# cat /etc/os-release
PRETTY_NAME="Debian GNU/Linux 8 (jessie)"
NAME="Debian GNU/Linux"
VERSION_ID="8"
VERSION="8 (jessie)"
ID=debian
HOME_URL="http://www.debian.org/"
SUPPORT_URL="http://www.debian.org/support"
BUG_REPORT_URL="https://bugs.debian.org/"

# /opt/cprocsp/bin/amd64/csptest -keyset -verifycontext
CSP (Type:80) v4.0.9006 KC1 Release Ver:4.0.9708 OS:Linux CPU:AMD64 FastCode:READY:AVX.
AcquireContext: OK. HCRYPTPROV: 28463907
GetProvParam(PP_NAME): Crypto-Pro GOST R 34.10-2012 KC1 CSP
Total: SYS: 0.000 sec USR: 0.040 sec UTC: 0.050 sec
[ErrorCode: 0x00000000]

# /opt/cprocsp/sbin/amd64/cpconfig -license -view
License validity:
4040E-G0037-EK8R3-C6K4U-HCXQG
Expires: 2 month(s) 24 day(s)
License type: Server.

# LD_LIBRARY_PATH=/opt/cprocsp/lib/amd64 php /root/test.php
* 12-22-2016  12:08:24.213851 0 About to connect() to vcaws port 443 (#0)
* 12-22-2016  12:08:24.213965 1   Trying 10.0.99.50... * 12-22-2016  12:08:24.215796 2 connected
* 12-22-2016  12:08:24.215967 3 Connected to vcaws (10.0.99.50) port 443 (#0)
* 12-22-2016  12:08:24.356847 4 Closing connection #0
* 12-22-2016  12:08:24.357143 5 Problem with the local SSL certificate
bool(false)
(58): Problem with the local SSL certificate

<?php

$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, 'https://vcaws/ca');
curl_setopt($ch, CURLOPT_VERBOSE, true);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);

curl_setopt($ch, CURLOPT_POST, true);
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false);
curl_setopt($ch, CURLOPT_SSLCERTTYPE, 'CERT_SHA1_HASH_PROP_ID:CERT_SYSTEM_STORE_CURRENT_USER:MY');
curl_setopt($ch, CURLOPT_SSLCERT, '5b575c80690aa0cb4d438c009a887d5d88ef6b95');


$req = '<SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" xmlns:ns1="http://schemas.datacontract.org/2004/07/Infotecs.CaWebService.ServiceContracts.DataContracts" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:ns2="http://tempuri.org/">
    <SOAP-ENV:Body>
        <ns2:ProcessCertificateRequestMessage>
            <ns2:message xsi:type="ns1:Pkcs10CertificateRequestMessage">
                <ns1:RawData>
                    ...
                </ns1:RawData>
            </ns2:message>
        </ns2:ProcessCertificateRequestMessage>
    </SOAP-ENV:Body>
</SOAP-ENV:Envelope>';

curl_setopt($ch, CURLOPT_HTTPHEADER, array('Content-Type: text/xml; charset=utf-8', 'SOAPAction: http://tempuri.org/ICertificateServiceProvider/ProcessCertificateRequestMessage'));
curl_setopt($ch, CURLOPT_POSTFIELDS, $req);

$ret = curl_exec($ch);

var_dump($ret);


if ( ($e = curl_errno($ch)) > 0) {
        echo "($e): ".curl_error($ch)."\n";
}

# /opt/cprocsp/bin/amd64/certmgr -list
Certmgr 1.0 (c) "CryptoPro",  2007-2010.
program for managing certificates, CRLs and stores

=============================================================================
1-------
Issuer              : ...
Subject             : C=RU, CN=Inlab_2016_12_10_2
Serial              : 0x01D251FE937E0BA00000000107190001
SHA1 Hash           : 0x5b575c80690aa0cb4d438c009a887d5d88ef6b95
SubjKeyID           : 8260ee651ac7b44754ed9a59c2dc546d809ce495
Signature Algorithm : ГОСТ Р 34.11/34.10-2001
PublicKey Algorithm : ГОСТ Р 34.10-2001 (512 bits)
Not valid before    : 09/12/2016  09:28:00 UTC
Not valid after     : 09/12/2017  09:28:00 UTC
PrivateKey Link     : Yes
Container           : HDIMAGE\\le-ad36f.000\35FC
Provider Name       : Crypto-Pro GOST R 34.10-2001 KC1 CSP
Provider Info       : ProvType: 75, KeySpec: 1, Flags: 0x0
Extended Key Usage  : 1.3.6.1.5.5.7.3.2
=============================================================================

[ErrorCode: 0x00000000]

# /opt/cprocsp/bin/amd64/csptestf -keys -cont 'HDIMAGE\\le-ad36f.000\35FC' -check
CSP (Type:80) v4.0.9006 KC1 Release Ver:4.0.9708 OS:Linux CPU:AMD64 FastCode:READY:AVX.
AcquireContext: OK. HCRYPTPROV: 7587347
GetProvParam(PP_NAME): Crypto-Pro GOST R 34.10-2012 KC1 CSP
Container name: "le-ad36f399-a107-490b-b590-f1021cbc0947"
Check header passed.
Signature key is not available.
Exchange key is available. HCRYPTKEY: 0x76b5f3
uec key is not available.
Check container passed.
Check sign passed.
Check verify signature on private key passed.
Check verify signature on public key passed.
Check import passed.
Keys in container:
  exchange key
Total: SYS: 0.010 sec USR: 0.050 sec UTC: 0.060 sec
[ErrorCode: 0x00000000]