root@debian8:/home/user# uname -a
Linux debian8 3.16.0-4-amd64 #1 SMP Debian 3.16.51-3 (2017-12-13) x86_64 GNU/Linux

root@debian8:/home/user# /usr/sbin/nginx -V
nginx version: nginx/1.14.0
built by gcc 4.9.2 (Debian 4.9.2-10+deb8u1)
built with OpenSSL 1.1.0h  27 Mar 2018
TLS SNI support enabled
configure arguments: --prefix=/etc/nginx --sbin-path=/usr/sbin/nginx --modules-path=/usr/lib/nginx/modules --conf-path=/etc/nginx/nginx.conf --error-log-path=/var/log/nginx/error.log --http-log-path=/var/log/nginx/access.log --http-client-body-temp-path=/var/cache/nginx/client_temp --http-proxy-temp-path=/var/cache/nginx/proxy_temp --http-fastcgi-temp-path=/var/cache/nginx/fastcgi_temp --http-uwsgi-temp-path=/var/cache/nginx/uwsgi_temp --http-scgi-temp-path=/var/cache/nginx/scgi_temp --pid-path=/var/run/nginx.pid --lock-path=/var/run/nginx.lock --user=root --group=nginx --user=nginx --group=nginx --with-compat --with-file-aio --with-threads --with-http_addition_module --with-http_auth_request_module --with-http_dav_module --with-http_flv_module --with-http_gunzip_module --with-http_gzip_static_module --with-http_mp4_module --with-http_random_index_module --with-http_realip_module --with-http_secure_link_module --with-http_slice_module --with-http_ssl_module --with-http_stub_status_module --with-http_sub_module --with-http_v2_module --with-mail --with-mail_ssl_module --with-stream --with-stream_realip_module --with-stream_ssl_module --with-stream_ssl_preread_module --with-cc-opt='-g -O2 -fstack-protector --param=ssp-buffer-size=4 -Wformat -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -fPIC' --with-ld-opt='-Wl,-Bsymbolic-functions -Wl,-
z,relro -Wl,-z,now -Wl,--as-needed -pie'

root@debian8:/home/user# /opt/cprocsp/cp-openssl-1.1.0/bin/amd64/openssl engine
(dynamic) Dynamic engine loading support
(gostengy) CryptoPro GostEngy ($Revision: 174535 $)

root@debian8:/home/user# dpkg-query --list | grep csp
ii  cprocsp-compat-debian          1.0.0-1                            all          CryptoPro CSP compatibility extension for non-LSB Debian/Ubuntu
ii  cprocsp-cpopenssl-110-64       5.0.11099-5                        amd64        OpenSSL-110. Build 11099.
ii  cprocsp-cpopenssl-110-base     5.0.11099-5                        all          Openssl-110 common Build 11099.
ii  cprocsp-cpopenssl-110-devel    5.0.11099-5                        all          Openssl-110 devel Build 11099.
ii  cprocsp-cpopenssl-110-gost-64  5.0.11099-5                        amd64        OpenSSL-110 gostengy engine. Build 11099.
ii  cprocsp-curl-64                4.0.0-4                            amd64        CryptoPro Curl shared library and binaris. Build 9842.
ii  lsb-cprocsp-base               4.0.0-4                            all          CryptoPro CSP library. Build 9842.
ii  lsb-cprocsp-capilite-64        4.0.0-4                            amd64        CryptoAPI lite. Build 9842.
ii  lsb-cprocsp-kc1-64             4.0.0-4                            amd64        CryptoPro CSP library. Build 9842.
ii  lsb-cprocsp-kc2-64             4.0.0-4                            amd64        CryptoPro CSP KC2. Build 9842.
ii  lsb-cprocsp-rdr-64             4.0.0-4                            amd64        CryptoPro CSP readers. Build 9842.

root@debian8:/home/user# ps aux | grep nginx
root     17120  0.0  0.9  79376  3660 ?        Ss   02:30   0:00 nginx: master process nginx
root     17121  0.0  2.0  79924  7740 ?        S    02:30   0:00 nginx: worker process
root     17534  0.0  0.5  12728  2204 pts/1    S+   04:36   0:00 grep nginx

root@debian8:/home/user# ldd /usr/sbin/nginx
        linux-vdso.so.1 (0x00007ffca49ae000)
        libdl.so.2 => /lib/x86_64-linux-gnu/libdl.so.2 (0x00007f874b000000)
        libpthread.so.0 => /lib/x86_64-linux-gnu/libpthread.so.0 (0x00007f874ade3000)
        libcrypt.so.1 => /lib/x86_64-linux-gnu/libcrypt.so.1 (0x00007f874abac000)
        libpcre.so.1 => /usr/local/lib/libpcre.so.1 (0x00007f874a98f000)
        libssl.so.1.1 => /opt/cprocsp/cp-openssl-1.1.0/lib/amd64/libssl.so.1.1 (0x00007f874a721000)
        libcrypto.so.1.1 => /opt/cprocsp/cp-openssl-1.1.0/lib/amd64/libcrypto.so.1.1 (0x00007f874a29c000)
        libz.so.1 => /usr/local/lib/libz.so.1 (0x00007f874a081000)
        libc.so.6 => /lib/x86_64-linux-gnu/libc.so.6 (0x00007f8749cd6000)
        /lib64/ld-linux-x86-64.so.2 (0x00007f874b560000)

user  root;
worker_processes  1;

events {
    worker_connections  1024;
}


http {
    include       mime.types;
    default_type  application/octet-stream;

    sendfile        on;
    keepalive_timeout  65;

    # HTTP server
    server {
        listen       80;
        server_name  localhost;

        location / {
            root   html;
            index  index.html index.htm;
        }

        error_page   500 502 503 504  /50x.html;
        location = /50x.html {
            root   html;
        }

    }

    # HTTPS server
    server {
        listen       443 ssl;
        server_name  lemp.sec.local;

        ssl_certificate      /etc/nginx/srvtest.pem;
        ssl_certificate_key  engine:gostengy:srvtest;
        ssl_certificate      srvtestRSA.pem;
        ssl_certificate_key  srvtestRSA.key;
        ssl_session_cache    shared:SSL:1m;
        ssl_session_timeout  5m;
        ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
        ssl_ciphers GOST2012-GOST8912-GOST8912:GOST2001-GOST89-GOST89:HIGH;
        ssl_prefer_server_ciphers  on;

        location / {
            root   html;
            index  index.html index.htm;
        }

        error_page   500 502 503 504  /50x.html;
        location = /50x.html {
            root   html;
        }
    }
}