{"id":1062,"date":"2016-03-04T22:51:34","date_gmt":"2016-03-04T20:51:34","guid":{"rendered":"http:\/\/www.ayhanarda.com\/blog\/?p=1062"},"modified":"2016-03-04T23:10:23","modified_gmt":"2016-03-04T21:10:23","slug":"lets-encrypt-sertifika-kurulumu","status":"publish","type":"post","link":"https:\/\/www.ayhanarda.com\/blog\/2016\/03\/lets-encrypt-sertifika-kurulumu\/","title":{"rendered":"Let&#8217;s Encrypt Sertifika Kurulumu"},"content":{"rendered":"<p>\u00d6rne\u011fimizi Cpanel kurulu sunucuda yapaca\u011f\u0131z , ihtiyaca g\u00f6re farkl\u0131 sunucular i\u00e7inde yazabiliriz. \u00d6ncelikle Let&#8217;s Encrypt ten bahsedelim , \u00fccretsiz ssl sa\u011flayan bir organizasyon diyebiliriz , destek\u00e7ileri aras\u0131nda Mozilla , Facebook gibi devler bulunmakta , en \u00f6nemli \u00f6zelli\u011fi \u00fccretsiz ssl sa\u011flamas\u0131, en g\u00fczel taraf\u0131da bir csr olu\u015fturmaya gerek olmamas\u0131 ve alan ad\u0131n\u0131n ya da hosting in sahibi oldu\u011funuzu kan\u0131tlayacak admin@alanadi.com gibi bir mail adresine sahip olman\u0131z\u0131n gerekmemesi. \u015eu an i\u00e7in sunucu sahipleri avantajl\u0131 durumda , bar\u0131nd\u0131rd\u0131klar\u0131 siteler i\u00e7in \u00fccretsiz kurup servis edebilirler ancak payla\u015f\u0131ml\u0131 hosting kullan\u0131c\u0131lar\u0131 servis yayg\u0131nla\u015fana kadar ssl e para \u00f6demeye devam edecek g\u00f6z\u00fck\u00fcyor \u00e7\u00fcnk\u00fc sunucu y\u00f6neticisi shell access verse de kurulum i\u00e7in root haklar\u0131 gerekmekte. Art\u0131k arama motorlar\u0131n\u0131n da ssl li siteleri kendi algoritmas\u0131nda 1 puan \u00fcstte tutmas\u0131 da ssl kullanmak i\u00e7in iyi bir sebep gibi g\u00f6z\u00fck\u00fcyor. \u015eimdi cpanel kurulu bir sunucunuz oldu\u011funu varsay\u0131yorum , \u00fczerinde kendinize ait 3-5 site olsun ve bunlara ssl kurmaya \u00e7al\u0131\u015fal\u0131m.<\/p>\n<p>Sunucunuza ssh tan ba\u011flanal\u0131m.<\/p>\n<p>Ben root dizininde \u00e7al\u0131\u015fmak istedim , siz farkl\u0131 bir dizinde \u00e7al\u0131\u015fabilirsiniz.<\/p>\n<p><strong>root@ayhanarda [\/]# cd root\/<\/strong><\/p>\n<p>Devam edebilmek i\u00e7in git kurulu olmas\u0131 gerekir , kurulu olup olmad\u0131\u011f\u0131n\u0131 do\u011frulayal\u0131m.<\/p>\n<p><strong>root@ayhanarda [~]# git<\/strong><br \/>\nusage: git [&#8211;version] [&#8211;help] [-c name=value]<br \/>\n[&#8211;exec-path[=&lt;path&gt;]] [&#8211;html-path] [&#8211;man-path] [&#8211;info-path]<br \/>\n[-p|&#8211;paginate|&#8211;no-pager] [&#8211;no-replace-objects] [&#8211;bare]<br \/>\n[&#8211;git-dir=&lt;path&gt;] [&#8211;work-tree=&lt;path&gt;] [&#8211;namespace=&lt;name&gt;]<br \/>\n&lt;command&gt; [&lt;args&gt;]<\/p>\n<p>Yukar\u0131daki gibi bir sonu\u00e7 ile kar\u015f\u0131la\u015ft\u0131 iseniz kuruludur , de\u011fil ise a\u015fa\u011f\u0131daki komut ile kural\u0131m.<\/p>\n<p><strong>root@ayhanarda [~]# yum install git -y<\/strong><\/p>\n<p>Kurulum tamamland\u0131 ise \u015fimdi Let&#8217;s Encrypt dosyalar\u0131n\u0131 \/root dizini alt\u0131na kopyalayabiliriz.<\/p>\n<p><strong>root@ayhanarda [~]# git clone https:\/\/github.com\/letsencrypt\/letsencrypt<\/strong><br \/>\nCloning into &#8216;letsencrypt&#8217;&#8230;<\/p>\n<p>\u0130\u015flem tamamland\u0131\u011f\u0131nda a\u015fa\u011f\u0131daki komut ile letsencrypt dizini i\u00e7ine girelim.<\/p>\n<p><strong>root@ayhanarda [~]# cd letsencrypt<\/strong><\/p>\n<p>\u015eimdi bu noktadan sonraki i\u015flemde python-virtualenv kurulu olmas\u0131 gerekmekte , <strong>yum install python-virtualenv -y<\/strong> komutu ile kurabilirsiniz ama ben a\u015fa\u011f\u0131daki do\u011frulama i\u015flemini yap\u0131nca kendi fark\u0131na var\u0131p kurmaya ba\u015flad\u0131 , tavsiyem \u00f6ncelikle a\u015fa\u011f\u0131daki komutu kullanman\u0131z ,hata alman\u0131z durumunda bu paragraftaki komutu kullanman\u0131zd\u0131r.<\/p>\n<p><strong>root@ayhanarda [~\/letsencrypt]# .\/letsencrypt-auto &#8211;help<\/strong><\/p>\n<p>\u0130\u015flem 1-2 dakika s\u00fcrebilir , ben bir ara panik olup elim hemen snapshot almaya gitmi\u015fti ama gereksizmi\u015f , s\u0131k\u0131nt\u0131 olmuyor , benim d\u00fc\u015f\u00fcncem bu paketin cpanelin kendi phyton paketlerine zarar verece\u011fi \u015feklinde idi , bir \u015fey olmad\u0131 \ud83d\ude42<\/p>\n<p>\u015eimdi tavsiyem httpd servisini k\u0131sa s\u00fcreli\u011fine durdurman\u0131z.<\/p>\n<p><strong>root@ayhanarda [~\/letsencrypt]# service httpd stop<\/strong><\/p>\n<p>E\u011fer ssl kuraca\u011f\u0131n\u0131z alan ad\u0131na karar verdi iseniz a\u015fa\u011f\u0131da ayhanarda.com g\u00f6rd\u00fc\u011f\u00fcn\u00fcz yerleri kendi alan ad\u0131n\u0131z ile de\u011fi\u015ftirmelisiniz.<\/p>\n<p><strong>root@ayhanarda [~\/letsencrypt]# .\/letsencrypt-auto certonly &#8211;standalone -d ayhanarda.com -d www.ayhanarda.com<\/strong><\/p>\n<p>Ekranda size bir mail adresi yazman\u0131z\u0131 isteyen soru gelecek , kendi ya da m\u00fc\u015fterinizin mail adresini yaz\u0131n ve devam edin.<\/p>\n<p>Sonras\u0131nda \u015fartlar\u0131 vs kabul etmenizi isteyen bir ekran gelecek , onaylay\u0131p ge\u00e7iniz.\u0130\u015flem sonunda sertifika dosyalar\u0131n\u0131n nereye koyuldu\u011funu belirten bir yaz\u0131 g\u00f6receksiniz , muhtemelen \/etc\/letsencrypt\/live\/ayhanarda.com dizininde olacak.<\/p>\n<p>\u015eimdi hemen httpd servisini tekrar ba\u015flatal\u0131m.<\/p>\n<p><strong>root@ayhanarda [~\/letsencrypt]# service httpd start<\/strong><br \/>\nRedirecting to \/bin\/systemctl start\u00a0 httpd.service<\/p>\n<p>Hemen sertifikan\u0131n oldu\u011fu dizine eri\u015felim.<\/p>\n<p><strong>root@ayhanarda [~\/letsencrypt]# cd \/etc\/letsencrypt\/live\/<\/strong><br \/>\n<strong>root@ayhanarda [\/etc\/letsencrypt\/live]# ls -al<\/strong><br \/>\ntotal 12<br \/>\ndrwx&#8212;&#8212; 3 root root 4096 Mar\u00a0 4 16:13 .\/<br \/>\ndrwxr-xr-x 8 root root 4096 Mar\u00a0 4 16:13 ..\/<br \/>\ndrwxr-xr-x 2 root root 4096 Mar\u00a0 4 16:13 ayhanarda.com<br \/>\n<strong>root@ayhanarda [\/etc\/letsencrypt\/live]# cd ayhanarda.com\/<\/strong><br \/>\nroot@ayhanarda [\/etc\/letsencrypt\/live\/ayhanarda.com]# ls -al<br \/>\ntotal 8<br \/>\ndrwxr-xr-x 2 root root 4096 Mar\u00a0 4 16:13 .\/<br \/>\ndrwx&#8212;&#8212; 3 root root 4096 Mar\u00a0 4 16:13 ..\/<br \/>\nlrwxrwxrwx 1 root root\u00a0\u00a0 34 Mar\u00a0 4 16:13 cert.pem -&gt; ..\/..\/archive\/ayhanarda.com\/cert1.pem<br \/>\nlrwxrwxrwx 1 root root\u00a0\u00a0 35 Mar\u00a0 4 16:13 chain.pem -&gt; ..\/..\/archive\/ayhanarda.com\/chain1.pem<br \/>\nlrwxrwxrwx 1 root root\u00a0\u00a0 39 Mar\u00a0 4 16:13 fullchain.pem -&gt; ..\/..\/archive\/ayhanarda.com\/fullchain1.pem<br \/>\nlrwxrwxrwx 1 root root\u00a0\u00a0 37 Mar\u00a0 4 16:13 privkey.pem -&gt; ..\/..\/archive\/ayhanarda.com\/privkey1.pem<\/p>\n<p>G\u00f6r\u00fcld\u00fc\u011f\u00fc \u00fczere t\u00fcm sertifikalar burada , cat komutu ile okunabilir durumda , hemen whm panele eri\u015fip Install an SSL Certificate on a Domain b\u00f6l\u00fcm\u00fcne girelim.<\/p>\n<p>\u015eimdi a\u015fa\u011f\u0131daki resmi inceleyip resim \u00fczerinde yazd\u0131\u011f\u0131m detaylar\u0131 uygulayabilir ve ssl kurulumunu tamamlayabilirsiniz.<\/p>\n<p><a href=\"http:\/\/www.ayhanarda.com\/blog\/wp-content\/uploads\/2016\/03\/cpanel-lets-encyrpt-ayhanarda-com.png\" rel=\"attachment wp-att-1063\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-1063\" src=\"http:\/\/www.ayhanarda.com\/blog\/wp-content\/uploads\/2016\/03\/cpanel-lets-encyrpt-ayhanarda-com.png\" alt=\"cpanel-lets-encyrpt-ayhanarda-com\" width=\"602\" height=\"333\" srcset=\"https:\/\/www.ayhanarda.com\/blog\/wp-content\/uploads\/2016\/03\/cpanel-lets-encyrpt-ayhanarda-com.png 602w, https:\/\/www.ayhanarda.com\/blog\/wp-content\/uploads\/2016\/03\/cpanel-lets-encyrpt-ayhanarda-com-300x166.png 300w\" sizes=\"auto, (max-width: 602px) 100vw, 602px\" \/><\/a><\/p>\n<p>\u015eimdi sitenize ssl ile eri\u015fmeyi deneyebilirsiniz. Bir detay vereyim , verdi\u011fi ssl s\u00fcresi 3 ay g\u00f6z\u00fck\u00fcyor , bu s\u00fcre sonunda muhtemelen i\u015flemi tekrarlamak gerekecek , umar\u0131m faydal\u0131 olur. Hosterlar i\u00e7in&#8230; hosting m\u00fc\u015fterilerinize \u00fccretsiz ssl \u015feklinde servis edip\u00a0 c\u00fczi bir miktar kurulum \u00fccreti ile bir \u00fcr\u00fcn haline getirebilirsiz.<\/p>\n<p>Ayhan ARDA<\/p>\n<div style=\"padding-bottom:20px; padding-top:10px;\" class=\"hupso-share-buttons\"><!-- Hupso Share Buttons - https:\/\/www.hupso.com\/share\/ --><a class=\"hupso_toolbar\" href=\"https:\/\/www.hupso.com\/share\/\"><img decoding=\"async\" src=\"https:\/\/static.hupso.com\/share\/buttons\/lang\/tr\/share-medium.png\" style=\"border:0px; padding-top: 5px; float:left;\" alt=\"Share Button\"\/><\/a><script type=\"text\/javascript\">var hupso_services_t=new Array(\"Twitter\",\"Facebook\",\"Google Plus\",\"Pinterest\",\"Linkedin\");var hupso_background_t=\"#EAF4FF\";var hupso_border_t=\"#66CCFF\";var hupso_toolbar_size_t=\"medium\";var hupso_image_folder_url = \"\";var hupso_twitter_via=\"ayhanarda\";var hupso_url_t=\"\";var hupso_title_t=\"Let%27s%20Encrypt%20Sertifika%20Kurulumu\";<\/script><script type=\"text\/javascript\" src=\"https:\/\/static.hupso.com\/share\/js\/share_toolbar.js\"><\/script><!-- Hupso Share Buttons --><\/div>","protected":false},"excerpt":{"rendered":"\u00d6rne\u011fimizi Cpanel kurulu sunucuda yapaca\u011f\u0131z , ihtiyaca g\u00f6re farkl\u0131 sunucular i\u00e7inde yazabiliriz. \u00d6ncelikle Let&#8217;s Encrypt ten bahsedelim , \u00fccretsiz ssl sa\u011flayan bir organizasyon diyebiliriz , destek\u00e7ileri aras\u0131nda Mozilla , Facebook gibi devler bulunmakta , en \u00f6nemli \u00f6zelli\u011fi \u00fccretsiz ssl sa\u011flamas\u0131, en g\u00fczel taraf\u0131da bir csr olu\u015fturmaya gerek olmamas\u0131 ve alan ad\u0131n\u0131n ya da hosting in [&hellip;]","protected":false},"author":1,"featured_media":1064,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_coblocks_attr":"","_coblocks_dimensions":"","_coblocks_responsive_height":"","_coblocks_accordion_ie_support":"","footnotes":""},"categories":[282,17,113,66,151,109],"tags":[812,960,958,963,962,959,964,961],"class_list":["post-1062","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-centos","category-cpanel","category-hosting","category-linux-2","category-ssl","category-whm-2","tag-cpanel","tag-cpanel-lets-encrypt","tag-lets-encrypt","tag-lets-encrypt-destek","tag-lets-encrypt-install","tag-lets-encrypt-kurulumu","tag-lets-encrypt-ssl","tag-whm-lets-encrypt"],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/www.ayhanarda.com\/blog\/wp-json\/wp\/v2\/posts\/1062","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.ayhanarda.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.ayhanarda.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.ayhanarda.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.ayhanarda.com\/blog\/wp-json\/wp\/v2\/comments?post=1062"}],"version-history":[{"count":5,"href":"https:\/\/www.ayhanarda.com\/blog\/wp-json\/wp\/v2\/posts\/1062\/revisions"}],"predecessor-version":[{"id":1069,"href":"https:\/\/www.ayhanarda.com\/blog\/wp-json\/wp\/v2\/posts\/1062\/revisions\/1069"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.ayhanarda.com\/blog\/wp-json\/wp\/v2\/media\/1064"}],"wp:attachment":[{"href":"https:\/\/www.ayhanarda.com\/blog\/wp-json\/wp\/v2\/media?parent=1062"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.ayhanarda.com\/blog\/wp-json\/wp\/v2\/categories?post=1062"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.ayhanarda.com\/blog\/wp-json\/wp\/v2\/tags?post=1062"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}