$ ./test.sh
+ dpkg -l
+ grep cpro
ii  cprocsp-cpopenssl-64                       4.0.9963-5                                 amd64        OpenSSL. Build 9963.
ii  cprocsp-cpopenssl-base                     4.0.9963-5                                 all          Openssl common Build 9963.
ii  cprocsp-cpopenssl-devel                    4.0.9963-5                                 all          Openssl devel Build 9963.
ii  cprocsp-curl-64                            4.0.9963-5                                 amd64        CryptoPro Curl shared library and binaris. Build 9963.
ii  cprocsp-rsa-64                             4.0.9963-5                                 amd64        CryptoPro RSA CSP. Build 9963.
ii  cprocsp-stunnel-64                         4.0.9963-5                                 amd64        Universal SSL/TLS tunnel.
ii  lsb-cprocsp-base                           4.0.9963-5                                 all          CryptoPro CSP directories and scripts. Build 9963.
ii  lsb-cprocsp-ca-certs                       4.0.9963-5                                 all          CA certificates.  Build 9963.
ii  lsb-cprocsp-capilite-64                    4.0.9963-5                                 amd64        CryptoAPI lite. Build 9963.
ii  lsb-cprocsp-kc1-64                         4.0.9963-5                                 amd64        CryptoPro CSP KC1. Build 9963.
ii  lsb-cprocsp-rdr-64                         4.0.9963-5                                 amd64        CryptoPro CSP readers. Build 9963.
+ /opt/cprocsp/cp-openssl/bin/amd64/openssl version
OpenSSL 1.0.2k  26 Jan 2017
+ /opt/cprocsp/cp-openssl/bin/amd64/openssl req -x509 -newkey rsa:1024 -keyout key.pem -out cert.pem -days 365 -nodes -subj /C=US/ST=Oregon/L=Portland/O=Company Name/OU=Org/CN=www.example.com
Generating a 1024 bit RSA private key
..............++++++
........++++++
writing new private key to 'key.pem'
-----
+ /opt/cprocsp/cp-openssl/bin/amd64/openssl pkcs12 -export -inkey key.pem -in cert.pem -out testpfx.pfx -nodes -passout pass:123
+ /opt/cprocsp/cp-openssl/bin/amd64/openssl pkcs12 -info -in testpfx.pfx -noout -passin pass:123
MAC Iteration 2048
MAC verified OK
PKCS7 Encrypted data: pbeWithSHA1And40BitRC2-CBC, Iteration 2048
Certificate bag
PKCS7 Data
Shrouded Keybag: pbeWithSHA1And3-KeyTripleDES-CBC, Iteration 2048
+ /opt/cprocsp/bin/amd64/certmgr -inst -pfx -file testpfx.pfx -pin 123
Certmgr 1.1 (c) "Crypto-Pro",  2007-2018.
program for managing certificates, CRLs and stores

Error while importing pfx

Invalid flags specified.
[ErrorCode: 0x80090009]
+ tail -3 /var/log/syslog
Aug 14 14:30:01 farm1 certmgr: capi20: pfx_ImportPrivateKey () pfx - pfx_PasswordDeriveEncryptKeyFromAlgIdentifier failed
Aug 14 14:30:01 farm1 certmgr: capi20: pfx_CreatePrivateKeyContext () pfx - pfx_ImportPrivateKey failed
Aug 14 14:30:01 farm1 certmgr: capi20: PFXImportCertStore () pfx - pfx_CreatePrivateKeyContext failed