{"id":763,"date":"2024-03-01T00:00:00","date_gmt":"2024-02-29T21:00:00","guid":{"rendered":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/genel\/certbot-kullanmanin-ipuclari\/"},"modified":"2026-10-06T03:13:30","modified_gmt":"2026-10-06T00:13:30","slug":"certbot-kullanmanin-ipuclari","status":"publish","type":"post","link":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/guvenlik\/certbot-kullanmanin-ipuclari\/","title":{"rendered":"Certbot Kullanman\u0131n \u0130pu\u00e7lar\u0131"},"content":{"rendered":"<div class=\"fc-resource-revision\" data-fc-editorial=\"20261006\">\n<p class=\"fc-article-summary\">Certbot, ACME protokol\u00fc \u00fczerinden TLS sertifikas\u0131 alma ve yenileme i\u015flemlerini otomatikle\u015ftiren a\u00e7\u0131k kaynak bir istemcidir. G\u00fcvenilir bir HTTPS kurulumu i\u00e7in sertifikan\u0131n al\u0131nmas\u0131, web sunucusuna uygulanmas\u0131 ve yenilemeden sonra yeniden y\u00fcklenmesi birlikte \u00e7al\u0131\u015fmal\u0131d\u0131r. Sertifika sahibi olmak uygulama a\u00e7\u0131klar\u0131n\u0131 gidermez veya arama s\u0131ralamas\u0131 garantilemez.<\/p>\n<figure class=\"fc-editorial-figure\"><img loading=\"lazy\" src=\"\/community\/assets\/resource-renewal-20261006\/certbot-operations-tr.svg\" width=\"960\" height=\"440\"  decoding=\"async\" alt=\"Alan ad\u0131 do\u011frulamas\u0131 sertifika \u00fcretimine, sertifika web sunucusuna, otomatik yenileme ise kontrol ve yeniden y\u00fcklemeye ba\u011flan\u0131r.\"><figcaption>Alma, uygulama ve yenileme \u00fc\u00e7 ayr\u0131 kabul ad\u0131m\u0131d\u0131r.<br \/><a class=\"fc-diagram-open\" href=\"\/community\/assets\/resource-renewal-20261006\/certbot-operations-tr.svg\">G\u00f6rseli b\u00fcy\u00fct \u2192<\/a><\/figcaption><\/figure>\n<h2>Kurulum y\u00f6ntemini tekille\u015ftirin<\/h2>\n<p>\u00c7al\u0131\u015fan bir sunucuda \u00f6nce Certbot\u2019un hangi paket ve komut yolu \u00fczerinden kuruldu\u011funu, mevcut sertifikalar\u0131 ve yenileme g\u00f6revini belirleyin. APT, Snap ve elle kurulmu\u015f bir istemciyi \u00fcst \u00fcste eklemek farkl\u0131 yap\u0131land\u0131rma dizinleri ve yinelenen g\u00f6revler olu\u015fturabilir. Mevcut y\u00f6ntemi de\u011fi\u015ftiriyorsan\u0131z sertifika dosyalar\u0131n\u0131n, yenileme ayarlar\u0131n\u0131n ve hizmet kullan\u0131c\u0131lar\u0131n\u0131n ta\u015f\u0131nmas\u0131n\u0131 ayr\u0131ca planlay\u0131n.<\/p>\n<p>A\u015fa\u011f\u0131daki yeni kurulum \u00f6rne\u011fi, snapd bulunan Ubuntu i\u00e7indir. \u0130\u015fletim sisteminizin destek durumunu ve resmi kurulum y\u00f6ntemini kontrol edin; \u00f6rne\u011fi farkl\u0131 da\u011f\u0131t\u0131mlara ayn\u0131 paket komutuyla uygulamay\u0131n.<\/p>\n<pre><code>sudo snap install --classic certbot\n\/snap\/bin\/certbot --version<\/code><\/pre>\n<h2>Do\u011frulama y\u00f6ntemini eri\u015fim modeline g\u00f6re se\u00e7in<\/h2>\n<p>Webroot, \u00e7al\u0131\u015fan web sunucusunun dosya k\u00f6k\u00fcn\u00fc kullanarak HTTP-01 do\u011frulamas\u0131 yapar. Alan ad\u0131n\u0131n A ve varsa AAAA kay\u0131tlar\u0131 do\u011fru hedefe ula\u015fmal\u0131; 80 numaral\u0131 port ile <code>\/.well-known\/acme-challenge\/<\/code> yolu internetten eri\u015filebilir olmal\u0131d\u0131r. Y\u00f6nlendirme, proxy veya g\u00fcvenlik kural\u0131 bu iste\u011fi farkl\u0131 bir uygulamaya ta\u015f\u0131mamal\u0131d\u0131r.<\/p>\n<pre><code>sudo \/snap\/bin\/certbot certonly --webroot \\\n  -w \/var\/www\/html \\\n  -d example.com -d www.example.com\nsudo \/snap\/bin\/certbot certificates<\/code><\/pre>\n<p>Alan adlar\u0131n\u0131 ve dosya k\u00f6k\u00fcn\u00fc kendi sitenizle de\u011fi\u015ftirin. Bu \u00f6rnek wildcard sertifikas\u0131 vermez. Wildcard veya HTTP eri\u015fimi bulunmayan senaryolarda DNS-01 ve uygun DNS eklentisini de\u011ferlendirin. DNS API yetkisini gerekli kay\u0131tlarla s\u0131n\u0131rlay\u0131n; eri\u015fim anahtar\u0131n\u0131 ortak dosyalara veya kaynak koduna koymay\u0131n.<\/p>\n<h2>Sertifikay\u0131 almak HTTPS\u2019i tamamlamaz<\/h2>\n<p><code>certonly<\/code> web sunucusunun TLS yap\u0131land\u0131rmas\u0131n\u0131 tamamlamaz. <code>certificates<\/code> \u00e7\u0131kt\u0131s\u0131ndaki ger\u00e7ek zincir ve \u00f6zel anahtar yollar\u0131n\u0131 ilgili sanal sunucuya tan\u0131mlay\u0131n. Nginx veya Apache yap\u0131land\u0131rma kontrol\u00fc ba\u015far\u0131l\u0131 olmadan servisi yeniden y\u00fcklemeyin. Birden fazla alan ad\u0131 varsa do\u011fru SNI e\u015fle\u015fmesini, sertifika zincirini ve d\u0131\u015f istemcinin ald\u0131\u011f\u0131 yan\u0131t\u0131 kontrol edin.<\/p>\n<h2>Yenilemeyi iki ayr\u0131 kontrolle izleyin<\/h2>\n<p>Zamanlay\u0131c\u0131n\u0131n etkinli\u011fi ile yenileme provas\u0131n\u0131n ba\u015far\u0131s\u0131 farkl\u0131 bulgulard\u0131r. Kurulumun olu\u015fturdu\u011fu yenileme g\u00f6revini zamanlay\u0131c\u0131 listesinde bulun; g\u00f6rev ad\u0131 kurulum y\u00f6ntemine g\u00f6re de\u011fi\u015febilir. Ard\u0131ndan kay\u0131tl\u0131 sertifikalar\u0131n yenileme provas\u0131n\u0131 \u00e7al\u0131\u015ft\u0131r\u0131n:<\/p>\n<pre><code>sudo systemctl list-timers --all\nsudo \/snap\/bin\/certbot renew --dry-run<\/code><\/pre>\n<p><code>--dry-run<\/code> ger\u00e7ek bir yenileme provas\u0131 yapar; zamanlay\u0131c\u0131n\u0131n etkin oldu\u011funu kan\u0131tlamaz. Beklenen sertifikalar\u0131n tamam\u0131n\u0131n kapsand\u0131\u011f\u0131n\u0131 kontrol edin. <code>--cert-name<\/code> kullan\u0131yorsan\u0131z alan ad\u0131n\u0131 tahmin etmek yerine kay\u0131tl\u0131 Certificate Name de\u011ferini al\u0131n. Webroot y\u00f6nteminde ba\u015far\u0131l\u0131 yenileme sonras\u0131nda yap\u0131land\u0131rmay\u0131 test edip servisi yeniden y\u00fckleyen uygun bir deploy hook gerekebilir.<\/p>\n<h2>Hatalar\u0131 do\u011fru katmanda aray\u0131n<\/h2>\n<ul>\n<li><strong>Do\u011frulama ba\u015far\u0131s\u0131z:<\/strong> DNS, IPv6 eri\u015fimi, challenge yolu ve proxy davran\u0131\u015f\u0131n\u0131 inceleyin.<\/li>\n<li><strong>Yenilendi ama eski sertifika sunuluyor:<\/strong> Web sunucusunun dosya yolu, yeniden y\u00fckleme kayd\u0131 ve aradaki TLS sonland\u0131r\u0131c\u0131y\u0131 kontrol edin.<\/li>\n<li><strong>Yetki hatas\u0131:<\/strong> \u00d6zel anahtar\u0131n sahibi ve izinlerini inceleyin; \u00e7\u00f6z\u00fcm olarak herkese okuma izni vermeyin.<\/li>\n<\/ul>\n<p>HSTS gibi kal\u0131c\u0131 taray\u0131c\u0131 politikalar\u0131n\u0131, t\u00fcm ilgili alt alanlarda HTTPS\u2019in \u00e7al\u0131\u015ft\u0131\u011f\u0131n\u0131 do\u011frulad\u0131ktan sonra de\u011ferlendirin. \u00d6zel anahtar\u0131n ele ge\u00e7irilmesi durumunda yaln\u0131z dosyay\u0131 de\u011fi\u015ftirmekle yetinmeyin; sertifika iptali, yeni anahtar \u00fcretimi ve etkilenen sistemlerin incelemesini birlikte ele al\u0131n.<\/p>\n<h2>S\u0131k sorulan sorular<\/h2>\n<dl>\n<dt><strong>Sertifika yenilendiyse i\u015flem tamam m\u0131?<\/strong><\/dt>\n<dd>\n<p>Hay\u0131r. \u0130lgili web sunucusu veya TLS sonland\u0131r\u0131c\u0131n\u0131n yeni dosyay\u0131 y\u00fckledi\u011fini d\u0131\u015f ba\u011flant\u0131yla do\u011frulamak gerekir.<\/p>\n<\/dd>\n<dt><strong>Certbot g\u00fcvenlik duvar\u0131 veya WAF yerine ge\u00e7er mi?<\/strong><\/dt>\n<dd>\n<p>Hay\u0131r. Certbot sertifika ya\u015fam d\u00f6ng\u00fcs\u00fcn\u00fc y\u00f6netir; uygulama do\u011frulamas\u0131, eri\u015fim kontrol\u00fc ve g\u00fcvenlik g\u00fcncellemeleri ayr\u0131 sorumluluklard\u0131r.<\/p>\n<\/dd>\n<\/dl>\n<h2>Sonraki ad\u0131m<\/h2>\n<p>HTTPS eri\u015fimini <a href=\"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/networking\/guvenlik-duvari-nedir-sunucular-ve-uygulamalar-nasil-korunmalidir\/\">g\u00fcvenlik duvar\u0131 kurallar\u0131<\/a> ve <a href=\"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/bulut-danismanlik-hizmeti\/cdn-icerik-dagitim-agi-nedir-cdn-dagitiminda-hiz-ve-guvenlik\/\">CDN \u00f6nbellek davran\u0131\u015f\u0131<\/a> ile birlikte kontrol edin.<\/p>\n<h2>Kaynaklar<\/h2>\n<ol>\n<li><a href=\"https:\/\/eff-certbot.readthedocs.io\/en\/stable\/using.html\" rel=\"noopener\" target=\"_blank\">Certbot 5.8.0 \u2014 Kullan\u0131m ve yenileme ba\u015fvurusu<\/a><\/li>\n<li><a href=\"https:\/\/certbot.eff.org\/instructions?ws=other&amp;os=snap\" rel=\"noopener\" target=\"_blank\">Certbot \u2014 Snap kurulum ve otomatik yenileme talimatlar\u0131<\/a><\/li>\n<li><a href=\"https:\/\/letsencrypt.org\/docs\/challenge-types\/\" rel=\"noopener\" target=\"_blank\">Challenge Types &#8211;  Let&#x27;s Encrypt<\/a><\/li>\n<li><a href=\"https:\/\/ubuntu.com\/server\/docs\/how-to\/security\/obtain-tls-certificates\/\" rel=\"noopener\" target=\"_blank\">Obtain TLS certificates &#8211; Ubuntu Server documentation<\/a><\/li>\n<li><a href=\"https:\/\/www.freedesktop.org\/software\/systemd\/man\/latest\/systemctl.html\" rel=\"noopener\" target=\"_blank\">systemd \u2014 systemctl ba\u015fvurusu<\/a><\/li>\n<\/ol>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>Certbot, ACME protokol\u00fc \u00fczerinden TLS sertifikas\u0131 alma ve yenileme i\u015flemlerini otomatikle\u015ftiren a\u00e7\u0131k kaynak bir istemcidir. G\u00fcvenilir bir HTTPS kurulumu i\u00e7in sertifikan\u0131n al\u0131nmas\u0131, web sunucusuna uygulanmas\u0131 ve yenilemeden sonra yeniden y\u00fcklenmesi birlikte \u00e7al\u0131\u015fmal\u0131d\u0131r. Sertifika sahibi olmak uygulama a\u00e7\u0131klar\u0131n\u0131 gidermez veya arama s\u0131ralamas\u0131 garantilemez. Alma, uygulama ve yenileme \u00fc\u00e7 ayr\u0131 kabul ad\u0131m\u0131d\u0131r.G\u00f6rseli b\u00fcy\u00fct \u2192 Kurulum y\u00f6ntemini tekille\u015ftirin [&hellip;]<\/p>\n","protected":false},"author":4,"featured_media":1418,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[31],"tags":[87,93,86,94,95,89],"class_list":["post-763","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-guvenlik","tag-bulut-guvenligi","tag-certbot","tag-guvenlik","tag-ssl","tag-ssl-sertifikasi","tag-web-guvenligi"],"_links":{"self":[{"href":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/wp-json\/wp\/v2\/posts\/763","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/wp-json\/wp\/v2\/comments?post=763"}],"version-history":[{"count":6,"href":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/wp-json\/wp\/v2\/posts\/763\/revisions"}],"predecessor-version":[{"id":769,"href":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/wp-json\/wp\/v2\/posts\/763\/revisions\/769"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/wp-json\/wp\/v2\/media\/1418"}],"wp:attachment":[{"href":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/wp-json\/wp\/v2\/media?parent=763"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/wp-json\/wp\/v2\/categories?post=763"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/wp-json\/wp\/v2\/tags?post=763"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}