Saini faaeletonika agavaa mo macOS

E tusa ai RBK и Tensor, i le 2019, 4,6 miliona tusi faamaonia o saini faaeletonika agavaa (CES) o le a tuuina atu i Rusia, ausia manaoga o le 63-FZ. E aliali mai mai le 8 miliona tagata fai pisinisi ma LLC, e faʻaaogaina e le aufaipisinisi lona lua se saini eletise. I le faaopoopo atu i le EGAIS CEPs ma CEPs e faavae i ao mo lipoti na tuuina atu e faletupe ma auaunaga tau tupe, o CEP lautele i luga o faailoga malupuipuia e matua fiafia lava. O ia tusi pasi e mafai ai ona e ulufale i totonu o faitotoa o le malo ma sainia soʻo se pepa, e faʻamaonia ai le taua faaletulafono.

Faʻafetai i le tusi faamaonia a le CEP i luga o le USB token, e mafai ona e faʻamaeʻaina se maliega ma se paaga poʻo se tagata faigaluega mamao, ma auina atu pepa i le faamasinoga; resitala se tusi resitala tupe i luga ole laiga, faʻamautu aitalafu lafoga ma tuʻuina atu se taʻutinoga i lau lava teugatupe ile nalog.ru; saili e uiga i aitalafu ma asiasiga o loma i le State Services.

O le tusi lesona o loʻo i lalo o le a fesoasoani galue ma CEP i lalo ole macOS - e aunoa ma le suʻesuʻeina o le CryptoPro forums ma faʻapipiʻi se masini masini ma Windows.

Mataupu

O mea e te manaʻomia e galue ai ma le CEP i lalo ole macOS:

Fa'apipi'i ma fa'atulaga le CEP mo macOS

1. Fa'apipi'i CryptoPro CSP
2. Fa'apipi'i ta'avale Rutoken
3. Fa'apipi'i tusi pasi
   3.1. Matou te tape uma tusi pasi GOST tuai
   3.2. Fa'apipi'i tusi faamaonia a'a
   3.3. La'u mai i lalo tusi faamaonia o pulega
   3.4. Faʻapipiʻi se tusi faamaonia ma Rutoken
4. Fa'apipi'i se su'esu'ega fa'apitoa Chromium-GOST
5. Fa'apipi'i fa'aopoopoga o su'esu'ega
   5.1 CryptoPro EDS Browser plug-in
   5.2. Plugin mo Auaunaga Lautele
   5.3. Fa'atulaga se fa'apipi'i mo Auaunaga a le Setete
   5.4. Fa'agaoioia fa'aopoopoga
   5.5. Fa'atulaga le CryptoPro EDS Browser plug-in extension
6. Siaki o loʻo galue mea uma
   6.1. Alu ile itulau ole su'ega CryptoPro
   6.2. Alu i lau Personal Account ile nalog.ru
   6.3. Alu ile State Services
7. O le a le mea e fai pe a le toe galue

Suia le koneteina PIN code

1. Su'e le igoa ole pusa KEP
2. Suia le PIN i se poloaiga mai le laina

Saini faila ile macOS

1. Su'e le hash o le tusipasi CEP
2. Saini se faila i se poloaiga mai le laina
3. Fa'apipi'i le Apple Automator Script

Siaki le saini i luga o le pepa

O faʻamatalaga uma o loʻo i lalo e maua mai i punaoa faʻapitoa (CryptoPro #1 и #2, Rutoken, Corus-Faufautua, Ural Federal District o le Matagaluega o Telecom ma Fesootaiga Mass), ma e fautuaina e sii mai polokalame mai nofoaga faatuatuaina. O le tusitala o se faufautua tutoatasi ma e le o soʻo se tasi o kamupani o loʻo taʻua. E ala i le mulimuli i nei faatonuga, e te tauaveina le matafaioi atoa mo soʻo se gaioiga ma taunuuga.

O mea e te manaʻomia e galue ai ma le CEP i lalo ole macOS:

1. CEP i luga o se faailoga USB Rutoken Lite poʻo Rutoken EDS
2. pusa crypto i le CryptoPro faatulagaga
3. ma totonu-i totonu laisene mo CryptoPro CSP

eToken ma JaCarta faʻasalalauga faʻatasi ma CryptoPro e le lagolagoina i lalo ole macOS. O le Rutoken Lite media o le filifiliga sili lea, e tau 500..1000= rubles, e galue vave ma mafai ai ona e teuina i luga ole 15 ki.

Crypto providers VipNet, Signal-COM ma LISSY e le lagolagoina i macOS. E leai se auala e faaliliu ai pusa. CryptoPro o le filifiliga sili lea, o le tau o le tusi faamaonia e tatau ona tusa ma le 1300 = rub. mo tagata fai pisinisi taitoatasi ma 1600 = rub. mo YUL.

E masani lava, o se laisene faaletausaga mo CryptoPro CSP ua uma ona aofia i totonu o le tusi faamaonia ma e maua fua e le tele o CA. Afai e le o le tulaga lea, ona e manaʻomia lea e faʻatau ma faʻagaoioia se laisene faʻavavau mo CryptoPro CSP faʻamaonia faʻasologa 4 tau 2700 =. CryptoPro CSP version 5 mo macOS e le o galue i le taimi nei.

Fa'apipi'i ma fa'atulaga le CEP mo macOS

Mea manino

• o faila uma na sii mai e la'u mai i le lisi fa'aletonu: ~/Downloads/;
• Matou te le suia soʻo se mea i faʻapipiʻi uma, matou te tuʻuina mea uma e le mafai;
• afai e faʻaalia e le macOS se lapataiga e faʻapea o le polokalama o loʻo faʻalauiloaina e mai se tagata e leʻo iloa, e tatau ona e faʻamaonia le faʻalauiloaina i le faʻatulagaina o le polokalama: System Preferences -> Security & Privacy -> Tatala Soʻo se mea;
• afai e talosaga macOS mo se faʻaupuga faʻaoga ma se faʻatagaga e pulea ai le komepiuta, e tatau ona e ulufale i le faʻaupuga ma malilie i mea uma.

1. Fa'apipi'i CryptoPro CSP

Resitala i luga o le upega tafaʻilagi CryptoPro ma faʻatasi download itulau download ma faapipii le lomiga CryptoPro CSP 4.0 R4 mo macOS - скачать.

2. Faʻapipiʻi taʻavale Rutoken

Fai mai le upega tafaʻilagi o lenei mea e filifili, ae sili atu le faʻapipiʻiina. Co download itulau download ma faʻapipiʻi i luga o le upega tafaʻilagi a Rutoken Module lagolago keychain - скачать.

Le isi, faʻafesoʻotaʻi le usb token, faʻalauiloa le laina ma faʻatino le poloaiga:

/opt/cprocsp/bin/csptest -card -enum -v

O le tali e tatau ona faapea:

Aktiv Rutoken…
Kata maua…
[Error Code: 0x00000000]

3. Fa'apipi'i tusi faamaonia

3.1. Matou te tape uma tusi pasi GOST tuai

Afai na e taumafai muamua e faʻalauiloa le CEP i lalo ole macOS, ona e manaʻomia lea e faʻamalo uma tusi pasi faʻapipiʻi muamua. O nei fa'atonuga i totonu o le laina o le a na'o le tapeina o tusipasi CryptoPro ma o le a le afaina ai tusi pasi masani mai Keychain i macOS.

sudo /opt/cprocsp/bin/certmgr -delete -all -store mroot

sudo /opt/cprocsp/bin/certmgr -delete -all -store uroot

/opt/cprocsp/bin/certmgr -delete -all

O tali taitasi a le poloaiga e tatau ona aofia ai:

Leai se tusi faamaonia e fetaui ma taiala

poʻo

Fa'ato'a tapeina

3.2. Fa'apipi'i tusi faamaonia a'a

O tusi faamaonia a'a e taatele i CEP uma e tu'uina atu e so'o se pulega fa'amaonia. La'uina mai download itulau Ural Federal District o le Matagaluega o Telecom ma Fesootaiga Mass:

• https://e-trust.gosuslugi.ru/Shared/DownloadCert?thumbprint=4BC6DC14D97010C41A26E058AD851F81C842415A
• https://e-trust.gosuslugi.ru/Shared/DownloadCert?thumbprint=8CAE88BBFD404A7A53630864F9033606E1DC45E2
• https://e-trust.gosuslugi.ru/Shared/DownloadCert?thumbprint=0408435EB90E5C8796A160E69E4BFAC453435D1D

Fa'apipi'i ma fa'atonuga ile fa'amauina:

sudo /opt/cprocsp/bin/certmgr -inst -store mroot -f ~/Downloads/4BC6DC14D97010C41A26E058AD851F81C842415A.cer

sudo /opt/cprocsp/bin/certmgr -inst -store mroot -f ~/Downloads/8CAE88BBFD404A7A53630864F9033606E1DC45E2.cer

sudo /opt/cprocsp/bin/certmgr -inst -store mroot -f ~/Downloads/0408435EB90E5C8796A160E69E4BFAC453435D1D.cer

E tatau ona toe foi mai poloaiga taitasi:

Faʻapipiʻi:
...
[Error Code: 0x00000000]

3.3. La'u mai i lalo tusi faamaonia o pulega

O le isi, e tatau ona e fa'apipi'i tusi faamaonia a le pulega fa'amaonia lea na e tu'uina atu ai le CEP. E masani lava, o tusi a'a o CA ta'itasi o lo'o i luga o lana upega tafa'ilagi i le vaega o le download.

I le isi itu, tusi pasi o so'o se CA e mafai ona la'u mai 'upega tafaʻilagi a le Ural Federal District of the Ministry of Telecom and Mass Communications. Ina ia faia lenei mea, i le fomu suʻesuʻe e te manaʻomia e suʻe se CA ile igoa, alu i le itulau ma tusi pasi ma download mea uma galue tusi pasi – o lona uiga, i latou e iai 'Tagata' e lei oo mai le aso lona lua. La'u mai le so'oga i le fanua 'Fingerprint'.

Screenshots

Fa'aaogāina o le fa'ata'ita'iga a CA Corus-Consulting: e mana'omia le siiina mai o tusi fa'amaonia e 4 mai download itulau:

• https://e-trust.gosuslugi.ru/Shared/DownloadCert?thumbprint=15EB064ABCB96C5AFCE22B9FEA52A1964637D101
• https://e-trust.gosuslugi.ru/Shared/DownloadCert?thumbprint=B9F1D3F78971D48C34AA73786CDCD138477FEE3F
• https://e-trust.gosuslugi.ru/Shared/DownloadCert?thumbprint=55EC48193B6716D38E80BD9D1D2D827BC8A07DE3
• https://e-trust.gosuslugi.ru/Shared/DownloadCert?thumbprint=A0D19D700E2A5F1CAFCE82D3EFE49A0D882559DF

Matou te faʻapipiʻi tusi CA na sii mai e faʻaaoga ai poloaiga mai le laina:

sudo /opt/cprocsp/bin/certmgr -inst -store mroot -f ~/Downloads/B9F1D3F78971D48C34AA73786CDCD138477FEE3F.cer

sudo /opt/cprocsp/bin/certmgr -inst -store mroot -f ~/Downloads/A0D19D700E2A5F1CAFCE82D3EFE49A0D882559DF.cer

sudo /opt/cprocsp/bin/certmgr -inst -store mroot -f ~/Downloads/55EC48193B6716D38E80BD9D1D2D827BC8A07DE3.cer

sudo /opt/cprocsp/bin/certmgr -inst -store mroot -f ~/Downloads/15EB064ABCB96C5AFCE22B9FEA52A1964637D101.cer

o fea mulimuli ane ~/Downloads/ O igoa o faila na sii mai o loʻo lisiina; o le a eseese mo CA taʻitasi.

E tatau ona toe foi mai poloaiga taitasi:

Faʻapipiʻi:
...
[Error Code: 0x00000000]

3.4. Faʻapipiʻi se tusi faamaonia ma Rutoken

Poloaiga ile fa'amauina:

/opt/cprocsp/bin/csptestf -absorb -certs

O le poloaiga e tatau ona toe foi mai:

Afaina.
[Error Code: 0x00000000]

4. Fa'apipi'i se su'esu'ega fa'apitoa Chromium-GOST

Ina ia galue ma faitotoa o le malo, e te manaʻomia se faʻapitoa faʻapitoa o le chromium browser - Chromium-GOST. O lo'o tatala le fa'ailoga o le poloketi, feso'ota'i i fale teu oloa ile GitHub ua tuuina atu i luga CryptoPro 'upega tafaʻilagi. Mai le poto masani, isi suʻesuʻega CryptoFox и Browser Yandex E le talafeagai mo le galulue faatasi ma faitotoa o le malo i lalo ole macOS. E taua le mafaufau i nisi o fausaga o Chromium-GOST, o le tala a le tagata lava ia i luga o le nalog.ru e mafai ona malolo pe o le taʻavale e ono le toe galue atoa, o lea e ofoina atu ai le mea tuai faʻamaonia. fausia 71.0.3578.98 - скачать.


La'i mai ma tatala le fa'amaumauga, fa'apipi'i le su'esu'ega e ala i le kopiina pe toso ma tu'u i totonu o le lisi o Talosaga. A maeʻa faʻapipiʻi, Faʻamalosi tapuni Chromium ma aua le tatalaina, galue mai Safari.

killall Chromium-Gost

5. Fa'apipi'i fa'aopoopoga su'esu'e

5.1 CryptoPro EDS Browser plug-in

Ma le download itulau download ma faʻapipiʻi i luga o le upega tafaʻilagi a CryptoPro CryptoPro EDS Browser plug-in version 2.0 mo tagata faʻaoga - скачать.

5.2. Plugin mo Auaunaga Lautele

Ma le download itulau la'u mai ma fa'apipi'i ile faitoto'a o Auaunaga a le Setete Plugin mo le galulue faatasi ma le faitotoa o auaunaga a le malo (faiga mo macOS) - скачать.

5.3. Fa'atulaga se fa'apipi'i mo Auaunaga a le Setete

La'u mai le faila fa'atulaga sa'o mo le fa'aopoopoga o Auaunaga a le Setete mai le upega tafa'ilagi a CryptoPro - скачать.

Fa'atino poloaiga ile fa'amauina:

sudo rm /Library/Internet Plug-Ins/IFCPlugin.plugin/Contents/ifc.cfg

sudo cp ~/Downloads/ifc.cfg /Library/Internet Plug-Ins/IFCPlugin.plugin/Contents


sudo cp /Library/Google/Chrome/NativeMessagingHosts/ru.rtlabs.ifcplugin.json /Library/Application Support/Chromium/NativeMessagingHosts

5.4. Fa'agaoioia fa'aopoopoga

Tatala le su'esu'ega Chromium-Gost ma lolomi ile pusa tuatusi:

chrome://extensions/

Matou te fa'aogaina fa'aopoopoga fa'apipi'i uma e lua:

• CryptoPro Extension mo CAdES Browser Plug-in
• Fa'aopoopoga mo le fa'apipi'i mo Auaunaga Lautele

Matagofie

5.5. Fa'atulaga le CryptoPro EDS Browser plug-in extension

I le tulaga o le tuatusi Chromium-Gost matou te lolomi:

/etc/opt/cprocsp/trusted_sites.html

I luga o le itulau o loʻo faʻaalia, faʻaopoopo saite nei i le lisi o nofoaga faʻatuatuaina taʻitasi:

https://*.cryptopro.ru
https://*.nalog.ru
https://*.gosuslugi.ru

Kiliki "Save". E tatau ona aliali mai se togi lanu meamata:

O le lisi o nodes faatuatuaina ua uma ona sefe lelei.

Matagofie

6. Siaki pe lelei mea uma

6.1. Alu ile itulau ole su'ega CryptoPro

I le tulaga o le tuatusi Chromium-Gost matou te lolomi:

https://www.cryptopro.ru/sites/default/files/products/cades/demopage/cades_bes_sample.html

"Plugin loaded" e tatau ona faʻaalia, ma o lau tusi faamaonia e tatau ona i ai i le lisi o loʻo i lalo.
Filifili se tusi faamaonia mai le lisi ma kiliki "Saini". O le a fesiligia oe mo le PIN tusi faamaonia. O se taunuuga, e tatau ona faʻaalia

Ua manuia le saini

Matagofie

6.2. Alu i lau Personal Account ile nalog.ru

Atonu e le mafai ona e mauaina sootaga mai le site nalog.ru, ona... e le pasi siaki. E tatau ona e alu i feso'ota'iga tuusa'o:

• ofisa tumaoti IP: https://lkipgost.nalog.ru/lk
• ofisa tumaoti ЮЛ: https://lkul.nalog.ru

Matagofie

6.3. Alu ile State Services

A e saini i totonu, filifili "Log in using a electronic signature." I le lisi "Filifili saini saini faʻamaonia faʻamaonia" lisi o loʻo aliali mai, o tusi faamaonia uma, e aofia ai aʻa ma CA, o le a faʻaalia; e tatau ona e filifilia lau mai se USB token ma ulufale i le PIN.

Matagofie

7. O le a le mea e fai pe a le toe galue

1. Matou te toe faʻafesoʻotaʻi le faʻailoga usb ma siaki o loʻo iloa i le faʻaaogaina o le poloaiga i le laina:

   sudo /opt/cprocsp/bin/csptest -card -enum -v


2. Matou te fa'amama le 'upega tafa'ilagi mo taimi uma, lea matou te ta'i i totonu o le pa'u tuatusi Chromium-Gost:

   
chrome://settings/clearBrowserData


3. Toe faʻapipiʻi le tusi faamaonia CEP e faʻaaoga ai le faʻatonuga i totonu o le laina:

   /opt/cprocsp/bin/csptestf -absorb -certs

Suia le koneteina PIN code

Fa'asinomaga PIN code mo Rutoken ona o le faaletonu 12345678, ma e leai se auala e tuua ai faapea. Manaoga mo le Rutoken PIN code: 16 mataitusi maualuga, e mafai ona aofia ai mataitusi Latina ma numera.

1. Su'e le igoa ole pusa KEP

Atonu e tele tusi faamaonia e teuina i luga o le USB token ma isi mea e teu ai, ma e tatau ona e filifilia le mea sa'o. Faatasi ai ma le faʻailoga usb faʻapipiʻiina, matou te maua se lisi o pusa uma i totonu o le polokalama ma le faʻatonuga i le laina:

/opt/cprocsp/bin/csptest -keyset -enum_cont -fqcn -verifycontext

O le poloaiga e tatau ona aveese ia le itiiti ifo ma le 1 container ma toe foi mai

[Error Code: 0x00000000]

O le atigipusa matou te manaʻomia e foliga mai

.Aktiv Rutoken liteXXXXXXXXX

Afai e fa'aalia ni koneteina fa'apea, o lona uiga e tele tusi pasi o lo'o tusia i luga o le fa'ailoga, ma e te iloa le mea e te mana'omia. Uiga XXXXXXXXX a maeʻa le slash e tatau ona e kopi ma faapipii i totonu o le poloaiga o loʻo i lalo.

2. Suia le PIN e faaaoga ai se poloaiga mai le laina

/opt/cprocsp/bin/csptest -passwd -qchange -container "XXXXXXXX"

le mea XXXXXXXXX – le igoa o le atigipusa na maua i le Laasaga 1 (e tatau i upusii).

O le a aliali mai se talanoaga CryptoPro e fesili mo le PIN code tuai e maua ai le tusi faamaonia, ona sosoo ai lea ma le isi talanoaga e ulufale i le PIN code fou. Sauni.

Matagofie

Saini faila ile macOS

I macOS, e mafai ona saini faila i le polokalama CryptoArm (laisene tau 2500 = rub.), poʻo se faʻatonuga faigofie e ala i le laina - leai se totogi.

1. Su'e le hash o le tusipasi CEP

E mafai ona tele tusi faamaonia i luga o se faailoga ma isi faleoloa. E mana'omia ona fa'ailoa manino le mea o le a tatou sainia ai pepa mai le taimi nei. Fai tasi.
E tatau ona fa'aofi le fa'ailoga. Matou te mauaina se lisi o tusi faamaonia i totonu o faleoloa ma le poloaiga mai le laina:

/opt/cprocsp/bin/certmgr -list

O le poloaiga e tatau ona tuʻuina atu ia le itiiti ifo ma le 1 tusi faamaonia o le fomu:

Certmgr 1.1 © "Crypto-Pro", 2007-2018.
polokalame mo le puleaina o tusipasi, CRLs ma faleoloa
====================
1---
Tuuina atu: [imeli puipuia],... CN=LLC KORUS Consulting CIS...
noatia ma fai fuafua: [imeli puipuia],... CN=Zakharov Sergey Anatolyevich...
Fa'asologa: 0x0000000000000000000000000000000000
SHA1 Hash: XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
...
Ipu: SCARDrutoken_lt_00000000 000 000
...
====================
[Error Code: 0x00000000]

O le tusi faamaonia matou te manaʻomia i le Container parameter e tatau ona i ai se tau e pei o SCARDrutoken…. Afai e tele tusi pasi fa'atasi ma ia tulaga taua, o lo'o i ai le tele o tusi pasi fa'amaumauina i luga o le fa'ailoga, ma e te iloa le mea e te mana'omia. Fa'atatauga SHA1 Hash (40 mataitusi) e tatau ona kopi ma faapipii i le poloaiga o loo i lalo.

2. Saini se faila i se poloaiga mai le laina

I le laina, alu i le lisi ma le faila e sainia ma faʻatino le poloaiga:

/opt/cprocsp/bin/cryptcp -signf -detach -cert -der -strict -thumbprint ХХХХХХХХХХХХХХХХХХХХХХХХХХХХХХХХХХХХХХХХ FILE

le mea XXXX… – tusi faamaonia hash maua i le laasaga 1, ma FILE - igoa faila e saini (faatasi ai ma faʻaopoopoga uma, ae leai se auala).

O le poloaiga e tatau ona toe foi mai:

Ua faia le savali saini.
[Error Code: 0x00000000]

O le a faia se faila saini fa'aeletoroni ma le fa'aopoopoga *.sgn - o se saini tu'u'ese lea ile CMS fa'asologa ma DER encoding.

3. Fa'apipi'i le Apple Automator Script

Ina ia aloese mai le galue i le laina i taimi uma, e mafai ona e faʻapipiʻi le Automator Script i le taimi e tasi, lea e mafai ona e sainia ai pepa mai le Suʻe faʻamatalaga lisi. Ina ia faia lenei mea, download le archive - скачать.

1. Ta'ese le fa'amaumauga 'Saini ma CryptoPro.zip'
2. Fa'alauiloa Aunoa
3. Su'e ma tatala le faila e le'i teuina 'Saini ma CryptoPro.workflow'
4. I le poloka Tamoʻe Tusitusiga Faigofie sui le tusitusiga XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX i le tau parameter SHA1 Hash Tusipasi CEP maua i luga.
5. Sefe le tusitusiga: ⌘Command + S
6. Fa'asolo le faila 'Saini ma CryptoPro.workflow' ma faʻamaonia le faʻapipiʻiina.
7. Tatou o i le System Mana'oga -> Fa'aopoopoga -> Saili ma siaki lena mea Saini ma CryptoPro fa'aalia le gaioiga vave.
8. I le Su'e, vala'au le lisi o fa'amatalaga o so'o se faila, ma i le vaega Faʻatinoga Faʻatino ma / poo auaunaga filifili aitema Saini ma CryptoPro
9. I le CryptoPro talanoaga o loʻo faʻaalia, faʻapipiʻi le faʻaoga PIN code mai le CEP
10. O se faila e iai le fa'aopoopoga *.sgn o le a fa'aalia i le lisi o lo'o i ai nei - o se saini tu'u'ese ile CMS fa'atasi ma DER encoding.

Screenshots

Apple Automator faamalama:

Faiga Fa'atonu:

Su'e anotusi lisi:

Siaki le saini i luga o le pepa

Afai o mea o loʻo i totonu o le pepa e le o iai ni mealilo ma mea lilo, o le auala pito sili ona faigofie o le faʻaogaina lea o le upega tafaʻilagi i luga o le State Services portal - https://www.gosuslugi.ru/pgu/eds. O le auala lea e mafai ai ona e ave se faʻamalama mai se punaoa taʻutaʻua ma ia mautinoa o loʻo lelei mea uma i le saini.

Screenshots

puna: www.habr.com