@Configuration
public class TomcatConfig {

  @Bean
  public ServletWebServerFactory tomcatServletWebServerFactory(
            @Value("${server.port:8443}") int port,
            @Value("${server.ssl.keyStoreType:HDImageStore}") String keyStoreType,
            @Value("${server.ssl.key-alias}") String keyStoreAlias,
            @Value("${server.ssl.key-store-password:#{null}}") String keyStorePassword,
            @Value("${server.ssl.trust-store-type:CertStore}") String trustStoreType,
            @Value("${server.ssl.trust-store}") String trustStore,
            @Value("${server.ssl.trust-store-password}") String trustStorePassword
    ) {
            TomcatServletWebServerFactory factory = new TomcatServletWebServerFactory(port) {
                @Override
                protected void customizeConnector(Connector connector) {
                    AbstractHttp11Protocol http11Protocol = (AbstractHttp11Protocol) connector.getProtocolHandler();
                    http11Protocol.setAlgorithm("GostX509");
                    http11Protocol.setTruststoreAlgorithm("GostX509");
                    connector.setEnableLookups(false);
                    connector.setScheme("https");
                    connector.setSecure(true);
                    connector.setProtocol("org.apache.coyote.http11.Http11NioProtocol");
                    super.customizeConnector(connector);
                }
            };

            factory.addAdditionalTomcatConnectors(get8080Connector());

            if (keyStoreAlias != null && keyStorePassword != null) {
                Ssl ssl = new Ssl();
                ssl.setKeyStoreType(keyStoreType);
                ssl.setKeyAlias(keyStoreAlias);
                ssl.setKeyStorePassword(keyStorePassword);
                ssl.setKeyStoreProvider("JCP");

                ssl.setTrustStoreType(trustStoreType);
                ssl.setTrustStore(trustStore);
                ssl.setTrustStorePassword(trustStorePassword);
                ssl.setTrustStoreProvider("JCP");
                ssl.setClientAuth(Ssl.ClientAuth.WANT);
                ssl.setProtocol(Provider.ALGORITHM);
                ssl.setCiphers(new String[]{"TLS_CIPHER_2001", "TLS_CIPHER_2012"});
                ssl.setEnabledProtocols(new String[]{"GostTLS", "GostTLSv1.1", "GostTLSv1.2"});
                factory.setSsl(ssl);
            }
            factory.setErrorPages(Collections.singleton(new ErrorPage(BasicErrorController.ERROR_URI_PREFIX)));
            return factory;
    }
}

javax.net.ssl.SSLHandshakeException: Received fatal alert: handshake_failure
	at ru.CryptoPro.ssl.cl_2.a(Unknown Source)
	at ru.CryptoPro.ssl.cl_2.a(Unknown Source)
	at ru.CryptoPro.ssl.cl_97.b(Unknown Source)
	at ru.CryptoPro.ssl.cl_97.a(Unknown Source)
	at ru.CryptoPro.ssl.cl_97.n(Unknown Source)
	at ru.CryptoPro.ssl.cl_97.b(Unknown Source)
	at ru.CryptoPro.ssl.cl_97.startHandshake(Unknown Source)