www-data@csp:~# uname -a
Linux csp 2.6.32-042stab120.11 #1 SMP Wed Nov 16 12:05:45 MSK 2016 x86_64 GNU/Linux

www-data@csp:~# dpkg -l | grep csp
ii  cprocsp-cpopenssl-gost-64      4.0.0-4                              amd64        OpenSSL capi_gost engine. Build 9842.
ii  cprocsp-curl-64                4.0.0-4                              amd64        CryptoPro Curl shared library and binaris. Build 9842.
ii  cprocsp-pki-cades              2.0.0-1                              amd64        CryptoPro PKI
ii  lsb-cprocsp-base               4.0.0-4                              all          CryptoPro CSP library. Build 9842.
ii  lsb-cprocsp-capilite-64        4.0.0-4                              amd64        CryptoAPI lite. Build 9842.
ii  lsb-cprocsp-devel              5.0.0-5                              all          CryptoPro CSP static libraries and headers. Build 10579.
ii  lsb-cprocsp-kc1-64             4.0.0-4                              amd64        CryptoPro CSP library. Build 9842.
ii  lsb-cprocsp-kc2-64             4.0.0-4                              amd64        CryptoPro CSP KC2. Build 9842.
ii  lsb-cprocsp-rdr-64             4.0.0-4                              amd64        CryptoPro CSP readers. Build 9842.

www-data@csp:~# openssl version
OpenSSL 1.0.1t  3 May 2016

www-data@csp:~# openssl engine
(rsax) RSAX engine support
(rdrand) Intel RDRAND engine
(dynamic) Dynamic engine loading support
(gost_capi) CryptoPro ENGINE GOST CAPI ($Revision: 147820 $)

www-data@csp:~# openssl ciphers | tr ":" "\n" | grep GOST
GOST2001-GOST89-GOST89

www-data@csp:~# nginx -V
nginx version: nginx/1.10.3
built by gcc 4.9.2 (Debian 4.9.2-10)
built with OpenSSL 1.0.1t  3 May 2016
TLS SNI support enabled
configure arguments: --prefix=/etc/nginx --sbin-path=/usr/sbin/nginx --modules-path=/usr/lib/nginx/modules --conf-path=/etc/nginx/nginx.conf --error-log-path=/var/log/nginx/error.log --http-log-path=/var/log/nginx/access.log --pid-path=/var/run/nginx.pid --lock-path=/var/run/nginx.lock --http-client-body-temp-path=/var/cache/nginx/client_temp --http-proxy-temp-path=/var/cache/nginx/proxy_temp --http-fastcgi-temp-path=/var/cache/nginx/fastcgi_temp --http-uwsgi-temp-path=/var/cache/nginx/uwsgi_temp --http-scgi-temp-path=/var/cache/nginx/scgi_temp --user=nginx --group=nginx --with-http_ssl_module --with-http_realip_module --with-http_addition_module --with-http_sub_module --with-http_dav_module --with-http_flv_module --with-http_mp4_module --with-http_gunzip_module --with-http_gzip_static_module --with-http_random_index_module --with-http_secure_link_module --with-http_stub_status_module --with-http_auth_request_module --with-http_xslt_module=dynamic --with-http_image_filter_module=dynamic --with-http_geoip_module=dynamic --with-http_perl_module=dynamic --with-threads --with-stream --with-stream_ssl_module --with-http_slice_module --with-mail --with-mail_ssl_module --with-file-aio --with-ipv6 --with-http_v2_module --with-cc-opt='-g -O2 -fstack-protector-strong -Wformat -Werror=format-security' --with-ld-opt=-Wl,-z,relro

	ssl on;
	ssl_certificate "/home/certs/csp.nodomain.me.cer.pem";
	ssl_certificate_key  engine:gost_capi:csp.nodomain.me;
	ssl_session_cache shared:SSL:1m;
	ssl_session_timeout  5m;
	ssl_protocols               TLSv1;
	ssl_ciphers  HIGH:MEDIUM:+GOST2001-GOST89;
	ssl_prefer_server_ciphers   on;

certmgr -export -store uMy -dest /home/certs/csp.nodomain.me.cer
openssl x509 -inform DER -outform PEM -in /root/csp.nodomain.me.cer -out /root/csp.nodomain.me.cer.pem

www-data@csp:~$ certmgr -list
Certmgr 1.0 (c) "CryptoPro",  2007-2010.
program for managing certificates, CRLs and stores

=============================================================================
1-------
Issuer              : E=support@cryptopro.ru, C=RU, L=Moscow, O=CRYPTO-PRO LLC, CN=CRYPTO-PRO Test Center 2
Subject             : CN=csp.nodomain.me
Serial              : 0x12001A7F1C2F8E2F3A94AC70190000001A7F1C
SHA1 Hash           : 0xcc5b3d80742e974252d3958f5631703cf4474131
SubjKeyID           : 4a4f835942097e1cf08c6e653922db4f87b01849
Signature Algorithm : ГОСТ Р 34.11/34.10-2001
PublicKey Algorithm : ГОСТ Р 34.10-2001 (512 bits)
Not valid before    : 14/03/2017  13:27:55 UTC
Not valid after     : 14/06/2017  13:37:55 UTC
PrivateKey Link     : Yes
Container           : HDIMAGE\\www-data.000\EFAE
Provider Name       : Crypto-Pro GOST R 34.10-2001 KC2 CSP
Provider Info       : ProvType: 75, KeySpec: 1, Flags: 0x0
CA cert URL         : http://testca.cryptopro.ru/CertEnroll/test-ca-2014_CRYPTO-PRO%20Test%20Center%202.crt
OCSP URL            : http://testca.cryptopro.ru/ocsp/ocsp.srf
CDP                 : http://testca.cryptopro.ru/CertEnroll/CRYPTO-PRO%20Test%20Center%202.crl
Extended Key Usage  : 1.3.6.1.5.5.7.3.1
=============================================================================

[ErrorCode: 0x00000000]