What do you mean by "sign a PDF"? You can use it to set an owner-password and set the permissions to disallow editing. But, as even Adobe warns, setting the permissions are merely a suggestion; it's still possible to do all the things that you disallow via the permissions. So this isn't a good way to prove that a document is unmodified from the author.
If your goal is to ensure that the PDF is not a modified version of the original, I'd suggest generating a SHA1 hash of the file and posting that publicly. You could also use public key encryption (i.e. GPG, PGP, etc.) to sign it to give people more assurance that it was really you who posted that SHA1 hash. Hope that helps, Adam From: Philippe Briere <philippe.bri...@smile.fr> To: "pdfbox-users@incubator.apache.org" <pdfbox-users@incubator.apache.org> Date: 11/10/2009 06:10 Subject: PdfBox : to sign pdf embeded in an opensource ECM solution ? Hi, PdfBox can encrypt/decrypt, can I use it to simply sign a PDF desktop-side ? Thanks Philippe ? Click here to submit conditions This email and any content within or attached hereto from Sun West Mortgage Company, Inc. is confidential and/or legally privileged. The information is intended only for the use of the individual or entity named on this email. If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution or the taking of any action in reliance on the contents of this email information is strictly prohibited, and that the documents should be returned to this office immediately by email. Receipt by anyone other than the intended recipient is not a waiver of any privilege. Please do not include your social security number, account number, or any other personal or financial information in the content of the email. Should you have any questions, please call (800) 453 7884.