com\/blog\/apache-sunucusu-icin-ubuntu-20-04te-kendinden-imzali-ssl-sertifikasi-olusturma\/","url":"https:\/\/fatihsoysal.com\/blog\/apache-sunucusu-icin-ubuntu-20-04te-kendinden-imzali-ssl-sertifikasi-olusturma\/","name":"Apache Sunucusu \u0130\u00e7in Ubuntu 20.04'te Kendinden \u0130mzal\u0131 SSL Sertifikas\u0131 Olu\u015fturma - Kodlar\u0131n Gizemli D\u00fcnyas\u0131","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/#website"},"datePublished":"2026-05-26T14:00:33+00:00","dateModified":"2026-05-26T14:00:56+00:00","breadcrumb":{"@id":"https:\/\/fatihsoysal.com\/blog\/apache-sunucusu-icin-ubuntu-20-04te-kendinden-imzali-ssl-sertifikasi-olusturma\/#breadcrumb"},"inLanguage":"tr","potentialAction":[{"@type":"ReadAction","target":["https:\/\/fatihsoysal.com\/blog\/apache-sunucusu-icin-ubuntu-20-04te-kendinden-imzali-ssl-sertifikasi-olusturma\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/fatihsoysal.com\/blog\/apache-sunucusu-icin-ubuntu-20-04te-kendinden-imzali-ssl-sertifikasi-olusturma\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Anasayfa","item":"https:\/\/fatihsoysal.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Apache Sunucusu \u0130\u00e7in Ubuntu 20.04’te Kendinden \u0130mzal\u0131 SSL Sertifikas\u0131 Olu\u015fturma"}]},{"@type":"WebSite","@id":"https:\/\/fatihsoysal.com\/blog\/#website","url":"https:\/\/fatihsoysal.com\/blog\/","name":"Fatihsoysal.com","description":"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim","publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"tr"},{"@type":["Person","Organization"],"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1","name":"Fatih Soysal","image":{"@type":"ImageObject","inLanguage":"tr","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","contentUrl":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","width":512,"height":512,"caption":"Fatih Soysal"},"logo":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/"},"description":"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.","url":"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/"}]}},"yoast_meta":{"yoast_wpseo_title":"","yoast_wpseo_metadesc":"","yoast_wpseo_canonical":""},"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/42080","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/comments?post=42080"}],"version-history":[{"count":2,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/42080\/revisions"}],"predecessor-version":[{"id":42082,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/42080\/revisions\/42082"}],"wp:attachment":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/media?parent=42080"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/categories?post=42080"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/tags?post=42080"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}