{"id":3000,"date":"2026-10-26T10:00:00","date_gmt":"2026-10-26T07:00:00","guid":{"rendered":"https:\/\/narhost.com\/destek\/?p=3000"},"modified":"2026-10-26T10:00:00","modified_gmt":"2026-10-26T07:00:00","slug":"iis-ssl-binding-ekleme","status":"publish","type":"post","link":"https:\/\/narhost.com\/destek\/iis-ssl-binding-ekleme\/","title":{"rendered":"IIS&#8217;te HTTPS Ba\u011flamas\u0131 ve SSL Sertifikas\u0131 Nas\u0131l Eklenir"},"content":{"rendered":"<p class=\"kb-dogrulama\">Son do\u011frulama: Ekim 2026 \u00b7 Windows Server 2022 test sunucusunda denendi<\/p>\n<div id=\"hizli-cozum\" class=\"ai-box ai-box--cozum\">\n<p class=\"ai-box-title\">H\u0131zl\u0131 \u00e7\u00f6z\u00fcm<\/p>\n<p><strong>IIS SSL binding ekleme<\/strong> i\u015flemi, sitenize 443 numaral\u0131 portta HTTPS ba\u011flamas\u0131 tan\u0131mlay\u0131p bir sertifikay\u0131 bu ba\u011flamaya atamakt\u0131r. Ayn\u0131 IP adresinde birden fazla HTTPS sitesi varsa Sunucu Ad\u0131 G\u00f6stergesi (SNI) a\u00e7\u0131lmal\u0131d\u0131r.<\/p>\n<ol>\n<li>Sertifikay\u0131 (<code>.pfx<\/code>) sunucunun <strong>Ki\u015fisel<\/strong> sertifika deposuna aktar\u0131n.<\/li>\n<li><strong>IIS Y\u00f6neticisi \u2192 Siteler \u2192 siteniz \u2192 Ba\u011flamalar<\/strong> ekran\u0131nda <strong>Ekle<\/strong>&#8216;ye bas\u0131n.<\/li>\n<li>T\u00fcr olarak <strong>https<\/strong>, ana bilgisayar ad\u0131 olarak alan ad\u0131n\u0131z\u0131 yaz\u0131n ve <strong>Sunucu Ad\u0131 G\u00f6stergesi Gerektir<\/strong> kutusunu i\u015faretleyin.<\/li>\n<li>Listeden sertifikay\u0131 se\u00e7ip kaydedin; taray\u0131c\u0131da <code>https:\/\/<\/code> ile deneyin.<\/li>\n<\/ol>\n<\/div>\n<table class=\"kb-uyg\">\n<tr>\n<th>Panel<\/th>\n<td>IIS Y\u00f6neticisi ya da PowerShell<\/td>\n<\/tr>\n<tr>\n<th>Sistem<\/th>\n<td>Windows Server 2019 ve 2022 (IIS 10)<\/td>\n<\/tr>\n<tr>\n<th>Yetki<\/th>\n<td>Y\u00f6netici (Administrator)<\/td>\n<\/tr>\n<tr>\n<th>Narhost \u00fcr\u00fcn\u00fc<\/th>\n<td><a href=\"https:\/\/narhost.com\/vds-sunucu\" title=\"Narhost VDS Sunucu paketleri\">VDS Sunucu<\/a>, <a href=\"https:\/\/narhost.com\/ssl\" title=\"Narhost SSL Sertifikas\u0131\">SSL Sertifikas\u0131<\/a><\/td>\n<\/tr>\n<\/table>\n<div class=\"kb-once\">\n<p class=\"label\">Ba\u015flamadan \u00f6nce<\/p>\n<ul>\n<li>Sertifikan\u0131z \u00f6zel anahtar\u0131yla birlikte <code>.pfx<\/code> dosyas\u0131 olarak elinizde olsun ve parolas\u0131n\u0131 bilin.<\/li>\n<li>Alan ad\u0131n\u0131n A kayd\u0131 sunucunun IP adresini g\u00f6stersin.<\/li>\n<li>G\u00fcvenlik duvar\u0131nda 443 numaral\u0131 port a\u00e7\u0131k olsun.<\/li>\n<\/ul>\n<\/div>\n<h2>IIS SSL binding ekleme ne i\u015fe yarar<\/h2>\n<p>IIS&#8217;te her site bir ya da daha fazla &#8220;ba\u011flama&#8221; ile dinler: protokol, IP adresi, port ve ana bilgisayar ad\u0131. Yeni kurulan bir site yaln\u0131z 80 numaral\u0131 portta HTTP ba\u011flamas\u0131yla gelir. HTTPS i\u00e7in 443 portunda ayr\u0131 bir ba\u011flama eklenir ve bu ba\u011flamaya sertifika atan\u0131r. Microsoft&#8217;un <a href=\"https:\/\/learn.microsoft.com\/en-us\/iis\/manage\/configuring-security\/how-to-set-up-ssl-on-iis\" title=\"Microsoft Learn \u2014 IIS&#039;te SSL kurulumu\" target=\"_blank\" rel=\"noopener\">IIS&#8217;te SSL kurulumu belgesi<\/a> ak\u0131\u015f\u0131 anlat\u0131r.<\/p>\n<p>Ayn\u0131 IP adresinde birden fazla HTTPS sitesi bar\u0131nd\u0131r\u0131yorsan\u0131z taray\u0131c\u0131n\u0131n hangi siteyi istedi\u011fini sertifika se\u00e7iminden \u00f6nce bildirmesi gerekir. Bu, IIS 8 ile gelen <a href=\"https:\/\/learn.microsoft.com\/en-us\/iis\/get-started\/whats-new-in-iis-8\/iis-80-server-name-indication-sni-ssl-scalability\" title=\"Microsoft Learn \u2014 IIS Sunucu Ad\u0131 G\u00f6stergesi (SNI)\" target=\"_blank\" rel=\"noopener\">Sunucu Ad\u0131 G\u00f6stergesi (SNI)<\/a> \u00f6zelli\u011fiyle yap\u0131l\u0131r; ba\u011flamada SNI kutusu i\u015faretlenince her ana bilgisayar ad\u0131 kendi sertifikas\u0131n\u0131 al\u0131r.<\/p>\n<figure class=\"nh-sema\"><img src=\"https:\/\/narhost.com\/destek\/wp-content\/uploads\/2026\/10\/iis-ssl-binding-ekleme-sema-narhost.webp\" alt=\"iis ssl binding ekleme \u015femas\u0131 \u2014 sertifika aktarma, ba\u011flama, SNI ve do\u011frulama\" width=\"1200\" height=\"500\" loading=\"lazy\" decoding=\"async\"><figcaption>Ayn\u0131 IP&#x27;de birden fazla HTTPS sitesi varsa SNI kutusu i\u015faretlenir.<\/figcaption><\/figure>\n<h2>Ad\u0131m ad\u0131m IIS SSL binding ekleme<\/h2>\n<ol class=\"kb-adimlar\">\n<li><strong>Sertifikay\u0131 aktar\u0131n.<\/strong> PowerShell&#8217;i y\u00f6netici olarak a\u00e7\u0131n:\n<pre><code class=\"language-powershell\">$parola = Read-Host -AsSecureString\nImport-PfxCertificate -FilePath C:\\Sertifika\\ornek.pfx -CertStoreLocation Cert:\\LocalMachine\\My -Password $parola<\/code><\/pre>\n<p class=\"kb-cikti\">Beklenen sonu\u00e7: \u00e7\u0131kt\u0131da sertifikan\u0131n parmak izi (Thumbprint) ve konusu g\u00f6r\u00fcn\u00fcr. Komutun a\u00e7\u0131klamas\u0131 <a href=\"https:\/\/learn.microsoft.com\/en-us\/powershell\/module\/pki\/import-pfxcertificate\" title=\"Microsoft Learn \u2014 Import-PfxCertificate komutu\" target=\"_blank\" rel=\"noopener\">Import-PfxCertificate belgesinde<\/a>.<\/p>\n<\/li>\n<li><strong>Ba\u011flamay\u0131 ekleyin.<\/strong> IIS Y\u00f6neticisi&#8217;nde soldaki a\u011fa\u00e7tan sitenizi se\u00e7in, sa\u011fdaki <strong>Ba\u011flamalar<\/strong> ba\u011flant\u0131s\u0131na t\u0131klay\u0131p <strong>Ekle<\/strong>&#8216;ye bas\u0131n. T\u00fcr <strong>https<\/strong>, IP adresi <strong>T\u00fcm Atanmam\u0131\u015flar<\/strong>, port <code>443<\/code>, ana bilgisayar ad\u0131 <code>ornek.com<\/code> olsun; <strong>Sunucu Ad\u0131 G\u00f6stergesi Gerektir<\/strong> kutusunu i\u015faretleyin ve listeden sertifikan\u0131z\u0131 se\u00e7in. \u0130ngilizce sistemlerde ekran adlar\u0131 <strong>Bindings<\/strong>, <strong>Add<\/strong> ve <strong>Require Server Name Indication<\/strong>&#8216;d\u0131r.<\/li>\n<li><strong>Ayn\u0131s\u0131n\u0131 PowerShell&#8217;le yapmak isterseniz.<\/strong>\n<pre><code class=\"language-powershell\">Import-Module WebAdministration\nNew-WebBinding -Name \"Siteniz\" -Protocol https -Port 443 -HostHeader \"ornek.com\" -SslFlags 1\n$sertifika = Get-ChildItem Cert:\\LocalMachine\\My | Where-Object Subject -like \"*ornek.com*\"\n(Get-WebBinding -Name \"Siteniz\" -Protocol https).AddSslCertificate($sertifika.Thumbprint, \"My\")<\/code><\/pre>\n<p class=\"kb-cikti\">Beklenen sonu\u00e7: <code>Get-WebBinding -Name \"Siteniz\"<\/code> \u00e7\u0131kt\u0131s\u0131nda <code>https *:443:ornek.com<\/code> sat\u0131r\u0131 ve <code>sslFlags<\/code> de\u011feri <code>1<\/code> g\u00f6r\u00fcn\u00fcr. <code>-SslFlags 1<\/code> SNI&#8217;yi a\u00e7ar. Test sunucumuzda bu komutlarla eklenen ba\u011flama ilk denemede 200 yan\u0131t\u0131 verdi. Parametreler <a href=\"https:\/\/learn.microsoft.com\/en-us\/powershell\/module\/webadministration\/new-webbinding\" title=\"Microsoft Learn \u2014 New-WebBinding komutu\" target=\"_blank\" rel=\"noopener\">New-WebBinding belgesinde<\/a>.<\/p>\n<\/li>\n<li><strong>Sertifika kayd\u0131n\u0131 kontrol edin.<\/strong>\n<pre><code class=\"language-powershell\">netsh http show sslcert hostnameport=ornek.com:443<\/code><\/pre>\n<p class=\"kb-cikti\">Beklenen sonu\u00e7: <code>Hostname:port<\/code> sat\u0131r\u0131nda alan ad\u0131n\u0131z ve <code>Certificate Store Name<\/code> sat\u0131r\u0131nda <code>MY<\/code> g\u00f6r\u00fcn\u00fcr.<\/p>\n<\/li>\n<\/ol>\n<div class=\"warn-box\">\n<p class=\"label\">Dikkat<\/p>\n<p>Bir HTTPS ba\u011flamas\u0131nda SNI kutusu i\u015faretli de\u011filse o ba\u011flama ayn\u0131 IP adresindeki b\u00fct\u00fcn HTTPS istekleri i\u00e7in varsay\u0131lan sertifikay\u0131 belirler. Birden fazla site bar\u0131nd\u0131ran sunucuda SNI&#8217;siz ba\u011flama, di\u011fer sitelerin yanl\u0131\u015f sertifika g\u00f6stermesine yol a\u00e7abilir.<\/p>\n<\/div>\n<h2>Do\u011frulama<\/h2>\n<div class=\"success-box\">\n<p class=\"label\">Sonu\u00e7<\/p>\n<p>Taray\u0131c\u0131da <code>https:\/\/ornek.com<\/code> adresi kilit simgesiyle a\u00e7\u0131l\u0131yor ve sertifika ayr\u0131nt\u0131s\u0131nda alan ad\u0131n\u0131z ile ge\u00e7erlilik tarihi do\u011fru g\u00f6r\u00fcn\u00fcyorsa IIS SSL binding ekleme i\u015flemi tamamd\u0131r. HTTP&#8217;den HTTPS&#8217;e y\u00f6nlendirme ayr\u0131ca yap\u0131land\u0131r\u0131lmal\u0131d\u0131r.<\/p>\n<\/div>\n<h2>H\u00e2l\u00e2 \u00e7\u00f6z\u00fclmediyse<\/h2>\n<ul>\n<li><strong>Taray\u0131c\u0131 sertifika hatas\u0131 veriyor.<\/strong> Sertifika ad\u0131 ya da zincir hatal\u0131d\u0131r; <a href=\"https:\/\/narhost.com\/destek\/err-cert-common-name-invalid-hatasi-nasil-cozulur\/\" title=\"ERR_CERT_COMMON_NAME_INVALID Hatas\u0131 \u2014 Narhost Destek Merkezi\">ERR_CERT_COMMON_NAME_INVALID<\/a> ve <a href=\"https:\/\/narhost.com\/destek\/sertifika-zinciri-ssl-chain-hatasi-nedir\/\" title=\"Sertifika Zinciri (SSL Chain) Hatas\u0131 \u2014 Narhost Destek Merkezi\">SSL zincir hatas\u0131<\/a> kartlar\u0131na bak\u0131n.<\/li>\n<li><strong>443 portuna hi\u00e7 ba\u011flan\u0131lam\u0131yor.<\/strong> G\u00fcvenlik duvar\u0131 kural\u0131 eksiktir; <a href=\"https:\/\/narhost.com\/destek\/windows-firewall-nasil-yapilandirilir\/\" title=\"Windows Firewall Nas\u0131l Yap\u0131land\u0131r\u0131l\u0131r \u2014 Narhost Destek Merkezi\">Windows Firewall nas\u0131l yap\u0131land\u0131r\u0131l\u0131r<\/a> kart\u0131n\u0131 izleyin.<\/li>\n<li><strong>Site hen\u00fcz kurulmad\u0131.<\/strong> IIS&#8217;te sitenin olu\u015fturulmas\u0131 <a href=\"https:\/\/narhost.com\/destek\/iis-uzerinde-site-nasil-yayinlanir\/\" title=\"IIS \u00dczerinde Site Nas\u0131l Yay\u0131nlan\u0131r \u2014 Narhost Destek Merkezi\">IIS \u00fczerinde site nas\u0131l yay\u0131nlan\u0131r<\/a> kart\u0131nda.<\/li>\n<\/ul>\n<div class=\"cta-box\">\n<p class=\"label\">Narhost deste\u011fi<\/p>\n<p>VDS sunucular y\u00f6netimsizdir; IIS ve sertifika ayarlar\u0131 sizin sorumlulu\u011funuzdad\u0131r. Narhost&#8217;tan ald\u0131\u011f\u0131n\u0131z sertifikan\u0131n dosyalar\u0131yla ilgili sorunlarda talebe alan ad\u0131n\u0131, sertifika t\u00fcr\u00fcn\u00fc ve hata iletisini ekleyin.<\/p>\n<p><a class=\"cta-btn\" href=\"https:\/\/narhost.com\/submitticket.php\" title=\"Narhost destek talebi a\u00e7\">Destek talebi a\u00e7<\/a><\/div>\n<div class=\"kb-ilgili\">\n<p class=\"label\">Sonraki ad\u0131mlar<\/p>\n<ul>\n<li><a href=\"https:\/\/narhost.com\/destek\/iis-kurulumu-windows-server\/\" title=\"Windows Server&#039;da IIS Kurulumu \u2014 Narhost Destek Merkezi\">Windows Server&#8217;da IIS kurulumu<\/a><\/li>\n<li><a href=\"https:\/\/narhost.com\/destek\/net-core-projesini-iiste-yayinlama\/\" title=\".NET Core Projesini IIS&#039;te Yay\u0131nlama \u2014 Narhost Destek Merkezi\">.NET Core projesini IIS&#8217;te yay\u0131nlama<\/a><\/li>\n<li><a href=\"https:\/\/narhost.com\/destek\/harici-ssl-sertifikasi-yukleme\/\" title=\"Harici SSL Sertifikas\u0131 Y\u00fckleme \u2014 Narhost Destek Merkezi\">Harici SSL sertifikas\u0131 y\u00fckleme<\/a><\/li>\n<\/ul>\n<\/div>\n<div class=\"kb-faq\">\n<h2>S\u0131k\u00e7a sorulan sorular<\/h2>\n<h3>Sertifika listede g\u00f6r\u00fcnm\u00fcyor, neden?<\/h3>\n<p>Sertifika kullan\u0131c\u0131 deposuna aktar\u0131lm\u0131\u015f ya da \u00f6zel anahtar\u0131 olmadan y\u00fcklenmi\u015f olabilir. IIS yaln\u0131z yerel makinenin Ki\u015fisel deposundaki, \u00f6zel anahtar\u0131 bulunan sertifikalar\u0131 listeler. Aktarmay\u0131 <code>Cert:\\LocalMachine\\My<\/code> hedefiyle ve <code>.pfx<\/code> dosyas\u0131yla tekrarlay\u0131n.<\/p>\n<h3>Sertifika yenilenince ba\u011flamay\u0131 yeniden mi eklemem gerekir?<\/h3>\n<p>Yeni sertifikan\u0131n parmak izi farkl\u0131d\u0131r; ba\u011flamay\u0131 d\u00fczenleyip yeni sertifikay\u0131 se\u00e7meniz gerekir. Eski sertifikay\u0131, ba\u011flama yeni sertifikaya ge\u00e7tikten sonra depodan silin.<\/p>\n<h3>SNI&#8217;yi desteklemeyen taray\u0131c\u0131 kald\u0131 m\u0131?<\/h3>\n<p>G\u00fcncel taray\u0131c\u0131lar\u0131n ve i\u015fletim sistemlerinin tamam\u0131 SNI&#8217;yi destekler. Desteklemeyenler art\u0131k g\u00fcvenlik g\u00fcncellemesi almayan \u00e7ok eski sistemlerdir; ayn\u0131 IP&#8217;de birden fazla site varsa SNI a\u00e7\u0131k olmal\u0131d\u0131r.<\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>IIS SSL binding ekleme: .pfx sertifikay\u0131 yerel makine deposuna aktarma, IIS Y\u00f6neticisi&#8217;nde https ba\u011flamas\u0131 ve Sunucu Ad\u0131 G\u00f6stergesi (SNI), New-WebBinding ve AddSslCertificate ile PowerShell y\u00f6ntemi, netsh ile do\u011frulama.<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5,12],"tags":[159,313],"class_list":["post-3000","post","type-post","status-publish","format-standard","hentry","category-ssl-sertifikasi","category-vds-server","tag-iis","tag-windows-server-2"],"meta_box":[],"_links":{"self":[{"href":"https:\/\/narhost.com\/destek\/wp-json\/wp\/v2\/posts\/3000","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/narhost.com\/destek\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/narhost.com\/destek\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/narhost.com\/destek\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/narhost.com\/destek\/wp-json\/wp\/v2\/comments?post=3000"}],"version-history":[{"count":1,"href":"https:\/\/narhost.com\/destek\/wp-json\/wp\/v2\/posts\/3000\/revisions"}],"predecessor-version":[{"id":3039,"href":"https:\/\/narhost.com\/destek\/wp-json\/wp\/v2\/posts\/3000\/revisions\/3039"}],"wp:attachment":[{"href":"https:\/\/narhost.com\/destek\/wp-json\/wp\/v2\/media?parent=3000"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/narhost.com\/destek\/wp-json\/wp\/v2\/categories?post=3000"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/narhost.com\/destek\/wp-json\/wp\/v2\/tags?post=3000"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}