fips выключен

C:\Program Files\Crypto Pro\CSP>csptest -tlsc -v -server cryptopro.ru
12 algorithms supported:
Algid Class OID
[00] 0x660e 0x6000
[01] 0x6610 0x6000
[02] 0x6801 0x6000 1.2.840.113549.3.4 (rc4)
[03] 0x6603 0x6000 1.2.840.113549.3.7 (3des)
[04] 0x6601 0x6000 1.3.14.3.2.7 (des)
[05] 0x8003 0x8000 1.2.840.113549.2.5 (md5)
[06] 0x8004 0x8000 1.3.14.3.2.26 (sha1)
[07] 0x2400 0x2000 1.2.840.113549.1.1.1 (RSA)
[08] 0xaa02 0xa000 1.2.840.113549.1.9.16.3.5 (ESDH)
[09] 0xae06 0xa000
[10] 0x2200 0x2000 1.2.840.10040.4.1 (DSA)
[11] 0x2203 0x2000
Cipher strengths: 128..256
Supported protocols: 0x20080:
Transport Layer Security 1.0 client side
Datagram Transport Layer Security client side
dwProtocolMask: 0x800e2aaa
Protocol version: 3.1
ClientHello: RecordLayer: TLS, Len: 119
SessionId: (empty)
Cipher Suites: (c0 14) (c0 13) (00 35) (00 2f) (c0 0a) (c0 09) (00 38) (00 32) (
00 0a) (00 13) (00 05) (00 04) (ff 85) (00 81)
124 bytes of handshake data sent
1400 bytes of handshake data received
1836 bytes of handshake data received
215 bytes of handshake data sent
31 bytes of handshake data received
Handshake was successful
SECPKG_ATTR_SESSION_INFO: Reuse: 0, SessionId: edbb23942df5581c99f90daaa5895cf39
7683f807f2f4cb20d8290f8997b15c1

SECPKG_ATTR_CIPHER_INFO: Version: 1
SECPKG_ATTR_CIPHER_INFO: Protocol: 301
SECPKG_ATTR_CIPHER_INFO: CipherSuite: ff85, TLS_GOSTR341112_256_WITH_28147_CNT_I
MIT
SECPKG_ATTR_CIPHER_INFO: BaseCipherSuite: ff85
SECPKG_ATTR_CIPHER_INFO: Cipher: GOST 28147-89, Len: 256, BlockLen: 1
SECPKG_ATTR_CIPHER_INFO: Hash: GR 34.11-2012 256, Len: 256
SECPKG_ATTR_CIPHER_INFO: Exchange: GOST DH 34.10-2012 256, MinLen: 512, MaxLen:
512
SECPKG_ATTR_CIPHER_INFO: Certificate: GR 34.10-2012 256, KeyType: 0

SECPKG_ATTR_CONNECTION_INFO: Protocol: 0x80 (TLS 1.0)
SECPKG_ATTR_CONNECTION_INFO: Cipher: 0x661e (GOST 28147-89)
SECPKG_ATTR_CONNECTION_INFO: Cipher strength: 256
SECPKG_ATTR_CONNECTION_INFO: Hash: 0x8021 (GOST R 34.11-2012 (256))
SECPKG_ATTR_CONNECTION_INFO: Hash strength: 256
SECPKG_ATTR_CONNECTION_INFO: Exch: 0xaa47 (GOST R 34.10-2012 (256) Ephemeral)
SECPKG_ATTR_CONNECTION_INFO: Key exchange strength: 512

SECPKG_ATTR_KEY_INFO: KeySize: 256
SECPKG_ATTR_KEY_INFO: SignatureAlgorithm: 0x2e49, Name: GOST R 34.11 2012 256
SECPKG_ATTR_KEY_INFO: EncryptAlgorithm: 0x661e, Name: GOST 28147-89

SECPKG_ATTR_NAMES: O="ООО ""КРИПТО-ПРО""", L=Москва, S=г. Москва, C=RU, CN="Веб-
сервер ООО ""КРИПТО-ПРО"""

SECPKG_ATTR_PACKAGE_INFO: fCapabilities: 0x107B3
SECPKG_ATTR_PACKAGE_INFO: wVersion: 1
SECPKG_ATTR_PACKAGE_INFO: wRPCID: 65535
SECPKG_ATTR_PACKAGE_INFO: cbMaxToken: 16379
SECPKG_ATTR_PACKAGE_INFO: Name: CryptoPro SSP
SECPKG_ATTR_PACKAGE_INFO: Comment: CryptoPro Security Package

Server certificate:
Subject: O="ООО ""КРИПТО-ПРО""", L=Москва, S=г. Москва, C=RU, CN="Веб-сервер ООО
""КРИПТО-ПРО"""
Valid : 31.08.2022 11:43:52 - 30.11.2023 11:43:52 (UTC)
Issuer : ИНН ЮЛ=7717107991, ОГРН=1037700085444, C=RU, S=Moscow, L=Moscow, O="LLC
""Crypto-Pro""", CN=CryptoPro TLS CA
CA subject: ИНН ЮЛ=7717107991, ОГРН=1037700085444, C=RU, S=Moscow, L=Moscow, O="
LLC ""Crypto-Pro""", CN=CryptoPro TLS CA
CA issuer : ОГРН=1037700085444, ИНН=007717107991, C=RU, S=Moscow, L=Moscow, O="L
LC ""Crypto-Pro""", CN=CryptoPro GOST Root CA


SECPKG_ATTR_STREAM_SIZES: Header: 5, Trailer: 4, MaxMessage: 16384
SECPKG_ATTR_STREAM_SIZES: Buffers: 4, BlockSize: 1

SECPKG_ATTR_SIZES: MaxToken: 16384
SECPKG_ATTR_SIZES: MaxSignature: 4
SECPKG_ATTR_SIZES: BlockSize: 1
SECPKG_ATTR_SIZES: SecurityTrailer: 9

HTTP request: GET / HTTP/1.1
User-Agent: Webclient
Accept:*/*
Host: cryptopro.ru
Connection: close


Sending plaintext: 92 bytes
110 bytes of application data sent
1400 bytes of (encrypted) application data received
14993 bytes of (encrypted) application data received
Decrypted data: 16384 bytes
8400 bytes of (encrypted) application data received
8002 bytes of (encrypted) application data received
Decrypted data: 16384 bytes
Extra data: 9 bytes
16393 bytes of (encrypted) application data received
Decrypted data: 16384 bytes
Extra data: 9 bytes
8451 bytes of (encrypted) application data received
Decrypted data: 8440 bytes
Extra data: 11 bytes
Context expired: OK if file is completely downloaded
Reply status: HTTP/1.1 200 OK
Sending Close Notify
11 bytes of handshake data sent
1 connections, 57592 bytes in 0.796 seconds;
Total: SYS: 0,062 sec USR: 0,031 sec UTC: 0,858 sec
[ErrorCode: 0x00000000]

Отредактировано пользователем 7 июля 2023 г. 12:39:14(UTC)  | Причина: Не указана

Машина где все работает. Win 10, Chromium gost 111.0.5563.147, CryptoPro 5.0.12000 КС1
Машина где не работает. Win 10, Chromium gost 114.0.5735.198, CryptoPro 5.0.12800 КС1
Машина где не работает. Windows 7, Chromium gost 109.0.5414.129, CryptoPro 5.0.12800 КС1

Только что попробовал яндекс. Он в точности повторяет ситуацию описанную выше. Т.Е дело в крипто про все таки?

Нет. Машины других СКЗИ не содержат.
Максим что есть - драйвера токенов

C:\Program Files\Crypto Pro\CSP>csptest -tlsc -server cryptopro.ru -v -ciphers f f85
11 algorithms supported:
Aglid Class OID
[00] 0x661e 0x6000 1.2.643.2.2.21 (ГОСТ 28147-89)
[01] 0x6631 0x6000 1.2.643.7.1.1.5.2.1 (ГОСТ Р 34.12-2015 Кузнечик CTR-ACPKM)
[02] 0x6630 0x6000 1.2.643.7.1.1.5.1.1 (ГОСТ Р 34.12-2015 Магма CTR-ACPKM)
[03] 0x801e 0x8000 1.2.643.2.2.3 (ГОСТ Р 34.11/34.10-2001)
[04] 0x8021 0x8000 1.2.643.7.1.1.2.2 (ГОСТ Р 34.11-2012 256 бит)
[05] 0x801f 0x8000
[06] 0x803d 0x8000
[07] 0x803c 0x8000
[08] 0x2e23 0x2000 1.2.643.2.2.19 (ГОСТ Р 34.10-2001)
[09] 0x2e49 0x2000 1.2.643.7.1.1.1.1 (ГОСТ Р 34.10-2012 256 бит)
[10] 0x2e3d 0x2000 1.2.643.7.1.1.1.2 (ГОСТ Р 34.10-2012 512 бит)
Cipher strengths: 256..256
Supported protocols: 0xa80:
Transport Layer Security 1.0 client side
Transport Layer Security 1.1 client side
Transport Layer Security 1.2 client side
dwProtocolMask: 0x800e2aaa
Protocol version: 3.3
ClientHello: RecordLayer: TLS, Len: 97
SessionId: (empty)
Cipher Suites: (ff 85)
102 bytes of handshake data sent
1400 bytes of handshake data received
1836 bytes of handshake data received
215 bytes of handshake data sent
31 bytes of handshake data received
Handshake was successful
SECPKG_ATTR_SESSION_INFO: Reuse: 0, SessionId: dc4de3d0a2dea9ff857e33a90d9893a2d
8cb148d917d2080166ed66245c1a2b7

SECPKG_ATTR_CIPHER_INFO: Version: 1
SECPKG_ATTR_CIPHER_INFO: Protocol: 303
SECPKG_ATTR_CIPHER_INFO: CipherSuite: ff85, TLS_GOSTR341112_256_WITH_28147_CNT_IMIT
SECPKG_ATTR_CIPHER_INFO: BaseCipherSuite: ff85
SECPKG_ATTR_CIPHER_INFO: Cipher: GOST 28147-89, Len: 256, BlockLen: 1
SECPKG_ATTR_CIPHER_INFO: Hash: GR 34.11-2012 256, Len: 256
SECPKG_ATTR_CIPHER_INFO: Exchange: GOST DH 34.10-2012 256, MinLen: 512, MaxLen:512
SECPKG_ATTR_CIPHER_INFO: Certificate: GR 34.10-2012 256, KeyType: 0

SECPKG_ATTR_CONNECTION_INFO: Protocol: 0x800 (TLS 1.2)
SECPKG_ATTR_CONNECTION_INFO: Cipher: 0x661e
SECPKG_ATTR_CONNECTION_INFO: Cipher strength: 256
SECPKG_ATTR_CONNECTION_INFO: Hash: 0x8021
SECPKG_ATTR_CONNECTION_INFO: Hash strength: 256
SECPKG_ATTR_CONNECTION_INFO: Exch: 0xaa47
SECPKG_ATTR_CONNECTION_INFO: Key exchange strength: 512

SECPKG_ATTR_KEY_INFO: KeySize: 256
SECPKG_ATTR_KEY_INFO: SignatureAlgorithm: 0x2e23, Name: GOST R 34.11
SECPKG_ATTR_KEY_INFO: EncryptAlgorithm: 0x661e, Name: GOST 28147-89

SECPKG_ATTR_SUPPORTED_SIGNATURES: Supported signatures: (ee ee) (ef ef) (ed ed)

SECPKG_ATTR_NAMES: O="ООО ""КРИПТО-ПРО""", L=Москва, S=г. Москва, C=RU, CN="Веб-сервер ООО ""КРИПТО-ПРО"""

SECPKG_ATTR_PACKAGE_INFO: fCapabilities: 0x107B3
SECPKG_ATTR_PACKAGE_INFO: wVersion: 1
SECPKG_ATTR_PACKAGE_INFO: wRPCID: 65535
SECPKG_ATTR_PACKAGE_INFO: cbMaxToken: 16379
SECPKG_ATTR_PACKAGE_INFO: Name: CryptoPro SSP
SECPKG_ATTR_PACKAGE_INFO: Comment: CryptoPro Security Package

Server certificate:
Subject: O="ООО ""КРИПТО-ПРО""", L=Москва, S=г. Москва, C=RU, CN="Веб-сервер ООО ""КРИПТО-ПРО"""
Valid : 31.08.2022 11:43:52 - 30.11.2023 11:43:52 (UTC)
Issuer : ИНН ЮЛ=7717107991, ОГРН=1037700085444, C=RU, S=Moscow, L=Moscow, O="LLC ""Crypto-Pro""", CN=CryptoPro TLS CA
CA subject: ИНН ЮЛ=7717107991, ОГРН=1037700085444, C=RU, S=Moscow, L=Moscow, O="LLC ""Crypto-Pro""", CN=CryptoPro TLS CA
CA issuer : ОГРН=1037700085444, ИНН=007717107991, C=RU, S=Moscow, L=Moscow, O="LLC ""Crypto-Pro""", CN=CryptoPro GOST Root CA


SECPKG_ATTR_STREAM_SIZES: Header: 5, Trailer: 4, MaxMessage: 16384
SECPKG_ATTR_STREAM_SIZES: Buffers: 4, BlockSize: 1

SECPKG_ATTR_SIZES: MaxToken: 16384
SECPKG_ATTR_SIZES: MaxSignature: 4
SECPKG_ATTR_SIZES: BlockSize: 1
SECPKG_ATTR_SIZES: SecurityTrailer: 9

HTTP request: GET / HTTP/1.1
User-Agent: Webclient
Accept:*/*
Host: cryptopro.ru
Connection: close


Sending plaintext: 92 bytes
110 bytes of application data sent
1400 bytes of (encrypted) application data received
14000 bytes of (encrypted) application data received
1002 bytes of (encrypted) application data received
Decrypted data: 16384 bytes
Extra data: 9 bytes
16393 bytes of (encrypted) application data received
Decrypted data: 16384 bytes
Extra data: 9 bytes
11191 bytes of (encrypted) application data received
5202 bytes of (encrypted) application data received
Decrypted data: 16384 bytes
Extra data: 9 bytes
8451 bytes of (encrypted) application data received
Decrypted data: 8440 bytes
Extra data: 11 bytes
Context expired: OK if file is completely downloaded
Reply status: HTTP/1.1 200 OK
Sending Close Notify
11 bytes of handshake data sent
1 connections, 57592 bytes in 0.607 seconds;
Total: SYS: 0,062 sec USR: 0,078 sec UTC: 0,667 sec
[ErrorCode: 0x00000000]

Разумеется