diff --git a/.SRCINFO b/.SRCINFO
index 5459439..2d6abfb 100644
--- a/.SRCINFO
+++ b/.SRCINFO
@@ -1,6 +1,6 @@
 pkgbase = cryptopro-csp-k1
 	pkgdesc = CryptoPro CSP 5.0
-	pkgver = stable
+	pkgver = latest
 	pkgrel = 1
 	url = https://cryptopro.ru/products/cryptopro-csp
 	install = cryptopro-csp-k1.install
diff --git a/PKGBUILD b/PKGBUILD
index 42e6284..431c67c 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -12,7 +12,7 @@
 #
 # https://cryptopro.ru/sites/default/files/private/csp/50/13000/linux-amd64.tgz
 #
-# Данный PKGBUILD старается следовать последней не-сертифицированной версии CSP (не RC).
+# Данный PKGBUILD старается следовать последней версии CSP
 #
 # En
 # ==
@@ -22,10 +22,10 @@
 #
 # https://cryptopro.ru/sites/default/files/private/csp/50/13000/linux-amd64.tgz
 #
-# This PKGBUILD tracks the latest not-certified version of CSP (not RC).
+# This PKGBUILD tracks the latest version of CSP
 
 pkgname="cryptopro-csp-k1"
-pkgver=stable
+pkgver=latest
 _pkgver=5.0.13000
 pkgrel=1
 pkgdesc='CryptoPro CSP 5.0'
@@ -48,7 +48,7 @@ depends=(
     'acsccid'
 )
 makedepends=('libarchive')
-source=('linux-amd64.tgz'::local://linux-amd64.tgz) # download from https://cryptopro.ru/sites/default/files/private/csp/50/13000/linux-amd64.tgz
+source=('linux-amd64.tgz'::"local://linux-amd64.tgz") # download from https://cryptopro.ru/sites/default/files/private/csp/50/13000/linux-amd64.tgz
 sha256sums=('SKIP')
 options=(!strip)
 
@@ -60,29 +60,54 @@ pkgver() {
 
 package() {
     cd "${srcdir}/linux-amd64"
-    find . -name "lsb-cprocsp-base-*.*.rpm" -exec bsdtar -xf {} -C "${pkgdir}" \;
-    find . -name "lsb-cprocsp-base-*.*.rpm" -exec bsdtar -xf {} -C "${pkgdir}" \;
-    find . -name "lsb-cprocsp-rdr-64-*.*.rpm" -exec bsdtar -xf {} -C "${pkgdir}" \;
-    find . -name "lsb-cprocsp-kc1-64-*.*.rpm" -exec bsdtar -xf {} -C "${pkgdir}" \;
-    find . -name "lsb-cprocsp-capilite-64-*.*.rpm" -exec bsdtar -xf {} -C "${pkgdir}" \;
-    find . -name "lsb-cprocsp-ca-certs-*.*.rpm" -exec bsdtar -xf {} -C "${pkgdir}" \;
-    find . -name "lsb-cprocsp-pkcs11-64-*.*.rpm" -exec bsdtar -xf {} -C "${pkgdir}" \;
-    find . -name "cprocsp-rdr-gui-gtk-64-*.*.rpm" -exec bsdtar -xf {} -C "${pkgdir}" \;
-    find . -name "cprocsp-rdr-pcsc-64-*.*.rpm" -exec bsdtar -xf {} -C "${pkgdir}" \;
-    find . -name "cprocsp-rdr-jacarta-64-*.*.rpm" -exec bsdtar -xf {} -C "${pkgdir}" \;
-    find . -name "cprocsp-rdr-rutoken-64-*.*.rpm" -exec bsdtar -xf {} -C "${pkgdir}" \;
-    find . -name "cprocsp-cptools-gtk-64-*.*.rpm" -exec bsdtar -xf {} -C "${pkgdir}" \;
-    find . -name "cprocsp-rdr-cloud-64-*.*.rpm" -exec bsdtar -xf {} -C "${pkgdir}" \;
-    find . -name "lsb-cprocsp-devel-*.*.rpm" -exec bsdtar -xf {} -C "${pkgdir}" \;
-    find . -name "cprocsp-curl-64-*.*.rpm" -exec bsdtar -xf {} -C "${pkgdir}" \;
-    
-    # browser plugin
-    find . -name "cprocsp-pki-cades-64-*-1.*.rpm" -exec bsdtar -xf {} -C "${pkgdir}" \;
-    find . -name "cprocsp-pki-plugin-64-*-1.*.rpm" -exec bsdtar -xf {} -C "${pkgdir}" \;
+    FILES_INSTALL_TAMPLATE="
+	lsb-cprocsp-base-*-*.*.rpm
+	lsb-cprocsp-rdr-64-*-*.*.rpm
+	lsb-cprocsp-kc1-64-*-*.*.rpm
+	lsb-cprocsp-capilite-64-*-*.*.rpm
+	cprocsp-curl-64-*-*.*.rpm
+	lsb-cprocsp-ca-certs-*-*.*.rpm
+	cprocsp-rdr-gui-gtk-64-*-*.*.rpm
+	cprocsp-cptools-gtk-64-*-*.*.rpm
+	cprocsp-rdr-pcsc-64-*-*.*.rpm
+	cprocsp-rdr-emv-64-*-*.*.rpm
+	cprocsp-rdr-inpaspot-64-*-*.*.rpm
+	cprocsp-rdr-kst-64-*-*.*.rpm
+	cprocsp-rdr-mskey-64-*-*.*.rpm
+	cprocsp-rdr-novacard-64-*-*.*.rpm
+	cprocsp-rdr-edoc-64-*-*.*.rpm
+	cprocsp-rdr-rutoken-64-*-*.*.rpm
+	cprocsp-rdr-jacarta-64-*-*.*.rpm
+	cprocsp-rdr-cloud-64-*-*.*.rpm
+	cprocsp-rdr-cpfkc-64-*-*.*.rpm
+	cprocsp-rdr-infocrypt-64-*-*.*.rpm
+	cprocsp-rdr-rosan-64-*-*.*.rpm
+	cprocsp-rdr-cryptoki-64-*-*.*.rpm
+	cprocsp-rdr-rustoken-64-*-*.*.rpm
+	cprocsp-pki-cades-64-*-*.*.rpm
+	cprocsp-pki-plugin-64-*-*.*.rpm 
+	lsb-cprocsp-pkcs11-64-*-*.*.rpm"
 
+    while IFS= read -r SELECT_FILE_INSTALL_TAMPLATE; do
+	while IFS= read -r SELECT_FILE_INSTALL; do
+	    bsdtar -xf "${SELECT_FILE_INSTALL}" -C "${pkgdir}"
+	    # Save scriptlets
+	    [[ ${SELECT_FILE_INSTALL} =~ (.*/)*(.*)-([^-][0-9.]*)+-([0-9]*)+\.([^.]*)+.([a-z]*)+ ]] && SELECT_FILE_SHORTNAME=${BASH_REMATCH[2]}
+	    PATH_SCRIPTLETS="${pkgdir}/var/opt/${pkgname}/scriptlets-${SELECT_FILE_SHORTNAME}"
+	    install -dm755 "${PATH_SCRIPTLETS}"
+	    rpm -qp --scripts "${SELECT_FILE_INSTALL}" 2> /dev/null | sed -E -e '1,/^preinstall scriptlet.*:$/d' -e '/ scriptlet .*:$| program:/,$d' > "${PATH_SCRIPTLETS}/preinstall"
+	    [[ -s ${PATH_SCRIPTLETS}/preinstall ]] || rm -f ${PATH_SCRIPTLETS}/preinstall
+	    rpm -qp --scripts "${SELECT_FILE_INSTALL}" 2> /dev/null | sed -E -e '1,/^postinstall scriptlet.*:$/d' -e '/ scriptlet .*:$| program:/,$d' > "${PATH_SCRIPTLETS}/postinstall"
+	    [[ -s ${PATH_SCRIPTLETS}/postinstall ]] || rm -f ${PATH_SCRIPTLETS}/postinstall
+	    rpm -qp --scripts "${SELECT_FILE_INSTALL}" 2> /dev/null | sed -E -e '1,/^preuninstall scriptlet.*:$/d' -e '/ scriptlet .*:$| program:/,$d' > "${PATH_SCRIPTLETS}/preuninstall"
+	    [[ -s ${PATH_SCRIPTLETS}/preuninstall ]] || rm -f ${PATH_SCRIPTLETS}/preuninstall
+	    rpm -qp --scripts "${SELECT_FILE_INSTALL}" 2> /dev/null | sed -E -e '1,/^postuninstall scriptlet.*:$/d' -e '/ scriptlet .*:$| program:/,$d' > "${PATH_SCRIPTLETS}/postuninstall"
+	    [[ -s ${PATH_SCRIPTLETS}/postuninstall ]] || rm -f ${PATH_SCRIPTLETS}/postuninstall
+	    chmod -R +x "${PATH_SCRIPTLETS}"
+	done < <(find . -name "${SELECT_FILE_INSTALL_TAMPLATE}")
+    done < <(sed "s/[[:blank:]]//g; /^[[:space:]]*$/d" <<< ${FILES_INSTALL_TAMPLATE})
     cp -af "${pkgdir}"/usr/lib64/* "${pkgdir}"/usr/lib
     rm -rdf "${pkgdir}"/usr/lib64
-
     mkdir -p "${pkgdir}/etc/ld.so.conf.d/"
     echo "/opt/cprocsp/lib/amd64" > "${pkgdir}/etc/ld.so.conf.d/cryptopro-csp-k1.conf"
 }
diff --git a/cryptopro-csp-k1.install b/cryptopro-csp-k1.install
index b53735b..5fbe47e 100644
--- a/cryptopro-csp-k1.install
+++ b/cryptopro-csp-k1.install
@@ -1,569 +1,74 @@
-post_install() {
-    /sbin/ldconfig
-    PATH=$PATH:/opt/cprocsp/sbin/amd64
-
-    # lsb-cprocsp-rdr-64
-    cpconfig -ini '\config\apppath' -add string libcapi10.so /opt/cprocsp/lib/amd64/libcapi10.so
-    cpconfig -ini '\config\apppath' -add string librdrfat12.so /opt/cprocsp/lib/amd64/librdrfat12.so
-    cpconfig -ini '\config\apppath' -add string librdrdsrf.so /opt/cprocsp/lib/amd64/librdrdsrf.so
-    cpconfig -ini '\config\apppath' -add string libcpui.so /opt/cprocsp/lib/amd64/libcpui.so
-    cpconfig -ini '\config\apppath' -add string libcurl.so /usr/lib/libcurl.so
-    cpconfig -ini '\config\apppath' -add string mount_flash.sh /opt/cprocsp/sbin/amd64/mount_flash.sh
-    cpconfig -ini '\config\KeyDevices\FLASH' -add string DLL librdrfat12.so
-    cpconfig -ini '\config\KeyDevices\FLASH' -add string Script mount_flash.sh
-    cpconfig -ini '\config\KeyDevices\FLASH' -add long Group 1
-    cpconfig -ini '\config\KeyDevices\FLASH\PNP FLASH\Default' -add string Name 'All FLASH readers'
-    cpconfig -ini '\config\KeyDevices\FLASH\PNP FLASH\Default\Name' -delparam
-    #TODO: пока cpconfig не умеет регистрировать считыватель, если он групповой. команда снизу не работает, хотя должна.
-    #cpconfig -hardware reader -add  FLASH -name FLASH
-    cpconfig -hardware rndm -add CPSD -name 'CPSD RNG' -level 3 > /dev/null
-    cpconfig -ini '\config\Random\CPSD\Default' -add string '/db1/kis_1' /var/opt/cprocsp/dsrf/db1/kis_1
-    cpconfig -ini '\config\Random\CPSD\Default' -add string '/db2/kis_1' /var/opt/cprocsp/dsrf/db2/kis_1
-    cpconfig -license -view > /dev/null 2> /dev/null
-    test $? = 0 || cpconfig -license -set 50500-10037-ELQF5-H28KM-8E6BA
-
-    # lsb-cprocsp-kc1-64
-    cpconfig -ini '\config\apppath' -add string librdrrndmbio_tui.so /opt/cprocsp/lib/amd64/librdrrndmbio_tui.so
-    cpconfig -ini '\config\apppath' -add string libcsp.so /opt/cprocsp/lib/amd64/libcsp.so
-    cpconfig -ini '\config\Random\Bio_tui' -add string DLL librdrrndmbio_tui.so
-    cpconfig -hardware reader -add hdimage -name 'HDD key storage' > /dev/null
-    cpconfig -hardware rndm -add bio_tui -name 'Text bio random' -level 5 > /dev/null
-
-    cpconfig -defprov -setdef -provtype 75 -provname 'Crypto-Pro GOST R 34.10-2001 KC1 CSP'
-    cpconfig -ini '\cryptography\Defaults\Provider\Crypto-Pro GOST R 34.10-2001 KC1 CSP' -add string 'Image Path' /opt/cprocsp/lib/amd64/libcsp.so
-    cpconfig -ini '\cryptography\Defaults\Provider\Crypto-Pro GOST R 34.10-2001 KC1 CSP' -add string 'Function Table Name' CPCSP_GetFunctionTable
-    cpconfig -ini '\cryptography\Defaults\Provider\Crypto-Pro GOST R 34.10-2001 KC1 CSP' -add long Type 75
-
-    cpconfig -ini '\cryptography\Defaults\Provider\Crypto-Pro GOST R 34.10-2001 Cryptographic Service Provider' -add string 'Image Path' /opt/cprocsp/lib/amd64/libcsp.so
-    cpconfig -ini '\cryptography\Defaults\Provider\Crypto-Pro GOST R 34.10-2001 Cryptographic Service Provider' -add string 'Function Table Name' CPCSP_GetFunctionTable
-    cpconfig -ini '\cryptography\Defaults\Provider\Crypto-Pro GOST R 34.10-2001 Cryptographic Service Provider' -add long Type 75
-
-    cpconfig -defprov -setdef -provtype 80 -provname 'Crypto-Pro GOST R 34.10-2012 KC1 CSP'
-    cpconfig -ini '\cryptography\Defaults\Provider\Crypto-Pro GOST R 34.10-2012 KC1 CSP' -add string 'Image Path' /opt/cprocsp/lib/amd64/libcsp.so
-    cpconfig -ini '\cryptography\Defaults\Provider\Crypto-Pro GOST R 34.10-2012 KC1 CSP' -add string 'Function Table Name' CPCSP_GetFunctionTable
-    cpconfig -ini '\cryptography\Defaults\Provider\Crypto-Pro GOST R 34.10-2012 KC1 CSP' -add long Type 80
-
-    cpconfig -ini '\cryptography\Defaults\Provider\Crypto-Pro GOST R 34.10-2012 Cryptographic Service Provider' -add string 'Image Path' /opt/cprocsp/lib/amd64/libcsp.so
-    cpconfig -ini '\cryptography\Defaults\Provider\Crypto-Pro GOST R 34.10-2012 Cryptographic Service Provider' -add string 'Function Table Name' CPCSP_GetFunctionTable
-    cpconfig -ini '\cryptography\Defaults\Provider\Crypto-Pro GOST R 34.10-2012 Cryptographic Service Provider' -add long Type 80
-
-    cpconfig -defprov -setdef -provtype 81 -provname 'Crypto-Pro GOST R 34.10-2012 KC1 Strong CSP'
-    cpconfig -ini '\cryptography\Defaults\Provider\Crypto-Pro GOST R 34.10-2012 KC1 Strong CSP' -add string 'Image Path' /opt/cprocsp/lib/amd64/libcsp.so
-    cpconfig -ini '\cryptography\Defaults\Provider\Crypto-Pro GOST R 34.10-2012 KC1 Strong CSP' -add string 'Function Table Name' CPCSP_GetFunctionTable
-    cpconfig -ini '\cryptography\Defaults\Provider\Crypto-Pro GOST R 34.10-2012 KC1 Strong CSP' -add long Type 81
-
-    cpconfig -ini '\cryptography\Defaults\Provider\Crypto-Pro GOST R 34.10-2012 Strong Cryptographic Service Provider' -add string 'Image Path' /opt/cprocsp/lib/amd64/libcsp.so
-    cpconfig -ini '\cryptography\Defaults\Provider\Crypto-Pro GOST R 34.10-2012 Strong Cryptographic Service Provider' -add string 'Function Table Name' CPCSP_GetFunctionTable
-    cpconfig -ini '\cryptography\Defaults\Provider\Crypto-Pro GOST R 34.10-2012 Strong Cryptographic Service Provider' -add long Type 81
-
-    cpconfig -defprov -setdef -provtype 1 -provname 'Crypto-Pro RSA Cryptographic Service Provider'
-    cpconfig -ini '\cryptography\Defaults\Provider\Crypto-Pro RSA Cryptographic Service Provider' -add string 'Image Path' /opt/cprocsp/lib/amd64/libcsp.so
-    cpconfig -ini '\cryptography\Defaults\Provider\Crypto-Pro RSA Cryptographic Service Provider' -add string 'Function Table Name' CPCSP_GetFunctionTable
-    cpconfig -ini '\cryptography\Defaults\Provider\Crypto-Pro RSA Cryptographic Service Provider' -add long Type 1
-    cpconfig -ini '\config\parameters\Crypto-Pro RSA Cryptographic Service Provider' -add long KeyTimeValidityControlMode 128
-
-    cpconfig -defprov -setdef -provtype 16 -provname 'Crypto-Pro ECDSA and AES KC1 CSP'
-    cpconfig -ini '\cryptography\Defaults\Provider\Crypto-Pro ECDSA and AES KC1 CSP' -add string 'Image Path' /opt/cprocsp/lib/amd64/libcsp.so
-    cpconfig -ini '\cryptography\Defaults\Provider\Crypto-Pro ECDSA and AES KC1 CSP' -add string 'Function Table Name' CPCSP_GetFunctionTable
-    cpconfig -ini '\cryptography\Defaults\Provider\Crypto-Pro ECDSA and AES KC1 CSP' -add long Type 16
-    cpconfig -ini '\config\parameters\Crypto-Pro ECDSA and AES KC1 CSP' -add long KeyTimeValidityControlMode 128
-
-    cpconfig -ini '\cryptography\Defaults\Provider\Crypto-Pro ECDSA and AES CSP' -add string 'Image Path' /opt/cprocsp/lib/amd64/libcsp.so
-    cpconfig -ini '\cryptography\Defaults\Provider\Crypto-Pro ECDSA and AES CSP' -add string 'Function Table Name' CPCSP_GetFunctionTable
-    cpconfig -ini '\cryptography\Defaults\Provider\Crypto-Pro ECDSA and AES CSP' -add long Type 16
-    cpconfig -ini '\config\parameters\Crypto-Pro ECDSA and AES CSP' -add long KeyTimeValidityControlMode 128
-
-    cpconfig -defprov -setdef -provtype 24 -provname 'Crypto-Pro Enhanced RSA and AES KC1 CSP'
-    cpconfig -ini '\cryptography\Defaults\Provider\Crypto-Pro Enhanced RSA and AES KC1 CSP' -add string 'Image Path' /opt/cprocsp/lib/amd64/libcsp.so
-    cpconfig -ini '\cryptography\Defaults\Provider\Crypto-Pro Enhanced RSA and AES KC1 CSP' -add string 'Function Table Name' CPCSP_GetFunctionTable
-    cpconfig -ini '\cryptography\Defaults\Provider\Crypto-Pro Enhanced RSA and AES KC1 CSP' -add long Type 24
-    cpconfig -ini '\config\parameters\Crypto-Pro Enhanced RSA and AES KC1 CSP' -add long KeyTimeValidityControlMode 128 
-
-    cpconfig -ini '\cryptography\Defaults\Provider\Crypto-Pro Enhanced RSA and AES CSP' -add string 'Image Path' /opt/cprocsp/lib/amd64/libcsp.so
-    cpconfig -ini '\cryptography\Defaults\Provider\Crypto-Pro Enhanced RSA and AES CSP' -add string 'Function Table Name' CPCSP_GetFunctionTable
-    cpconfig -ini '\cryptography\Defaults\Provider\Crypto-Pro Enhanced RSA and AES CSP' -add long Type 24
-    cpconfig -ini '\config\parameters\Crypto-Pro Enhanced RSA and AES CSP' -add long KeyTimeValidityControlMode 128
-
-    cpconfig -defprov -setdef -provtype 32 -provname 'Crypto-Pro Curve25519 and AES KC1 CSP'
-    cpconfig -ini '\cryptography\Defaults\Provider\Crypto-Pro Curve25519 and AES KC1 CSP' -add string 'Image Path' /opt/cprocsp/lib/amd64/libcsp.so
-    cpconfig -ini '\cryptography\Defaults\Provider\Crypto-Pro Curve25519 and AES KC1 CSP' -add string 'Function Table Name' CPCSP_GetFunctionTable
-    cpconfig -ini '\cryptography\Defaults\Provider\Crypto-Pro Curve25519 and AES KC1 CSP' -add long Type 32
-    cpconfig -ini '\config\parameters\Crypto-Pro Curve25519 and AES KC1 CSP' -add long KeyTimeValidityControlMode 128 
-
-    cpconfig -ini '\cryptography\Defaults\Provider\Crypto-Pro Curve25519 and AES CSP' -add string 'Image Path' /opt/cprocsp/lib/amd64/libcsp.so
-    cpconfig -ini '\cryptography\Defaults\Provider\Crypto-Pro Curve25519 and AES CSP' -add string 'Function Table Name' CPCSP_GetFunctionTable
-    cpconfig -ini '\cryptography\Defaults\Provider\Crypto-Pro Curve25519 and AES CSP' -add long Type 32
-    cpconfig -ini '\config\parameters\Crypto-Pro Curve25519 and AES CSP' -add long KeyTimeValidityControlMode 128 
-
-    cpconfig -ini '\cryptography\Defaults\Provider Types\Type 075' -add string 'TypeName' "GOST R 34.10-2001 Signature with Diffie-Hellman Key Exchange"
-    cpconfig -ini '\cryptography\Defaults\Provider Types\Type 080' -add string 'TypeName' "GOST R 34.10-2012 (256) Signature with Diffie-Hellman Key Exchange"
-    cpconfig -ini '\cryptography\Defaults\Provider Types\Type 081' -add string 'TypeName' "GOST R 34.10-2012 (512) Signature with Diffie-Hellman Key Exchange"
-    cpconfig -ini '\cryptography\Defaults\Provider Types\Type 001' -add string 'TypeName' "RSA Full (Signature and Key Exchange)"
-    cpconfig -ini '\cryptography\Defaults\Provider Types\Type 016' -add string 'TypeName' "ECDSA Full and AES"
-    cpconfig -ini '\cryptography\Defaults\Provider Types\Type 024' -add string 'TypeName' "RSA Full and AES"
-    cpconfig -ini '\cryptography\Defaults\Provider Types\Type 032' -add string 'TypeName' "Curve25519 Full and AES"
-
-    # lsb-cprocsp-capilite-64
-    cpconfig -ini '\config\apppath' -add string libssp.so /opt/cprocsp/lib/amd64/libssp.so
-    cpconfig -ini '\config\apppath' -add string libcapi20.so /opt/cprocsp/lib/amd64/libcapi20.so
-    # create several local machine stores if they don't exist
-    /opt/cprocsp/bin/amd64/certmgr -list -crl -store mMy > /dev/null 2>&1
-    /opt/cprocsp/bin/amd64/certmgr -list -crl -store mCryptoProTrustedStore > /dev/null 2>&1
-    /opt/cprocsp/bin/amd64/csptest -keyset -verifycontext > /dev/null 2>&1
-    if test $? -eq 0; then
-        # create several local machine stores if they don't exist
-        /opt/cprocsp/bin/amd64/certmgr -list -crl -store mMy > /dev/null 2>&1
-        /opt/cprocsp/bin/amd64/certmgr -list -crl -store mCryptoProTrustedStore > /dev/null 2>&1
-
-        # update all stores to Windows-compatible format. we don't want to silence
-        # stderr because user should be notified about errors
-        find '/var/opt/cprocsp/users/' -name '*.sto' -type f \
-            -exec /opt/cprocsp/bin/amd64/certmgr -updatestore -crl -file {} \; > /dev/null
-        find '/var/opt/cprocsp/users/' -name '*.sto' -type f \
-            -exec /opt/cprocsp/bin/amd64/certmgr -updatestore -cert -file {} \; > /dev/null
-    else
-        printf "Warning: functioning provider is required.\n"
-        printf "Will not configure/upgrade certificate stores.\n"
-        printf "Setup CryptoPro CSP and reinstall.\n"
-    fi
-
-    # lsb-cprocsp-ca-certs
-    /opt/cprocsp/bin/amd64/csptest -keyset -verifycontext > /dev/null 2>&1
-    if test $? -eq 0; then
-        ls -d /var/opt/cprocsp/tmpcerts/root/* \
-            | xargs -n 1 /opt/cprocsp/bin/amd64/certmgr -install -store mroot -file 1>/dev/null \
-            || printf "Failed to install root certificates!\n"
-        ls -d /var/opt/cprocsp/tmpcerts/ca/* \
-            | xargs -n 1 /opt/cprocsp/bin/amd64/certmgr -install -store mca -file 1>/dev/null \
-            || printf "Failed to install intermediate certificates!\n"
-    else
-        printf "Warning: functioning provider is required.\n"
-        printf "Will not configure/upgrade certificate stores.\n"
-        printf "Setup CryptoPro CSP and reinstall.\n"
-    fi
-
-    # lsb-cprocsp-pkcs11-64
-    cpconfig -ini '\config\apppath' -add string libcppkcs11.so /opt/cprocsp/lib/amd64/libcppkcs11.so
-    cpconfig -ini '\config\PKCS11' -enum section 2>/dev/null | grep -q '^slot0$'
-    if [ "$?" -eq "1" ]; then
-        cpconfig -ini '\config\PKCS11\slot0' -add string "ProvGOST" ""
-        cpconfig -ini '\config\PKCS11\slot0' -add string "Firefox" ""
-        cpconfig -ini '\config\PKCS11\slot0' -add string "reader" ""
-    fi
-
-    # cprocsp-rdr-gui-gtk-64
-    cpconfig -ini '\config\apppath' -add string librdrrndmbio_gui_fgtk.so /opt/cprocsp/lib/amd64/librdrrndmbio_gui_fgtk.so
-    cpconfig -ini '\config\apppath' -add string libxcpui.so /opt/cprocsp/lib/amd64/libfgcpui.so
-    cpconfig -ini '\config\apppath' -add string xcpui_app /opt/cprocsp/sbin/amd64/xcpui_app
-    cpconfig -ini '\config\Random\Bio_gui' -add string DLL librdrrndmbio_gui_fgtk.so
-    cpconfig -hardware rndm -add bio_gui -name 'rndm GUI gtk+2.0' -level 4 >/dev/null 2>/dev/null
-
-    # cprocsp-rdr-pcsc-64
-    cpconfig -ini '\config\parameters' -add long dynamic_readers 1
-    cpconfig -ini '\config\parameters' -add long dynamic_rdr_refresh_ms 1500
-
-    if test -z '#' ; then
-        cpconfig -ini '\config\apppath' -add string libpcsclite.so /System/Library/Frameworks/PCSC.framework/PCSC
-    else
-        check_libpcsclite_compatibility() {
-            command -v file > /dev/null 2>&1 || return 0
-            is64arch=0
-            is64arch=1
-            is64lib=0
-            if test -z '' ; then
-                file -L "${libpcsclite}" | grep '64-bit' > /dev/null 2>&1
-            else
-                file "${libpcsclite}" | grep '64-bit' > /dev/null 2>&1
-            fi
-            test "$?" -eq 0 && is64lib=1
-            test "${is64arch}" -eq "${is64lib}" && return 0
-            return 1
-        }
-        search_dirs=`echo /lib* /usr/lib* /usr/local/lib* /opt/CPcvpn-*/lib* /opt/sfw/lib* | xargs -n1 | grep -v '*' | xargs`
-        ld_cmd="ldconfig -p ; find ${search_dirs} -name \*libpcsclite\*"
-        #ld_cmd='ldconfig -r'
-        #ld_cmd="find ${search_dirs} -name \*libpcsclite\*"
-        libpcsclite_checked='manually_set_path_to_libpcsclite.so'
-        for libpcsclite in `eval "${ld_cmd}" | grep '/libpcsclite.*so' | awk '{print $NF}' | xargs` ; do
-            if check_libpcsclite_compatibility ; then
-                libpcsclite_checked="${libpcsclite}"
-                break
-            fi
-        done
-        cpconfig -ini '\config\apppath' -add string libpcsclite.so "${libpcsclite_checked}"
-    fi
-
-    cpconfig -ini '\config\apppath' -add string libpcsclite.so libpcsclite.so.1
-    cpconfig -ini '\config\apppath' -add string librdrpcsc.so /opt/cprocsp/lib/amd64/librdrpcsc.so
-    cpconfig -ini '\config\apppath' -add string librdrric.so /opt/cprocsp/lib/amd64/librdrric.so
-    cpconfig -ini '\config\KeyDevices\PCSC' -add string DLL librdrpcsc.so
-    cpconfig -ini '\config\KeyDevices\PCSC' -add long Group 1
-    cpconfig -ini '\config\KeyDevices\PCSC\PNP PCSC\Default' -add string Name 'All PC/SC readers'
-    cpconfig -ini '\config\KeyDevices\PCSC\PNP PCSC\Default\Name' -delparam
-    cpconfig -ini '\config\KeyCarriers\OSCAR' -add string DLL librdrric.so
-    cpconfig -ini '\config\KeyCarriers\OSCAR2' -add string DLL librdrric.so
-    cpconfig -ini '\config\KeyCarriers\TRUST' -add string DLL librdrric.so
-    cpconfig -ini '\config\KeyCarriers\TRUSTS' -add string DLL librdrric.so
-    cpconfig -ini '\config\KeyCarriers\TRUSTD' -add string DLL librdrric.so
-
-    cpconfig -hardware media -add oscar -name 'Oscar' > /dev/null
-    cpconfig -hardware media -configure oscar -add hex atr 0000000000000043525950544f5052
-    cpconfig -hardware media -configure oscar -add hex mask 00000000000000ffffffffffffffff
-    cpconfig -hardware media -configure oscar -add string folders 0B00
-    cpconfig -hardware media -add oscar2 -name 'Oscar CSP 2.0' > /dev/null
-    cpconfig -hardware media -configure oscar2 -add hex atr 000000000000004350435350010102
-    cpconfig -hardware media -configure oscar2 -add hex mask 00000000000000ffffffffffffffff
-    cpconfig -hardware media -configure oscar2 -add string folders 0B00
-    cpconfig -hardware media -configure oscar2 -add long size_1 60
-    cpconfig -hardware media -configure oscar2 -add long size_2 70
-    cpconfig -hardware media -configure oscar2 -add long size_4 60
-    cpconfig -hardware media -configure oscar2 -add long size_5 70
-    cpconfig -hardware media -configure oscar2 -add long size_6 62
-    cpconfig -hardware media -add oscar2 -connect KChannel -name 'Channel K' > /dev/null
-    cpconfig -hardware media -configure oscar2 -connect KChannel -add hex atr 000000000000004350435350010101
-    cpconfig -hardware media -configure oscar2 -connect KChannel -add hex mask 00000000000000ffffffffffffffff
-    cpconfig -hardware media -configure oscar2 -connect KChannel -add string folders 0B00
-    cpconfig -hardware media -configure oscar2 -connect KChannel -add long size_1 56
-    cpconfig -hardware media -configure oscar2 -connect KChannel -add long size_2 36
-    cpconfig -hardware media -configure oscar2 -connect KChannel -add long size_4 56
-    cpconfig -hardware media -configure oscar2 -connect KChannel -add long size_5 36
-    cpconfig -hardware media -configure oscar2 -connect KChannel -add long size_6 62
-
-    cpconfig -hardware media -add TRUST -name 'Foros (Magistra)' > /dev/null
-    cpconfig -hardware media -configure TRUST -add hex atr 3b9e00008031c0654d4700000072f7418107
-    cpconfig -hardware media -configure TRUST -add hex mask ffff0000ffffffffffff300000ffffffffff
-    cpconfig -hardware media -configure TRUST -add string folders "A\\B\\C\\D\\E\\F\\G\\H"
-
-    cpconfig -hardware media -add TRUSTS -name 'Foros SocCard' > /dev/null
-    cpconfig -hardware media -configure TRUSTS -add hex atr 3b9a00008031c0610072f7418107
-    cpconfig -hardware media -configure TRUSTS -add hex mask ffff0000ffffffff30ffffffffff
-    cpconfig -hardware media -configure TRUSTS -add string folders "A\\B\\C\\D"
-
-    cpconfig -hardware media -add TRUSTD -name 'Foros Debug' > /dev/null
-    cpconfig -hardware media -configure TRUSTD -add hex atr 3b9800008031c072f7418107
-    cpconfig -hardware media -configure TRUSTD -add hex mask ffff0000ffffffffffffffff
-    cpconfig -hardware media -configure TRUSTD -add string folders "A\\B\\C\\D\\E\\F\\G\\H"
-
-    not_solaris=1
-    if test ! -z "$not_solaris"; then
-        search_dirs=''
-        for d in `echo /usr/lib*/pcsc /usr/local/lib*/pcsc /usr/libexec/SmartCardServices/*`; do
-            if echo $d|grep -v '*'; then
-                search_dirs="$d $search_dirs";
-            fi;
-        done
-        if test ! -z "$search_dirs"; then
-            folder=`find -L $search_dirs -name "*ccid.bundle"`
-            if test ! -z "$folder"; then
-                pList_files=`find -L $folder -name "Info.plist"`
-                if test ! -z "$pList_files"; then
-                    for pList in $pList_files; do
-                        ccid_reg.sh -add $pList 0x072F 0x90CC "ACS ACR 38U-CCID - CP"
-                        ccid_reg.sh -add $pList 0x072F 0x1204 "ACS ACR101 ICC Reader - CP"
-                        ccid_reg.sh -add $pList 0x072F 0x8201 "ACS APG8201 PINhandy 1 - CP"
-                        ccid_reg.sh -add $pList 0x072F 0x8202 "ACS APG8201 USB Reader - CP"
-                        ccid_reg.sh -add $pList 0x072F 0x90DB "ACS CryptoMate64 - CP"
-                        ccid_reg.sh -add $pList 0x0483 0xACD1 "Ancud Crypton SCR/RNG - CP"
-                        ccid_reg.sh -add $pList 0x0A89 0x0025 "Aktiv Rutoken lite - CP"
-                        ccid_reg.sh -add $pList 0x0A89 0x0030 "Aktiv Rutoken ECP - CP"
-                        ccid_reg.sh -add $pList 0x0A89 0x0080 "Aktiv PINPad Ex - CP"
-                        ccid_reg.sh -add $pList 0x0A89 0x0081 "Aktiv PINPad In - CP"
-                        ccid_reg.sh -add $pList 0x0A89 0x0060 "Aktiv Co., ProgramPark Rutoken Magistra - CP"
-                        ccid_reg.sh -add $pList 0x072f 0x90de "ACS Token - CP"
-                        ccid_reg.sh -add $pList 0x24dc 0x0102 "ARDS ZAO JaCarta LT - CP"
-                        ccid_reg.sh -add $pList 0x2fb0 0x0002 "Infocrypt Token++ - CP"
-                        ccid_reg.sh -add $pList 0x2fb0 0x0004 "Infocrypt Token++ - CP"
-                        ccid_reg.sh -add $pList 0x2fb0 0x0006 "Infocrypt Token++ lite - CP"
-                        ccid_reg.sh -add $pList 0x2fb0 0x0008 "Infocrypt Token++ lite - CP"
-                        ccid_reg.sh -add $pList 0x2fb0 0x003a "Infocrypt Token++ - CP"
-                        ccid_reg.sh -add $pList 0x2022 0x078a "Infocrypt HWDSSL DEVICE - CP"
-                        ccid_reg.sh -add $pList 0x2022 0x016c "Infocrypt HWDSSL DEVICE - CP"
-                        ccid_reg.sh -add $pList 0x2022 0x0172 "Infocrypt HWDSSL DEVICE - CP"
-                        ccid_reg.sh -add $pList 0x2022 0x0226 "Infocrypt HWDSSL DEVICE - CP"
-                        ccid_reg.sh -add $pList 0x2fb0 0x078a "Infocrypt HWDSSL DEVICE - CP"
-                        ccid_reg.sh -add $pList 0x2fb0 0x016c "Infocrypt HWDSSL DEVICE - CP"
-                        ccid_reg.sh -add $pList 0x2fb0 0x0172 "Infocrypt HWDSSL DEVICE - CP"
-                        ccid_reg.sh -add $pList 0x2fb0 0x0226 "Infocrypt HWDSSL DEVICE - CP"
-                        ccid_reg.sh -add $pList 0x2a0c 0x0001 "MultiSoft ltd. SCR2 - CP"
-                        ccid_reg.sh -add $pList 0x2a0c 0x0002 "SKZI ANGARA - CP"
-                        ccid_reg.sh -add $pList 0x23a0 0x0008 "BIFIT ANGARA - CP"
-                        ccid_reg.sh -add $pList 0x1fc9 0x7479 "ISBC ESMART reader - CP"
-                        ccid_reg.sh -add $pList 0x2ce4 0x7479 "ESMART Token - CP"
-                        ccid_reg.sh -add $pList 0x24DC 0x0101 "Aladdin R.D. JaCarta"
-                        ccid_reg.sh -add $pList 0x24DC 0x0402 "Aladdin R.D. JaCarta"
-                        ccid_reg.sh -add $pList 0x24DC 0x0406 "Aladdin JaCarta SF GOST"
-                        ccid_reg.sh -add $pList 0x24DC 0x0409 "Aladdin JaCarta-2 SF"
-                        ccid_reg.sh -add $pList 0x24DC 0x040D "Aladdin JaCarta SF"
-                        ccid_reg.sh -add $pList 0x24DC 0x04FF "Aladdin JaCarta SF GOST"
-                        ccid_reg.sh -add $pList 0x24DC 0x100F "Aladdin R.D. JaCarta Flash"
-                        ccid_reg.sh -add $pList 0x0529 0x0620 "eToken PRO Java 72K OS755"
-                    done
-                fi
-            fi
-        fi
-    fi
-
-    # cprocsp-rdr-jacarta-64
-    LIBNAME=librdrjacarta
-
-    cpconfig -ini '\config\apppath' -add string $LIBNAME.so /opt/cprocsp/lib/amd64/$LIBNAME.so
-
-    NAME="jacarta"
-    cpconfig -ini "\config\KeyCarriers\\$NAME" -add string DLL $LIBNAME.so
-    cpconfig -hardware media -add $NAME -name 'Aladdin R.D. JaCarta' > /dev/null
-    cpconfig -hardware media -configure $NAME -add hex atr 3bdc18ff8191fe1fc38073c821136601061159000128
-    cpconfig -hardware media -configure $NAME -add hex mask ffffffffffffffffffffffffffffffffffffffffffff
-    cpconfig -hardware media -configure $NAME -add string folders 'CC00\CC01\CC02\CC03\CC04\CC05\CC06\CC07\CC08\CC09'
-
-    NAME="jacarta_lt"
-    cpconfig -ini "\config\KeyCarriers\\$NAME" -add string DLL $LIBNAME.so
-    cpconfig -hardware media -add $NAME -name 'Aladdin R.D. JaCarta LT' > /dev/null
-    cpconfig -hardware media -configure $NAME -add hex atr 3bdc18ff8111fe8073c82113660106013080018d
-    cpconfig -hardware media -configure $NAME -add hex mask ffffffffffffffffffffffffffffffffffffffff
-    cpconfig -hardware media -configure $NAME -add string folders 'CC00\CC01\CC02\CC03\CC04\CC05\CC06\CC07\CC08\CC09'
-
-    NAME="eToken_JAVA_10"
-    cpconfig -ini "\config\KeyCarriers\\$NAME" -add string DLL $LIBNAME.so
-    cpconfig -hardware media -add $NAME -name 'Aladdin R.D. eToken Java' > /dev/null
-    cpconfig -hardware media -configure $NAME -add hex atr 3bd518008131fe7d8073c82110f4
-    cpconfig -hardware media -configure $NAME -add hex mask ffffffffffffffffffffffffffff
-    cpconfig -hardware media -configure $NAME -add string folders 'CC00\CC01\CC02\CC03\CC04\CC05\CC06\CC07\CC08\CC09'
-
-    NAME="eToken_JAVA_10b"
-    cpconfig -ini "\config\KeyCarriers\\$NAME" -add string DLL $LIBNAME.so
-    cpconfig -hardware media -add $NAME -name 'Aladdin R.D. eToken Java' > /dev/null
-    cpconfig -hardware media -configure $NAME -add hex atr 3bd5180081313a7d8073c8211030
-    cpconfig -hardware media -configure $NAME -add hex mask ffffffffffffffffffffffffffff
-    cpconfig -hardware media -configure $NAME -add string folders 'CC00\CC01\CC02\CC03\CC04\CC05\CC06\CC07\CC08\CC09'
-
-    NAME="eToken_PRO16"
-    cpconfig -ini "\config\KeyCarriers\\$NAME" -add string DLL $LIBNAME.so
-    cpconfig -hardware media -add $NAME -name 'Aladdin R.D. eToken Pro 16K' > /dev/null
-    cpconfig -hardware media -configure $NAME -add hex atr 3be200ffc11031fe55c8029c                                               
-    cpconfig -hardware media -configure $NAME -add hex mask ffffffffffffffffffffffff                                              
-    cpconfig -hardware media -configure $NAME -add string folders 'CC00\CC01\CC02\CC03\CC04\CC05\CC06\CC07\CC08\CC09'
-
-    NAME="eToken_PRO32"
-    cpconfig -ini "\config\KeyCarriers\\$NAME" -add string DLL $LIBNAME.so
-    cpconfig -hardware media -add $NAME -name 'Aladdin R.D. eToken Pro 32K' > /dev/null
-    cpconfig -hardware media -configure NAME -add hex atr 3bf29800ffc11031fe55c80315                                             
-    cpconfig -hardware media -configure $NAME -add hex mask ffffffffffffffffffffffffff                                            
-    cpconfig -hardware media -configure $NAME -add string folders 'CC00\CC01\CC02\CC03\CC04\CC05\CC06\CC07\CC08\CC09'
-
-    NAME="eToken_PRO_M420"
-    cpconfig -ini "\config\KeyCarriers\\$NAME" -add string DLL $LIBNAME.so
-    cpconfig -hardware media -add $NAME -name 'Aladdin R.D. eToken Pro M420' > /dev/null
-    cpconfig -hardware media -configure $NAME -add hex atr 3bf2180000c10a31fe55c80600                                          
-    cpconfig -hardware media -configure $NAME -add hex mask ffffffff00ffffffffffffff00                                         
-    cpconfig -hardware media -configure $NAME -add string folders 'CC00\CC01\CC02\CC03\CC04\CC05\CC06\CC07\CC08\CC09'
-
-    NAME="eToken_PRO_M420B"
-    cpconfig -ini "\config\KeyCarriers\\$NAME" -add string DLL $LIBNAME.so
-    cpconfig -hardware media -add $NAME -name 'Aladdin R.D. eToken Pro M420b' > /dev/null
-    cpconfig -hardware media -configure $NAME -add hex atr 3bf2180002c10a31fe58c80975                                         
-    cpconfig -hardware media -configure $NAME -add hex mask ffffffffffffffffffffffffff                                        
-    cpconfig -hardware media -configure $NAME -add string folders 'CC00\CC01\CC02\CC03\CC04\CC05\CC06\CC07\CC08\CC09'
-
-    # cprocsp-rdr-rutoken-64
-    cpconfig -ini '\config\apppath' -add string librdrrutoken.so /opt/cprocsp/lib/amd64/librdrrutoken.so
-
-    cpconfig -ini '\config\KeyCarriers\RutokenECP' -add string DLL librdrrutoken.so
-    cpconfig -hardware media -add RutokenECP -name 'Rutoken ECP' > /dev/null
-    cpconfig -hardware media -configure RutokenECP -add hex atr 3b8b015275746f6b656e20445320c1
-    cpconfig -hardware media -configure RutokenECP -add hex mask ffffffffffffffffffffffffffffff
-    cpconfig -hardware media -configure RutokenECP -add string folders "0A00\\0B00\\0C00\\0D00\\0E00\\0F00\\1000\\1100\\1200\\1300\\1400\\1500\\1600\\1700\\1800"
-    cpconfig -hardware media -configure RutokenECP -add long size_1 60
-    cpconfig -hardware media -configure RutokenECP -add long size_2 70
-    cpconfig -hardware media -configure RutokenECP -add long size_3 8
-    cpconfig -hardware media -configure RutokenECP -add long size_4 60
-    cpconfig -hardware media -configure RutokenECP -add long size_5 70
-    cpconfig -hardware media -configure RutokenECP -add long size_6 300
-    cpconfig -hardware media -configure RutokenECP -add long size_7 8
-
-    cpconfig -ini '\config\KeyCarriers\RutokenFkcOld' -add string DLL librdrrutoken.so
-    cpconfig -hardware media -add RutokenFkcOld -name 'CryptoPro Rutoken' > /dev/null
-    cpconfig -hardware media -configure RutokenFkcOld -add hex atr 3b8b015275746f6b656e20454350a0
-    cpconfig -hardware media -configure RutokenFkcOld -add hex mask ffffffffffffffffffffffffffffff
-    cpconfig -hardware media -configure RutokenFkcOld -add string folders "0A00\\0B00\\0C00\\0D00\\0E00\\0F00\\1000\\1100\\1200\\1300\\1400\\1500\\1600\\1700\\1800"
-    cpconfig -hardware media -configure RutokenFkcOld -add long size_1 60
-    cpconfig -hardware media -configure RutokenFkcOld -add long size_2 70
-    cpconfig -hardware media -configure RutokenFkcOld -add long size_3 8
-    cpconfig -hardware media -configure RutokenFkcOld -add long size_4 60
-    cpconfig -hardware media -configure RutokenFkcOld -add long size_5 70
-    cpconfig -hardware media -configure RutokenFkcOld -add long size_6 300
-    cpconfig -hardware media -configure RutokenFkcOld -add long size_7 8
-
-    cpconfig -ini '\config\KeyCarriers\RutokenECPSC' -add string DLL librdrrutoken.so
-    cpconfig -hardware media -add RutokenECPSC -name 'Rutoken ECP SC' > /dev/null
-    cpconfig -hardware media -configure RutokenECPSC -add hex atr 3b9c96005275746f6b656e4543507363
-    cpconfig -hardware media -configure RutokenECPSC -add hex mask ffffffffffffffffffffffffffffffff
-    cpconfig -hardware media -configure RutokenECPSC -add string folders "0A00\\0B00\\0C00\\0D00\\0E00\\0F00\\1000\\1100\\1200\\1300\\1400\\1500\\1600\\1700\\1800"
-    cpconfig -hardware media -configure RutokenECPSC -add long size_1 60
-    cpconfig -hardware media -configure RutokenECPSC -add long size_2 70
-    cpconfig -hardware media -configure RutokenECPSC -add long size_3 8
-    cpconfig -hardware media -configure RutokenECPSC -add long size_4 60
-    cpconfig -hardware media -configure RutokenECPSC -add long size_5 70
-    cpconfig -hardware media -configure RutokenECPSC -add long size_6 300
-    cpconfig -hardware media -configure RutokenECPSC -add long size_7 8
-
-    cpconfig -ini '\config\KeyCarriers\RutokenLiteSC2' -add string DLL librdrrutoken.so
-    cpconfig -hardware media -add RutokenLiteSC2 -name 'Rutoken Lite SC' > /dev/null
-    cpconfig -hardware media -configure RutokenLiteSC2 -add hex atr 3b9e96005275746f6b656e4c697465534332
-    cpconfig -hardware media -configure RutokenLiteSC2 -add hex mask ffffffffffffffffffffffffffffffffffff
-    cpconfig -hardware media -configure RutokenLiteSC2 -add string folders "0A00\\0B00\\0C00\\0D00\\0E00\\0F00\\1000\\1100\\1200\\1300\\1400\\1500\\1600\\1700\\1800"
-    cpconfig -hardware media -configure RutokenLiteSC2 -add long size_1 60
-    cpconfig -hardware media -configure RutokenLiteSC2 -add long size_2 70
-    cpconfig -hardware media -configure RutokenLiteSC2 -add long size_3 8
-    cpconfig -hardware media -configure RutokenLiteSC2 -add long size_4 60
-    cpconfig -hardware media -configure RutokenLiteSC2 -add long size_5 70
-    cpconfig -hardware media -configure RutokenLiteSC2 -add long size_6 300
-    cpconfig -hardware media -configure RutokenLiteSC2 -add long size_7 8
-
-    cpconfig -ini '\config\KeyCarriers\RutokenLite' -add string DLL librdrrutoken.so
-    cpconfig -hardware media -add RutokenLite -name 'Rutoken lite' > /dev/null
-    cpconfig -hardware media -configure RutokenLite -add hex atr 3b8b015275746f6b656e6c697465c2
-    cpconfig -hardware media -configure RutokenLite -add hex mask ffffffffffffffffffffffffffffff
-    cpconfig -hardware media -configure RutokenLite -add string folders "0A00\\0B00\\0C00\\0D00\\0E00\\0F00\\1000\\1100\\1200\\1300\\1400\\1500\\1600\\1700\\1800"
-    cpconfig -hardware media -configure RutokenLite -add long size_1 60
-    cpconfig -hardware media -configure RutokenLite -add long size_2 70
-    cpconfig -hardware media -configure RutokenLite -add long size_3 8
-    cpconfig -hardware media -configure RutokenLite -add long size_4 60
-    cpconfig -hardware media -configure RutokenLite -add long size_5 70
-    cpconfig -hardware media -configure RutokenLite -add long size_6 300
-    cpconfig -hardware media -configure RutokenLite -add long size_7 8
-
-    cpconfig -ini '\config\KeyCarriers\Rutoken' -add string DLL librdrrutoken.so
-    cpconfig -hardware media -add Rutoken -name 'Rutoken S' > /dev/null
-    cpconfig -hardware media -configure Rutoken -add hex atr 3b6f00ff00567275546f6b6e73302000009000
-    cpconfig -hardware media -configure Rutoken -add hex mask ffffffffffffffffffffffffffffffffffffff
-    cpconfig -hardware media -configure Rutoken -add string folders "0A00\\0B00\\0C00\\0D00\\0E00\\0F00\\1000"
-    cpconfig -hardware media -configure Rutoken -add long size_1 60
-    cpconfig -hardware media -configure Rutoken -add long size_2 70
-    cpconfig -hardware media -configure Rutoken -add long size_3 8
-    cpconfig -hardware media -configure Rutoken -add long size_4 60
-    cpconfig -hardware media -configure Rutoken -add long size_5 70
-    cpconfig -hardware media -configure Rutoken -add long size_6 300
-    cpconfig -hardware media -configure Rutoken -add long size_7 8
-
-    cpconfig -ini '\config\KeyCarriers\RutokenPinpad' -add string DLL librdrrutoken.so
-    cpconfig -hardware media -add RutokenPinpad -name 'Rutoken PinPad' > /dev/null
-    cpconfig -hardware media -configure RutokenPinpad -add hex atr 3B8B01527450494E5061642020329C
-    cpconfig -hardware media -configure RutokenPinpad -add hex mask ffffffffffffffffffffffffffffff
-    cpconfig -hardware media -configure RutokenPinpad -add string folders "0A00\\0B00\\0C00\\0D00\\0E00\\0F00\\1000\\1100\\1200\\1300\\1400\\1500\\1600\\1700\\1800"
-
-    #cpconfig -hardware reader -add "Aktiv Rutoken ECP 00 00" -name 'Rutoken ECP 0'
-    #cpconfig -hardware reader -add "Aktiv Rutoken ECP 01 00" -name 'Rutoken ECP 1'
-    #cpconfig -hardware reader -add "Aktiv Rutoken lite 00 00" -name 'Rutoken lite 0'
-    #cpconfig -hardware reader -add "Aktiv Rutoken lite 01 00" -name 'Rutoken lite 1'
-    #cpconfig -hardware reader -add "Aktiv Co. Rutoken S 00 00" -name 'Rutoken S 0'
-    #cpconfig -hardware reader -add "Aktiv Co. Rutoken S 01 00" -name 'Rutoken S 1'
-    #cpconfig -hardware reader -add "Aktiv Rutoken Magistra 00 00" -name 'Rutoken Magistra 0'
-    #cpconfig -hardware reader -add "Aktiv Rutoken Magistra 01 00" -name 'Rutoken Magistra 1'
-
-    cpconfig -ini '\config\KeyCarriers\RutokenECPM' -add string DLL librdrrutoken.so
-    cpconfig -hardware media -add RutokenECPM -name 'Rutoken ECP 2151' > /dev/null
-    cpconfig -hardware media -configure RutokenECPM -add hex atr 3B18967275746F6B656E6D
-    cpconfig -hardware media -configure RutokenECPM -add hex mask ffffffffffffffffffffff
-    cpconfig -hardware media -configure RutokenECPM -add string folders "0A00\\0B00\\0C00\\0D00\\0E00\\0F00\\1000\\1100\\1200\\1300\\1400\\1500\\1600\\1700\\1800"
-    cpconfig -hardware media -configure RutokenECPM -add long size_1 60
-    cpconfig -hardware media -configure RutokenECPM -add long size_2 70
-    cpconfig -hardware media -configure RutokenECPM -add long size_3 3072
-    cpconfig -hardware media -configure RutokenECPM -add long size_4 60
-    cpconfig -hardware media -configure RutokenECPM -add long size_5 70
-    cpconfig -hardware media -configure RutokenECPM -add long size_6 300
-    cpconfig -hardware media -configure RutokenECPM -add long size_7 8
-
-    cpconfig -ini '\config\KeyCarriers\RutokenECPMSC' -add string DLL librdrrutoken.so
-    cpconfig -hardware media -add RutokenECPMSC -name 'Rutoken ECP 2151 SC' > /dev/null
-    cpconfig -hardware media -configure RutokenECPMSC -add hex atr 3B1A967275746F6B656E6D7363
-    cpconfig -hardware media -configure RutokenECPMSC -add hex mask ffffffffffffffffffffffffff
-    cpconfig -hardware media -configure RutokenECPMSC -add string folders "0A00\\0B00\\0C00\\0D00\\0E00\\0F00\\1000\\1100\\1200\\1300\\1400\\1500\\1600\\1700\\1800"
-    cpconfig -hardware media -configure RutokenECPMSC -add long size_1 60
-    cpconfig -hardware media -configure RutokenECPMSC -add long size_2 70
-    cpconfig -hardware media -configure RutokenECPMSC -add long size_3 3072
-    cpconfig -hardware media -configure RutokenECPMSC -add long size_4 60
-    cpconfig -hardware media -configure RutokenECPMSC -add long size_5 70
-    cpconfig -hardware media -configure RutokenECPMSC -add long size_6 300
-    cpconfig -hardware media -configure RutokenECPMSC -add long size_7 8
-
-    cpconfig -ini '\config\KeyCarriers\RutokenNFC' -add string DLL librdrrutoken.so
-    cpconfig -hardware media -add RutokenNFC -name 'Rutoken NFC' > /dev/null
-
-    cpconfig -hardware media -configure RutokenNFC -connect Default -add hex atr 3B9C968011405275746F6B656E4543507363C0
-    cpconfig -hardware media -configure RutokenNFC -connect Default -add hex mask fffffefffffffffffffffffffffffffffffffe
-    cpconfig -hardware media -configure RutokenNFC -connect Default -add string folders "0A00\\0B00\\0C00\\0D00\\0E00\\0F00\\1000\\1100\\1200\\1300\\1400\\1500\\1600\\1700\\1800"
-    cpconfig -hardware media -configure RutokenNFC -connect Default -add long size_1 60
-    cpconfig -hardware media -configure RutokenNFC -connect Default -add long size_2 70
-    cpconfig -hardware media -configure RutokenNFC -connect Default -add long size_3 3072
-    cpconfig -hardware media -configure RutokenNFC -connect Default -add long size_4 60
-    cpconfig -hardware media -configure RutokenNFC -connect Default -add long size_5 70
-    cpconfig -hardware media -configure RutokenNFC -connect Default -add long size_6 300
-    cpconfig -hardware media -configure RutokenNFC -connect Default -add long size_7 8
-
-    # cprocsp-rdr-cloud-64
-    cpconfig -ini '\config\apppath' -add string librdrcloud.so /opt/cprocsp/lib/amd64/librdrcloud.so
-    cpconfig -ini '\config\KeyDevices\Cloud' -add string DLL librdrcloud.so
-    cpconfig -ini '\config\KeyDevices\Cloud' -add string AuthApp /opt/cprocsp/sbin/amd64/oauthapp
-    cpconfig -hardware reader -add Cloud > /dev/null
-    cpconfig -ini '\config\debug' -add long cloud 1
-    /sbin/ldconfig -f /etc/ld.so.conf
-
-    # cprocsp-curl-64
-    if test -f "/opt/cprocsp/sbin/amd64/cpconfig"; then
-        PATH=$PATH:/opt/cprocsp/sbin/amd64
-        libcurl_so_backup=`cpconfig -ini '\config\apppath\libcurl.so' -view 2> /dev/null`
-        status="$?"
-        if test "${status}" -eq 0 ; then
-            cpconfig -ini '\config\apppath\backup' -add string libcurl.so "${libcurl_so_backup}"
-        fi
-        cpconfig -ini '\config\apppath' -add string libcurl.so /opt/cprocsp/lib/amd64/libcpcurl.so
-    fi
-    /sbin/ldconfig -f /etc/ld.so.conf
-
-    # cprocsp-pki-cades-64
-    /opt/cprocsp/bin/amd64/ocsputil license -s 0A202-U0030-00ECW-RRLMF-UU2WK
-    /opt/cprocsp/bin/amd64/tsputil license -s TA200-G0030-00ECW-RRLNE-BTDVV
+pkgname="cryptopro-csp-k1"
+FILES_INSTALL_TAMPLATE="
+	lsb-cprocsp-base-*-*.*.rpm
+	lsb-cprocsp-rdr-64-*-*.*.rpm
+	lsb-cprocsp-kc1-64-*-*.*.rpm
+	lsb-cprocsp-capilite-64-*-*.*.rpm
+	cprocsp-curl-64-*-*.*.rpm
+	lsb-cprocsp-ca-certs-*-*.*.rpm
+	cprocsp-rdr-gui-gtk-64-*-*.*.rpm
+	cprocsp-cptools-gtk-64-*-*.*.rpm
+	cprocsp-rdr-pcsc-64-*-*.*.rpm
+	cprocsp-rdr-emv-64-*-*.*.rpm
+	cprocsp-rdr-inpaspot-64-*-*.*.rpm
+	cprocsp-rdr-kst-64-*-*.*.rpm
+	cprocsp-rdr-mskey-64-*-*.*.rpm
+	cprocsp-rdr-novacard-64-*-*.*.rpm
+	cprocsp-rdr-edoc-64-*-*.*.rpm
+	cprocsp-rdr-rutoken-64-*-*.*.rpm
+	cprocsp-rdr-jacarta-64-*-*.*.rpm
+	cprocsp-rdr-cloud-64-*-*.*.rpm
+	cprocsp-rdr-cpfkc-64-*-*.*.rpm
+	cprocsp-rdr-infocrypt-64-*-*.*.rpm
+	cprocsp-rdr-rosan-64-*-*.*.rpm
+	cprocsp-rdr-cryptoki-64-*-*.*.rpm
+	cprocsp-rdr-rustoken-64-*-*.*.rpm
+	cprocsp-pki-cades-64-*-*.*.rpm
+	cprocsp-pki-plugin-64-*-*.*.rpm 
+	lsb-cprocsp-pkcs11-64-*-*.*.rpm"
+
+execute_scriptlets(){
+    SCRIPTLET_NAME=$1
+    while IFS= read -r SELECT_FILE_INSTALL_TAMPLATE; do
+	[[ ${SELECT_FILE_INSTALL_TAMPLATE} =~ ([^*]*)+-.* ]] && SELECT_FILE_SHORTNAME=${BASH_REMATCH[1]}
+	PATH_SCRIPTLETS="${pkgdir}/var/opt/${pkgname}/scriptlets-${SELECT_FILE_SHORTNAME}"
+	if [[ -x ${PATH_SCRIPTLETS}/${SCRIPTLET_NAME} ]]; then
+	    ${PATH_SCRIPTLETS}/${SCRIPTLET_NAME} 2>&3 || true
+	fi
+    done < <(sed "s/[[:blank:]]//g; /^[[:space:]]*$/d" <<< ${FILES_INSTALL_TAMPLATE})
+    return 0
+}
 
-    cpconfig -ini '\config\apppath' -add string libcades.so /opt/cprocsp/lib/amd64/libcades.so.2
-    cpconfig -ini '\config\apppath' -add string libpkivalidator.so /opt/cprocsp/lib/amd64/libpkivalidator.so.2
-    cpconfig -ini '\config\apppath' -add string librevprov.so /opt/cprocsp/lib/amd64/librevprov.so.2
-    cpconfig -ini '\config\policy\OIDs' -add string '{A4CC781E-04E9-425C-AAFD-1D74DA8DFAF6}' 'libpkivalidator.so CertDllVerifyOCSPSigningCertificateChainPolicy'
-    cpconfig -ini '\config\policy\OIDs' -add string '{AF74EE92-A059-492F-9B4B-EAD239B22A1B}' 'libpkivalidator.so CertDllVerifyTimestampSigningCertificateChainPolicy'
-    cpconfig -ini '\config\policy\OIDs' -add string '{B52FF66F-13A5-402C-B958-A3A6B5300FB6}' 'libpkivalidator.so CertDllVerifySignatureCertificateChainPolicy'
-    cpconfig -ini '\config\policy\OIDs' -add string '5' 'libpkivalidator.so BasicConstraintsImpl'
-    cpconfig -ini '\cryptography\OID\EncodingType 1\CertDllVerifyRevocation\DEFAULT' -add string 'DLL' 'librevprov.so'
+# arg 1:  the new package version
+pre_install() {
+    pre_upgrade
+}
 
-    # cprocsp-pki-plugin-64
-    cpconfig -ini '\config\apppath' -add string libnpcades.so /opt/cprocsp/lib/amd64/libnpcades.so.2
+# arg 1:  the new package version
+post_install() {
+    post_upgrade
+}
 
-    [ -d /usr/lib/mozilla/plugins ] && cp -rvf /opt/cprocsp/lib/amd64/libnpcades.so.2.0.0 /usr/lib/mozilla/plugins/libnpcades.so
-    [ -d /usr/lib64/mozilla/plugins ] && cp -rvf /opt/cprocsp/lib/amd64/libnpcades.so.2.0.0 /usr/lib64/mozilla/plugins/libnpcades.so
-    [ -d /usr/lib/browser-plugins ] && cp -rvf /opt/cprocsp/lib/amd64/libnpcades.so.2.0.0 /usr/lib/browser-plugins/libnpcades.so
-    [ -d /usr/lib64/browser-plugins ] && cp -rvf /opt/cprocsp/lib/amd64/libnpcades.so.2.0.0 /usr/lib64/browser-plugins/libnpcades.so
+# arg 1:  the new package version
+# arg 2:  the old package version
+pre_upgrade() {
+    true
+}
 
-    #if we have clean CSP install, users will not have my.sto. Plugin can open only existed stores. Create empty stores for all users with id above 1000
-    USERNAMES=( `cat /etc/passwd | cut -d ":" -f 1` )
-    USERIDS=( `cat /etc/passwd | cut -d ":" -f 3` )
-    USERGROUPS=( `cat /etc/passwd | cut -d ":" -f 4` )
-    total=${#USERNAMES[*]}
-    for (( i=0; i<=$(( $total -1 )); i++ ))
-    do
-        if (( ${USERIDS[$i]}>=1000 )) && (( ${USERIDS[$i]}<65000 )) ; then
-            if [[ ! -f /var/opt/cprocsp/users/${USERNAMES[$i]}/stores/my.sto ]]; then
-                mkdir -p /var/opt/cprocsp/users/${USERNAMES[$i]}/stores
-                touch /var/opt/cprocsp/users/${USERNAMES[$i]}/stores/my.sto
-                chmod -R 744 /var/opt/cprocsp/users/${USERNAMES[$i]}
-                chown -R ${USERNAMES[$i]} /var/opt/cprocsp/users/${USERNAMES[$i]}
-                chgrp -R ${USERGROUPS[$i]} /var/opt/cprocsp/users/${USERNAMES[$i]}
-            fi
-        fi
-    done
+# arg 1:  the new package version
+# arg 2:  the old package version
+post_upgrade() {
+    execute_scriptlets preinstall
+    execute_scriptlets postinstall
+}
 
-    echo "Enable pcscd daemon for smart card support (for example etoken or rutoken):"
-    echo systemctl enable --now pcscd
-    ubconfig set system SERVICES_ENABLE++="pcscd"
+# arg 1:  the old package version
+pre_remove() {
+    execute_scriptlets preuninstall
+    execute_scriptlets postuninstall
 }
 
-post_upgrade() {
-    post_install
-}
\ No newline at end of file
+# arg 1:  the old package version
+post_remove() {
+    true
+}