So, in a weird coincidence to the LTT videos -- I actually need to digitally sign a PDF this week for a legal contract. Not an image of a signature type thing, but a real cryptographic signature.

I've searched around for information about how to create and install a cert so that Okular will actually do this - and well, my google-fu has failed. I've found guides that appear to say how to do this, but they are for other distros that have different directory structures than Arch. I'm not a developer, I'm really not a technical person, so I while I've tried to "convert" between the documentation I've found and the Arch directory structures, I've not succeeded. I really don't want to go issuing 'sudo' commands for openssl stuff for directories I don't know what they do for privileged directories while guessing if I'm right -- I figure that's a great way to completely compromise the security of my system.

Does anyone know of a simple to follow, correct, step-by-step guide for Arch on how to do this? Or, can someone provide such a guide?

The Okular documentation tells me that I need to create a PKCS signing certificate, This barely appears on the Arch wiki at all, and seems to be related to web servers? Which is, frankly, less than useful for my needs.

Anyway, thanks in advance for any help!