Okular certutils digital_sign

NOTES.md

1. create a new certificate with certutil command:

   certutil -S \
   -s "CN=[ your full name ],O= [ Business or School ],OU=[ Deparment or position ],L= [ Location ],ST=[ State ],C= [ Country code ],E= [ your email ]" \
   -g 2048 \
   -d sql:$HOME/.pki/nssdb \
   -n [ new name of certificate ] \
   -x \
   -t "Cu,Cu,Cu" \
   -p 405-555-5555 \
   --email [ your email ] \
   -m 1234
   

2. List the created certificate:

   certutil -d sql:$HOME/.pki/nssdb -L
   

3. Open Okular and go to: Settings > configure backends > PDF
4. In the section: Certificate database, choose Custom and enter this path: $HOME/.pki/nssdb
5. Apply and Restart Okular, and then you'd see the available certificate in the options of step 4 to sign digitally.

REFERENCES:

• https://fosstodon.org/@[email protected]/110999161081984432
• TODO: add more