ii  cprocsp-cpopenssl-110-64              5.0.11216-5                       amd64        OpenSSL-110. Build 11216.
ii  cprocsp-cpopenssl-110-base            5.0.11216-5                       all          Openssl-110 common Build 11216.
ii  cprocsp-cpopenssl-110-devel           5.0.11216-5                       all          Openssl-110 devel Build 11216.
ii  cprocsp-cpopenssl-110-gost-64         5.0.11216-5                       amd64        OpenSSL-110 gostengy engine. Build 11216.
ii  cprocsp-curl-64                       4.0.9963-5                        amd64        CryptoPro Curl shared library and binaris. Build 9963.
ii  lsb-cprocsp-base                      4.0.9963-5                        all          CryptoPro CSP directories and scripts. Build 9963.
ii  lsb-cprocsp-ca-certs                  4.0.9963-5                        all          CA certificates.  Build 9963.
ii  lsb-cprocsp-capilite-64               4.0.9963-5                        amd64        CryptoAPI lite. Build 9963.
ii  lsb-cprocsp-kc1-64                    4.0.9963-5                        amd64        CryptoPro CSP KC1. Build 9963.
ii  lsb-cprocsp-kc2-64                    4.0.9963-5                        amd64        CryptoPro CSP KC2. Build 9963.
ii  lsb-cprocsp-rdr-64                    4.0.9963-5                        amd64        CryptoPro CSP readers. Build 9963.

[crit] 18609#18609: *103066 SSL_do_handshake() failed (SSL: error:8000601C:lib(128):gng_hash_init_common:CryptCreateHash error:14125044:SSL routines:ssl3_digest_cached_records:internal error) while SSL handshaking

CSP (Type:80) v4.0.9019 KC2 Release Ver:4.0.9963 OS:Linux CPU:AMD64 FastCode:READY:SSSE3.
AcquireContext: OK. HCRYPTPROV: 31868211
GetProvParam(PP_NAME): Crypto-Pro GOST R 34.10-2012 KC2 CSP

    # HTTPS server
    server {
        listen       443 ssl;
        #server_name localhost;
        #access_log  logs/access.log;
        ssl_certificate      /etc/nginx/cert/certname;
        ssl_certificate_key  engine:gostengy:c:le-000000-00000-0000-00000-0000000;
        ssl_session_cache    shared:SSL:3m;
        ssl_session_timeout  3m;
        #ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
        ssl_ciphers GOST2012-GOST8912-GOST8912:GOST2001-GOST89-GOST89:HIGH;
        ssl_prefer_server_ciphers  on;
        location / {
                        proxy_pass http://192.168.0.100:222;
                        proxy_set_header Host $host;
                        proxy_http_version 1.1;
                        #proxy_set_header Upgrade $http_upgrade;
                        proxy_set_header x-real-ip $remote_addr;
                        proxy_set_header Connection "upgrade";
        }


    }

ii  cprocsp-cpopenssl-110-64              5.0.11315-5                       amd64        OpenSSL-110. Build 11315.
ii  cprocsp-cpopenssl-110-base            5.0.11315-5                       all          Openssl-110 common Build 11315.
ii  cprocsp-cpopenssl-110-devel           5.0.11315-5                       all          Openssl-110 devel Build 11315.
ii  cprocsp-cpopenssl-110-gost-64         5.0.11315-5                       amd64        OpenSSL-110 gostengy engine. Build 11315.
ii  cprocsp-cpopenssl-64                  5.0.11315-5                       amd64        OpenSSL. Build 11315.
ii  cprocsp-cpopenssl-base                5.0.11315-5                       all          Openssl common Build 11315.
ii  cprocsp-cpopenssl-devel               5.0.11315-5                       all          Openssl devel Build 11315.
ii  cprocsp-cpopenssl-gost-64             5.0.11315-5                       amd64        OpenSSL capi_gost engine. Build 11315.
ii  cprocsp-curl-64                       4.0.9963-5                        amd64        CryptoPro Curl shared library and binaris. Build 9963.
ii  lsb-cprocsp-base                      4.0.9963-5                        all          CryptoPro CSP directories and scripts. Build 9963.
ii  lsb-cprocsp-ca-certs                  4.0.9963-5                        all          CA certificates.  Build 9963.
ii  lsb-cprocsp-capilite-64               4.0.9963-5                        amd64        CryptoAPI lite. Build 9963.
ii  lsb-cprocsp-kc1-64                    4.0.9963-5                        amd64        CryptoPro CSP KC1. Build 9963.
ii  lsb-cprocsp-kc2-64                    4.0.9963-5                        amd64        CryptoPro CSP KC2. Build 9963.
ii  lsb-cprocsp-rdr-64                    4.0.9963-5                        amd64        CryptoPro CSP readers. Build 9963.

/opt/cprocsp/bin/amd64/csptest -keyset -verifycontext

peer closed connection in SSL handshake (104: Connection reset by peer) while SSL handshaking

user  user;
#user  nobody;
worker_processes  1;
worker_rlimit_nofile 200000;
events {
    worker_connections  20000;
}


http {
    include       mime.types;
    default_type  application/octet-stream;
    #proxy_cache all;
    open_file_cache max=200000 inactive=20s;
    open_file_cache_valid 30s;
    open_file_cache_min_uses 2;
    open_file_cache_errors on;
    access_log off;
    #expires 1d;
    sendfile on;
    tcp_nopush on;
    tcp_nodelay on;
    keepalive_timeout 30;
    keepalive_requests 1000;
    reset_timedout_connection on;
    client_body_timeout 20;
    send_timeout 20;
    proxy_buffer_size 32k;
    proxy_buffers 64 32k;

	
	server {
        listen       450 ssl;
        #server_name localhost;
        #access_log  logs/access.log  main;
        ssl_certificate      /etc/nginx/cert/cert.pem;
        ssl_certificate_key  engine:gostengy:c:le-000000-afe9-00-84a6-0000000;
        ssl_session_cache    shared:SSL:10m;
        #ssl_session_cache off;
        ssl_session_timeout  1h;
        #ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
        ssl_ciphers GOST2012-GOST8912-GOST8912:GOST2001-GOST89-GOST89:HIGH;
        ssl_prefer_server_ciphers  off;
        location / {
                        proxy_connect_timeout       30s;
                        proxy_send_timeout          30s;
                        proxy_read_timeout          30s;
                        send_timeout                30s;
                        #proxy_pass http://192.168.0.111:000;
                        proxy_ssl_server_name on;
                        proxy_set_header Host $host;
                        proxy_http_version 1.1;
                        proxy_set_header Upgrade $http_upgrade;
                        proxy_set_header x-real-ip $remote_addr;
                        #proxy_set_header x-arr-ssl "1";
                        proxy_set_header Connection "upgrade";
        }
	}
	
	
}