{"id":1245,"date":"2022-09-21T07:17:09","date_gmt":"2022-09-21T07:17:09","guid":{"rendered":"https:\/\/sunucucozumleri.com\/?p=1245"},"modified":"2022-09-21T07:17:09","modified_gmt":"2022-09-21T07:17:09","slug":"nginxe-letsencrypt-ile-ucretsiz-ssl-kurmak-certbot-kullanimi","status":"publish","type":"post","link":"https:\/\/sunucucozumleri.com\/blog\/nginxe-letsencrypt-ile-ucretsiz-ssl-kurmak-certbot-kullanimi\/","title":{"rendered":"Nginx\u2019e Letsencrypt ile \u00dccretsiz SSL Kurmak &#8211; certbot Kullan\u0131m\u0131"},"content":{"rendered":"<p>Web sitenizin g\u00fcvenli\u011fini , ziyaret\u00e7ilerinizin sitenize olan g\u00fcvenini\u00a0 art\u0131rabilir.\u00a0Web sunucunuzda \u015fifrelemenin(https) ayarlanmas\u0131, genellikle \u00e7o\u011fu ki\u015fiye karma\u015f\u0131k ve pahal\u0131 gelmi\u015ftir.\u00a0Letsencrypt,\u00a0 bu karma\u015f\u0131kl\u0131\u011f\u0131 sadele\u015ftirerek bunu de\u011fi\u015ftirmeyi hedefliyor.\u00a0Basit, otomatikle\u015ftirilmi\u015f komutlarla sertifikalar\u0131n al\u0131nmas\u0131na ve y\u00fcklenmesine izin veren a\u00e7\u0131k ve \u00fccretsiz bir projedir.<\/p>\n<p>Letsencrypt, IdentTrust taraf\u0131ndan \u00e7apraz imzalanan ve son sertifikalar\u0131n\u0131n t\u00fcm \u00f6nemli taray\u0131c\u0131lar taraf\u0131ndan kabul edilmesine izin veren sertifikalar\u0131 verebilen yeni bir Sertifika Yetkilisidir.\u00a0Bu k\u0131lavuz,\u00a0certbot istemcisi\u00a0\u00a0s\u00fcr\u00fcm\u00a00.11.1\u2019i\u00a0y\u00fckleme ad\u0131mlar\u0131n\u0131\u00a0ve <a href=\"https:\/\/sunucucozumleri.com\/blog\/080-nginx-reverse-proxy-nasil-kurulur\/\">nginx<\/a> \u00e7al\u0131\u015ft\u0131ran CentOS 7 sunucunuzdaki sertifikalar\u0131 y\u00f6netmek i\u00e7in\u00a0Nginx\u2019e Letsencrypt ile SSL Kurmak i\u00e7in gerekli ad\u0131mlar\u0131\u00a0 \u00f6zetlemektedir\u00a0\u00a0.<\/p>\n<h4>certbot kurulumu<\/h4>\n<p><code>sudo yum -y install epel-release<br \/>\nsudo yum -y update<br \/>\nsudo yum -y install certbot<\/code><br \/>\n<strong>certbot olu\u015ftur<\/strong><br \/>\n<code><br \/>\nsudo systemctl stop nginx<br \/>\nsudo certbot certonly -d<br \/>\nsudo openssl dhparam -out \/etc\/ssl\/certs\/dhparam.pem 2048<br \/>\n<\/code><br \/>\n<strong>nginx yap\u0131land\u0131rmas\u0131n\u0131 g\u00fcncelle<\/strong><br \/>\n<code><br \/>\nserver {<br \/>\nlisten 80;<br \/>\nserver_name ;<br \/>\nreturn 301 https:\/\/$server_name$request_uri;<br \/>\n}<\/code><\/p>\n<p>server {<br \/>\nlisten 443 ssl;<br \/>\nserver_name ;<\/p>\n<p>ssl_certificate \/etc\/letsencrypt\/live\/\/fullchain.pem;<br \/>\nssl_certificate_key \/etc\/letsencrypt\/live\/\/privkey.pem;<br \/>\nssl_session_cache shared:SSL:1m;<br \/>\nssl_session_timeout 10m;<br \/>\nssl_ciphers HIGH:!aNULL:!MD5;<br \/>\nssl_prefer_server_ciphers on;<br \/>\nssl_dhparam \/etc\/ssl\/certs\/dhparam.pem;<\/p>\n<p>location \/ {<br \/>\nproxy_set_header Host $host;<br \/>\nproxy_set_header X-Real-IP $remote_addr;<br \/>\nproxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;<br \/>\nproxy_pass http:\/\/localhost:8080;<br \/>\n}<\/p>\n<p>}<\/p>\n<p>nginx servisini ba\u015flatma<\/p>\n<p><code>sudo systemctl start nginx<\/code><br \/>\n<strong>SSL i\u00e7in otomatik yenileme olu\u015ftur<\/strong><br \/>\nletsencryst\u2019i olu\u015fturdu\u011fumuz sertifikan\u0131n bir s\u00fcresi var , otomatik yenilemek i\u00e7in yenileme komut dosyas\u0131 olu\u015ftur<br \/>\n<code>sudo nano \/etc\/cron.daily\/letsencrypt-renew<\/code><br \/>\n<strong>yenileme script\u2019in i\u00e7eri\u011fi<\/strong><br \/>\n<code><br \/>\nservice nginx stop<br \/>\nif certbot renew &gt; \/var\/log\/letsencrypt\/renew.log 2&gt;&amp;1 ; then<br \/>\nnginx -s reload<br \/>\nfi<br \/>\nexit<br \/>\n<\/code><br \/>\ng\u00fcnde 2 kez g\u00fcncellemeyi ba\u015flat<\/p>\n<p><code><\/code><\/p>\n<p>sudo chmod +x \/etc\/cron.daily\/letsencrypt-renew<br \/>\n01 02,14 * * * \/etc\/cron.daily\/letsencrypt-renew<\/p>\n<p>Bol Trafikler<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Web sitenizin g\u00fcvenli\u011fini , ziyaret\u00e7ilerinizin sitenize olan g\u00fcvenini\u00a0 art\u0131rabilir.\u00a0Web sunucunuzda \u015fifrelemenin(https) ayarlanmas\u0131, genellikle \u00e7o\u011fu ki\u015fiye karma\u015f\u0131k ve pahal\u0131 gelmi\u015ftir.\u00a0Letsencrypt,\u00a0 bu karma\u015f\u0131kl\u0131\u011f\u0131 sadele\u015ftirerek bunu de\u011fi\u015ftirmeyi hedefliyor.\u00a0Basit, otomatikle\u015ftirilmi\u015f komutlarla sertifikalar\u0131n al\u0131nmas\u0131na ve y\u00fcklenmesine izin veren a\u00e7\u0131k ve \u00fccretsiz bir projedir. Letsencrypt, IdentTrust taraf\u0131ndan \u00e7apraz imzalanan ve son sertifikalar\u0131n\u0131n t\u00fcm \u00f6nemli taray\u0131c\u0131lar taraf\u0131ndan kabul edilmesine izin veren sertifikalar\u0131 &hellip;<\/p>\n","protected":false},"author":1,"featured_media":1246,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[5],"tags":[],"class_list":["post-1245","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-linux"],"acf":[],"_links":{"self":[{"href":"https:\/\/sunucucozumleri.com\/blog\/wp-json\/wp\/v2\/posts\/1245","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/sunucucozumleri.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/sunucucozumleri.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/sunucucozumleri.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/sunucucozumleri.com\/blog\/wp-json\/wp\/v2\/comments?post=1245"}],"version-history":[{"count":0,"href":"https:\/\/sunucucozumleri.com\/blog\/wp-json\/wp\/v2\/posts\/1245\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/sunucucozumleri.com\/blog\/wp-json\/wp\/v2\/media\/1246"}],"wp:attachment":[{"href":"https:\/\/sunucucozumleri.com\/blog\/wp-json\/wp\/v2\/media?parent=1245"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/sunucucozumleri.com\/blog\/wp-json\/wp\/v2\/categories?post=1245"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/sunucucozumleri.com\/blog\/wp-json\/wp\/v2\/tags?post=1245"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}