How to Configure GosPlugin in Yandex Browser on Debian 12

For the “Gosplugin” extension to work correctly in Yandex Browser on Debian 12, not only the installation of the extension itself is required, but also additional configuration of the cryptographic provider and browser extensions. The infinite installation loop problem usually occurs due to software version mismatches, incorrect access permissions, or missing cryptographic system components.

Table of Contents

• Necessary Components for Plugin Operation
• Step-by-Step Plugin Installation on Debian 12
• Yandex Browser Configuration
• Solving the Infinite Installation Loop Problem
• Functionality Verification
• Common Problems and Their Solutions

Necessary Components for Plugin Operation

For full functionality with electronic signatures on the Gosuslugi portal in Yandex Browser under Debian 12, installation and configuration of several components are required:

1. CryptoPro CSP - cryptographic provider for working with electronic signatures
2. CryptoPro ECP Browser Plugin - system plugin for browsers
3. “Gosplugin” Extension - extension for Yandex Browser from Chrome Web Store
4. Token Drivers - if using a hardware certificate storage device

It should be noted that according to the Astra Linux documentation, IFCP is an extension for web browsers developed by Rostelecom, designed to work with the state services portal.

Step-by-Step Plugin Installation on Debian 12

1. Installing CryptoPro CSP

First, you need to install the CryptoPro CSP cryptographic provider:

# Download the installer from the official website
wget https://download.cryptopro.ru/csp/4.0.0/csp_4.0.0-15657_amd64.deb

# Install the package
sudo dpkg -i csp_4.0.0-15657_amd64.deb

# If there are dependencies, install them
sudo apt-get install -f

2. Installing CryptoPro ECP Browser Plugin

Next, install the system plugin:

# Download the plugin
wget https://download.cryptopro.ru/csp/4.0.0/cryptopro-capslm_4.0.0-15657_amd64.deb

# Install it
sudo dpkg -i cryptopro-capslm_4.0.0-15657_amd64.deb

3. Configuring Libraries

Correct operation requires symbolic links:

# Create necessary links
sudo ln -s /usr/lib/x86_64-linux-gnu/libcapicomm.so.4.0 /usr/lib/x86_64-linux-gnu/libcapicomm.so.3
sudo ln -s /usr/lib/x86_64-linux-gnu/libcapicom.so.4.0 /usr/lib/x86_64-linux-gnu/libcapicom.so.3

Yandex Browser Configuration

1. Installing the “Gosplugin” Extension

1. Open Yandex Browser
2. Go to the Chrome Web Store
3. Find the “Gosplugin” extension
4. Install the extension

2. Enable the extension in the browser

Verify that the extension is enabled:

• Open the extensions page (yandexbrowser://extensions/)
• Find the “Gosplugin” extension
• Make sure it’s enabled

3. Plugin settings

As specified in the Kontur instructions, you need to ensure that the IFCPlugin Extension is enabled (status “Disable”).

Solving the Infinite Installation Loop Problem

The infinite installation loop problem occurs due to inconsistency between the system plugin and the browser extension. Here’s how to fix it:

1. Version checking

Ensure that all component versions match:

# Check CryptoPro version
/opt/cprocsp/sbin/cpconfig -version

# Check plugin path
ls -la /usr/lib/x86_64-linux-gnu/libcapicomm.so*

2. Correcting access permissions

Give proper permissions to system files:

# Permissions for libraries
sudo chmod 755 /usr/lib/x86_64-linux-gnu/libcapicomm.so*
sudo chmod 755 /usr/lib/x86_64-linux-gnu/libcapicom.so*

3. Plugin update

Sometimes reinstalling the plugin with correct permissions helps:

# Complete reinstall
sudo dpkg -P --force-all cryptopro-capslm
sudo dpkg -i cryptopro-capslm_4.0.0-15657_amd64.deb

4. Environment variables configuration

Add to the end of the ~/.bashrc file:

export LD_PRELOAD=/usr/lib/x86_64-linux-gnu/libcapicomm.so.4.0
export LD_LIBRARY_PATH=/usr/lib/x86_64-linux-gnu:$LD_LIBRARY_PATH

And apply the changes:

source ~/.bashrc

Functionality Verification

After installation and configuration, perform the following checks:

1. Plugin verification in browser:

   • Open yandexbrowser://components/
   • Find CryptoPro ECP Browser Plugin
   • Ensure the version is current and status is “Loaded”

2. Testing on Gosuslugi website:

   • Go to the Gosuslugi portal
   • Try to log in via ECP
   • A certificate selection should appear

3. Verification via command-line utilities:

# Check CryptoPro operation
/opt/cprocsp/bin/cpconfig -license

# Check token availability
/opt/cprocsp/bin/csptest -keyset -enumcont -verifyc

Common Problems and Their Solutions

Problem: Extension doesn’t see installed plugin

Solution: This is the most common problem, described in user reviews. Check:

1. Plugin and extension version compatibility
2. Correctness of symbolic links
3. Presence of required libraries in system paths

Problem: Infinite installation loop

Solution: As specified in this source, try:

1. Complete reinstall of all components
2. Browser cache clearing
3. System reboot after installation

Problem: “Certificates not found” error

Solution: This may be related to:

1. Missing drivers for specific token
2. Incorrect CryptoPro configuration
3. Corrupted certificates

Check token operation via CryptoPro utilities:

# Check tokens
/opt/cprocsp/bin/csptest -keyset -enumcont -verifyc

Problem: Compatibility with Debian 12

Solution: Debian 12 (Bookworm) may require additional packages for operation:

# Install required dependencies
sudo apt-get install libssl1.1 libgconf-2-4 libnss3 libxss1 libasound2

Sources

1. Gosuslugi Plugin for Yandex Browser: Installation and Configuration
2. Gosuslugi Plugin Not Working in Yandex Browser
3. Installation of Gosuslugi and CryptoPro Plugins in Chromium, Yandex Browser, Firefox
4. Google Chrome No Longer Supports CryptoPro and Gosuslugi Plugins
5. Instructions for Configuring Plugin and Browser for Electronic Signature Operation
6. Web Browser Extensions for Gosuslugi Login
7. CryptoPro Plugins Not Installing, Extension for Gosuslugi Plugin

Conclusion

For the “Gosplugin” extension to work correctly in Yandex Browser on Debian 12, you need to:

1. Sequential component installation: CryptoPro CSP → CryptoPro ECP Browser Plugin → “Gosplugin” Extension
2. Version checking: Ensure all components have compatible versions
3. Correct permission configuration: Give proper permissions to system files and libraries
4. Testing after each installation: Verify functionality before proceeding to the next step

If the infinite installation loop problem persists, try completely removing all components and reinstalling in a clean system. In complex cases, contact CryptoPro or Rostelecom technical support for the latest component versions for your operating system.