{"id":953,"date":"2025-09-23T15:37:12","date_gmt":"2025-09-23T12:37:12","guid":{"rendered":"https:\/\/narhost.com\/destek\/?p=953"},"modified":"2026-09-14T22:42:26","modified_gmt":"2026-09-14T19:42:26","slug":"sertifika-zinciri-ssl-chain-hatasi-nedir","status":"publish","type":"post","link":"https:\/\/narhost.com\/destek\/sertifika-zinciri-ssl-chain-hatasi-nedir\/","title":{"rendered":"SSL Sertifika Zinciri Hatas\u0131 Nas\u0131l Giderilir (Eksik CA Bundle)"},"content":{"rendered":"<p class=\"kb-dogrulama\">Son g\u00f6zden ge\u00e7irme: Eyl\u00fcl 2026 \u00b7 openssl, cPanel AutoSSL ve Let&#8217;s Encrypt resmi dok\u00fcman\u0131na g\u00f6re<\/p>\n<div id=\"hizli-cozum\" class=\"ai-box ai-box--cozum\">\n<p class=\"ai-box-title\">H\u0131zl\u0131 \u00e7\u00f6z\u00fcm<\/p>\n<p><strong>ssl sertifika zinciri hatas\u0131<\/strong>, sertifikan\u0131z\u0131n ara (intermediate) sertifikas\u0131yla birlikte kurulmad\u0131\u011f\u0131nda ortaya \u00e7\u0131kar: taray\u0131c\u0131, sertifikan\u0131z\u0131 k\u00f6k makama ba\u011flayan g\u00fcven zincirini kuramaz ve siteyi g\u00fcvensiz g\u00f6sterir. \u00c7\u00f6z\u00fcm, do\u011fru CA bundle&#8217;\u0131 (ara sertifika) sertifikayla birlikte yeniden kurmakt\u0131r.<\/p>\n<ol>\n<li>Zincirin eksik oldu\u011funu openssl ile do\u011frulay\u0131n.<\/li>\n<li>SSL sa\u011flay\u0131c\u0131n\u0131zdan ara sertifikay\u0131 (CA bundle) temin edin.<\/li>\n<li>Sertifikay\u0131, CA bundle alan\u0131n\u0131 da doldurarak yeniden kurun.<\/li>\n<li>\u00dccretsiz sertifikada AutoSSL&#8217;i \u00e7al\u0131\u015ft\u0131r\u0131n; zinciri kendisi ekler.<\/li>\n<li>Zincirin tamamland\u0131\u011f\u0131n\u0131 yeniden test edin.<\/li>\n<\/ol>\n<\/div>\n<table class=\"kb-uyg\">\n<tr>\n<th>Panel<\/th>\n<td>cPanel ve Plesk<\/td>\n<\/tr>\n<tr>\n<th>Sistem<\/th>\n<td>Payla\u015f\u0131ml\u0131 hosting ve harici (sat\u0131n al\u0131nm\u0131\u015f) sertifika<\/td>\n<\/tr>\n<tr>\n<th>Yetki<\/th>\n<td>Site sahibi (cPanel\/Plesk kullan\u0131c\u0131s\u0131)<\/td>\n<\/tr>\n<tr>\n<th>Narhost \u00fcr\u00fcn\u00fc<\/th>\n<td><a href=\"https:\/\/narhost.com\/ssl\" title=\"SSL Sertifikas\u0131 - Narhost\">SSL Sertifikas\u0131<\/a><\/td>\n<\/tr>\n<\/table>\n<div class=\"kb-once\">\n<p class=\"label\">Ba\u015flamadan \u00f6nce<\/p>\n<ul>\n<li>Sertifikay\u0131 d\u0131\u015far\u0131dan ald\u0131ysan\u0131z sa\u011flay\u0131c\u0131n\u0131z\u0131n panelinde ya da size g\u00f6nderilen dosyalarda ara sertifikay\u0131 (CA bundle) bulun.<\/li>\n<li>cPanel ya da Plesk kullan\u0131c\u0131 bilgilerinizle panele giri\u015f yapabiliyor olun.<\/li>\n<li>Mevcut sertifika (CRT) ve \u00f6zel anahtar (KEY) dosyalar\u0131n\u0131z\u0131n bir kopyas\u0131n\u0131 saklay\u0131n.<\/li>\n<\/ul>\n<\/div>\n<h2>SSL Sertifika Zinciri Hatas\u0131 Neden Olur<\/h2>\n<p>Bir SSL sertifikas\u0131 tek ba\u015f\u0131na g\u00fcvenilir de\u011fildir; onu tan\u0131nan bir k\u00f6k sertifika makam\u0131na ba\u011flayan bir ya da birka\u00e7 ara sertifika vard\u0131r. Taray\u0131c\u0131, sitenin sertifikas\u0131ndan ba\u015flay\u0131p bu ara sertifikalar \u00fczerinden k\u00f6ke ula\u015fan kesintisiz bir zincir kurabilmelidir. Zincirdeki bir halka eksikse taray\u0131c\u0131 g\u00fcveni do\u011frulayamaz ve \u00e7o\u011funlukla <code>NET::ERR_CERT_AUTHORITY_INVALID<\/code> ya da &#8220;unable to verify&#8221; uyar\u0131s\u0131n\u0131 g\u00f6sterir.<\/p>\n<p>En s\u0131k neden, harici bir sertifika kurulurken yaln\u0131z ana sertifikan\u0131n (CRT) y\u00fcklenip ara sertifikan\u0131n (CA bundle) atlanmas\u0131d\u0131r. \u0130lgin\u00e7 olan, sorunun her cihazda g\u00f6r\u00fcnmemesidir: baz\u0131 masa\u00fcst\u00fc taray\u0131c\u0131lar eksik ara sertifikay\u0131 kendi deposundan tamamlarken mobil cihazlar tamamlayamaz ve hata orada belirir. Ara sertifika eklenince <strong>ssl sertifika zinciri hatas\u0131<\/strong> her cihazda ortadan kalkar.<\/p>\n<figure class=\"nh-sema\"><img src=\"https:\/\/narhost.com\/destek\/wp-content\/uploads\/2026\/09\/sertifika-zinciri-ssl-chain-hatasi-nedir-sema-narhost.webp\" alt=\"ssl sertifika zinciri hatas\u0131 ak\u0131\u015f \u015femas\u0131 \u2014 zinciri openssl ile do\u011frulama, ara sertifikay\u0131 temin etme ve CA bundle ile yeniden kurma ad\u0131mlar\u0131\" width=\"1200\" height=\"500\" loading=\"lazy\" decoding=\"async\"><figcaption>Zincir do\u011frulamas\u0131ndan yeniden kuruluma kadar be\u015f ad\u0131ml\u0131k ak\u0131\u015f.<\/figcaption><\/figure>\n<h2>Ad\u0131m Ad\u0131m \u00c7\u00f6z\u00fcm<\/h2>\n<h3>Zincirin Eksik Oldu\u011funu Do\u011frulay\u0131n<\/h3>\n<ol class=\"kb-adimlar\">\n<li>Kendi bilgisayar\u0131n\u0131zdan sunucunun sundu\u011fu zincirin do\u011frulan\u0131p do\u011frulanmad\u0131\u011f\u0131n\u0131 g\u00f6r\u00fcn:\n<pre><code class=\"language-bash\">echo | openssl s_client -connect ornek.com:443 -servername ornek.com 2&gt;\/dev\/null | grep -i \"verify return\"<\/code><\/pre>\n<p class=\"kb-cikti\">Beklenen sonu\u00e7: <code>Verify return code: 21 (unable to verify the first certificate)<\/code> gibi bir sat\u0131r zincirin eksik oldu\u011funu, <code>Verify return code: 0 (ok)<\/code> ise zincirin tam oldu\u011funu g\u00f6sterir.<\/p>\n<\/li>\n<\/ol>\n<h3>Ara Sertifikay\u0131 Temin Edin<\/h3>\n<ol class=\"kb-adimlar\">\n<li>Sertifikay\u0131 sat\u0131n ald\u0131ysan\u0131z sa\u011flay\u0131c\u0131n\u0131z\u0131n panelinden ya da kurulum e-postas\u0131ndan ara sertifika (CA bundle) dosyas\u0131n\u0131 indirin. <a href=\"https:\/\/letsencrypt.org\/certificates\/\" title=\"Let&#039;s Encrypt ara ve k\u00f6k sertifikalar\u0131 resmi sayfas\u0131\" target=\"_blank\" rel=\"noopener\">Let&#8217;s Encrypt sertifikalar\u0131<\/a> zinciri otomatik sa\u011flar; bu durumda ara sertifikay\u0131 elle eklemeniz gerekmez.\n<p class=\"kb-cikti\">Beklenen sonu\u00e7: elinizde ana sertifikan\u0131n (CRT) yan\u0131nda bir de ara sertifika (CA bundle) metni bulunur.<\/p>\n<\/li>\n<\/ol>\n<h3>Sertifikay\u0131 CA Bundle ile Yeniden Kurun<\/h3>\n<ol class=\"kb-adimlar\">\n<li>cPanel&#8217;de SSL kurulum ekran\u0131nda CRT ve KEY&#8217;in yan\u0131nda <strong>Certificate Authority Bundle (CABUNDLE)<\/strong> alan\u0131na ara sertifikay\u0131 yap\u0131\u015ft\u0131r\u0131n; Plesk&#8217;te ayn\u0131 alan &#8220;CA sertifikas\u0131&#8221; olarak ge\u00e7er. Ayr\u0131nt\u0131l\u0131 ad\u0131mlar i\u00e7in <a href=\"https:\/\/narhost.com\/destek\/harici-ssl-sertifikasi-yukleme\/\" title=\"Harici SSL Sertifikas\u0131 Nas\u0131l Y\u00fcklenir - Narhost Destek\">harici SSL sertifikas\u0131 y\u00fckleme<\/a> kart\u0131n\u0131 izleyin.\n<p class=\"kb-cikti\">Beklenen sonu\u00e7: sertifika, ara sertifikayla birlikte kurulur ve openssl do\u011frulamas\u0131 <code>0 (ok)<\/code> d\u00f6ner.<\/p>\n<\/li>\n<\/ol>\n<h3>\u00dccretsiz Sertifikada AutoSSL&#8217;i \u00c7al\u0131\u015ft\u0131r\u0131n<\/h3>\n<ol class=\"kb-adimlar\">\n<li>\u00dccretsiz sertifika kullan\u0131yorsan\u0131z cPanel&#8217;in <a href=\"https:\/\/docs.cpanel.net\/cpanel\/security\/ssl-tls-status\/\" title=\"cPanel SSL\/TLS Status ve AutoSSL resmi dok\u00fcmantasyonu\" target=\"_blank\" rel=\"noopener\">SSL\/TLS Durumu (AutoSSL)<\/a> b\u00f6l\u00fcm\u00fcnden sertifikay\u0131 yeniden d\u00fczenleyin; AutoSSL, ara sertifikay\u0131 zincire kendisi ekler. Ad\u0131m ad\u0131m i\u00e7in <a href=\"https:\/\/narhost.com\/destek\/cpanel-ssl-sertifikasi-kurma\/\" title=\"cPanel&#039;de SSL Sertifikas\u0131 Kurma - Narhost Destek\">cPanel&#8217;de SSL sertifikas\u0131 kurma<\/a> kart\u0131n\u0131 kullan\u0131n.\n<p class=\"kb-cikti\">Beklenen sonu\u00e7: yeni sertifika tam zincirle kurulur, elle CA bundle eklemeye gerek kalmaz.<\/p>\n<\/li>\n<\/ol>\n<div class=\"warn-box\">\n<p class=\"label\">Dikkat<\/p>\n<p>Yanl\u0131\u015f bir ara sertifika (farkl\u0131 bir markan\u0131n ya da farkl\u0131 bir k\u00f6k makam\u0131n CA bundle&#8217;\u0131) eklemek zinciri d\u00fczeltmek yerine b\u00fcsb\u00fct\u00fcn bozar. Ara sertifikan\u0131n, sertifikan\u0131z\u0131 d\u00fczenleyen makama ait oldu\u011fundan emin olun; ku\u015fkulan\u0131yorsan\u0131z sertifikay\u0131 silip AutoSSL ile ba\u015ftan d\u00fczenleyin.<\/p>\n<\/div>\n<h2>Do\u011frulama<\/h2>\n<div class=\"success-box\">\n<p class=\"label\">Sonu\u00e7<\/p>\n<p>openssl do\u011frulamas\u0131 <code>Verify return code: 0 (ok)<\/code> d\u00f6n\u00fcyor, site hem masa\u00fcst\u00fcnde hem mobil cihazda kilit simgesiyle uyar\u0131s\u0131z a\u00e7\u0131l\u0131yorsa zincir tamamlanm\u0131\u015f demektir. Zincirin eksiksizli\u011fini ba\u011f\u0131ms\u0131z bir \u00e7evrimi\u00e7i SSL test arac\u0131yla da do\u011frulayabilirsiniz.<\/p>\n<\/div>\n<h2>H\u00e2l\u00e2 \u00c7\u00f6z\u00fclmediyse<\/h2>\n<ul>\n<li><strong>Uyar\u0131 ada dair (name mismatch).<\/strong> Bu zincir de\u011fil, alan ad\u0131 uyu\u015fmazl\u0131\u011f\u0131d\u0131r; sertifikan\u0131n do\u011fru ad\u0131 kapsad\u0131\u011f\u0131ndan emin olun ve <a href=\"https:\/\/narhost.com\/destek\/ssl-sertifikasi-nasil-dogru-kurulur\/\" title=\"SSL Sertifikas\u0131 Nas\u0131l Do\u011fru Kurulur - Narhost Destek\">SSL sertifikas\u0131 nas\u0131l do\u011fru kurulur<\/a> rehberini izleyin.<\/li>\n<li><strong>Ba\u011flant\u0131 t\u00fcm\u00fcyle SSL hatas\u0131yla kesiliyor.<\/strong> Protokol ya da yap\u0131land\u0131rma sorunu olabilir; <a href=\"https:\/\/narhost.com\/destek\/err-ssl-protocol-error-hatasi\/\" title=\"ERR_SSL_PROTOCOL_ERROR Hatas\u0131 Nas\u0131l \u00c7\u00f6z\u00fcl\u00fcr - Narhost Destek\">ERR_SSL_PROTOCOL_ERROR hatas\u0131<\/a> ad\u0131mlar\u0131n\u0131 uygulay\u0131n.<\/li>\n<li><strong>Sertifika kilit veriyor ama kar\u0131\u015f\u0131k i\u00e7erik uyar\u0131s\u0131 s\u00fcr\u00fcyor.<\/strong> Sorun sertifikada de\u011fil kaynaklarda olabilir; <a href=\"https:\/\/narhost.com\/destek\/mixed-content-sorunu-nasil-cozulur\/\" title=\"Mixed Content Sorunu Nas\u0131l \u00c7\u00f6z\u00fcl\u00fcr - Narhost Destek\">mixed content sorunu<\/a> kart\u0131na bak\u0131n.<\/li>\n<li><strong>Sertifikan\u0131n s\u00fcresi de dolmu\u015f olabilir.<\/strong> Zinciri d\u00fczeltmeden \u00f6nce <a href=\"https:\/\/narhost.com\/destek\/ssl-sertifikasi-nasil-yenilenir\/\" title=\"SSL Sertifikas\u0131 Nas\u0131l Yenilenir - Narhost Destek\">sertifikay\u0131 yenileyin<\/a>.<\/li>\n<\/ul>\n<div class=\"cta-box\">\n<p class=\"label\">Narhost deste\u011fi<\/p>\n<p>Talebinize alan ad\u0131n\u0131z\u0131, sertifikay\u0131 nereden ald\u0131\u011f\u0131n\u0131z\u0131, openssl do\u011frulama sat\u0131r\u0131n\u0131 ve hatan\u0131n hangi cihazlarda \u00e7\u0131kt\u0131\u011f\u0131n\u0131 ekleyin.<\/p>\n<p><a class=\"cta-btn\" href=\"https:\/\/narhost.com\/submitticket.php\" title=\"Narhost destek talebi a\u00e7\">Destek talebi a\u00e7<\/a><\/div>\n<div class=\"kb-ilgili\">\n<p class=\"label\">Sonraki ad\u0131mlar<\/p>\n<ul>\n<li><a href=\"https:\/\/narhost.com\/destek\/ssl-sertifikasi\/\" title=\"SSL Sertifikas\u0131 destek kategorisi - Narhost\">SSL Sertifikas\u0131 destek kategorisi<\/a><\/li>\n<li><a href=\"https:\/\/narhost.com\/destek\/ssl-sertifikasi-nasil-dogru-kurulur\/\" title=\"SSL Sertifikas\u0131 Nas\u0131l Do\u011fru Kurulur - Narhost Destek\">SSL sertifikas\u0131 nas\u0131l do\u011fru kurulur<\/a><\/li>\n<li><a href=\"https:\/\/narhost.com\/destek\/harici-ssl-sertifikasi-yukleme\/\" title=\"Harici SSL Sertifikas\u0131 Nas\u0131l Y\u00fcklenir - Narhost Destek\">Harici SSL sertifikas\u0131 y\u00fckleme<\/a><\/li>\n<li><a href=\"https:\/\/narhost.com\/destek\/cpanel-ssl-sertifikasi-kurma\/\" title=\"cPanel&#039;de SSL Sertifikas\u0131 Kurma - Narhost Destek\">cPanel&#8217;de SSL sertifikas\u0131 kurma<\/a><\/li>\n<\/ul>\n<\/div>\n<div class=\"kb-faq\">\n<h2>S\u0131k\u00e7a sorulan sorular<\/h2>\n<h3>Site bilgisayar\u0131mda a\u00e7\u0131l\u0131yor ama telefonda g\u00fcvensiz diyor. Neden?<\/h3>\n<p>Klasik eksik zincir belirtisidir. Baz\u0131 masa\u00fcst\u00fc taray\u0131c\u0131lar eksik ara sertifikay\u0131 kendi deposundan tamamlar, mobil cihazlar tamamlayamaz. Ara sertifikay\u0131 (CA bundle) ekleyince iki tarafta da d\u00fczelir.<\/p>\n<h3>CA bundle ile ara sertifika ayn\u0131 \u015fey mi?<\/h3>\n<p>Evet, ayn\u0131 \u015feyin iki ad\u0131d\u0131r. CA bundle, sertifikan\u0131z\u0131 k\u00f6k makama ba\u011flayan bir ya da birka\u00e7 ara sertifikan\u0131n bir arada bulundu\u011fu metindir; cPanel&#8217;de &#8220;CABUNDLE&#8221;, Plesk&#8217;te &#8220;CA sertifikas\u0131&#8221; alan\u0131na girilir.<\/p>\n<h3>Let&#8217;s Encrypt kullan\u0131yorum, yine de zincir hatas\u0131 al\u0131yorum. Olur mu?<\/h3>\n<p>Let&#8217;s Encrypt normalde zinciri otomatik sa\u011flar; hata al\u0131yorsan\u0131z sertifika b\u00fcy\u00fck olas\u0131l\u0131kla elle ve eksik kurulmu\u015ftur. AutoSSL&#8217;i bir kez \u00e7al\u0131\u015ft\u0131r\u0131p sertifikay\u0131 yeniden d\u00fczenlemek zinciri tam h\u00e2liyle geri getirir.<\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>Sertifika kurulu olsa bile ara (intermediate) sertifika eksikse taray\u0131c\u0131lar g\u00fcven zincirini kuramaz ve site g\u00fcvensiz g\u00f6r\u00fcn\u00fcr. Zincirin eksikli\u011fini openssl ile do\u011frulama, CA bundle temin etme ve sertifikay\u0131 zincirle birlikte yeniden kurma ad\u0131mlar\u0131.<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5],"tags":[27,93,107],"class_list":["post-953","post","type-post","status-publish","format-standard","hentry","category-ssl-sertifikasi","tag-ssl","tag-sertifika","tag-zinciri"],"meta_box":[],"_links":{"self":[{"href":"https:\/\/narhost.com\/destek\/wp-json\/wp\/v2\/posts\/953","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/narhost.com\/destek\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/narhost.com\/destek\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/narhost.com\/destek\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/narhost.com\/destek\/wp-json\/wp\/v2\/comments?post=953"}],"version-history":[{"count":4,"href":"https:\/\/narhost.com\/destek\/wp-json\/wp\/v2\/posts\/953\/revisions"}],"predecessor-version":[{"id":1508,"href":"https:\/\/narhost.com\/destek\/wp-json\/wp\/v2\/posts\/953\/revisions\/1508"}],"wp:attachment":[{"href":"https:\/\/narhost.com\/destek\/wp-json\/wp\/v2\/media?parent=953"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/narhost.com\/destek\/wp-json\/wp\/v2\/categories?post=953"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/narhost.com\/destek\/wp-json\/wp\/v2\/tags?post=953"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}