diff --git a/pkgs/tools/misc/open-pdf-sign/default.nix b/pkgs/tools/misc/open-pdf-sign/default.nix
new file mode 100644
index 000000000000..ca72a2ca6b17
--- /dev/null
+++ b/pkgs/tools/misc/open-pdf-sign/default.nix
@@ -0,0 +1,30 @@
+{ lib, stdenv, fetchurl, makeWrapper, jre }:
+
+stdenv.mkDerivation rec {
+  version = "0.1.0";
+  pname = "open-pdf-sign";
+
+  src = fetchurl {
+    url = "https://github.com/open-pdf-sign/open-pdf-sign/releases/download/v${version}/open-pdf-sign.jar";
+    sha256 = "AfxpqDLIycXMQmYexRoFh5DD/UCBHrnGSMjfjljvKs4=";
+  };
+
+  nativeBuildInputs = [ makeWrapper ];
+
+  buildCommand = ''
+    install -Dm644 $src $out/lib/open-pdf-sign.jar
+
+    mkdir -p $out/bin
+    makeWrapper ${jre}/bin/java $out/bin/open-pdf-sign \
+      --add-flags "-jar $out/lib/open-pdf-sign.jar"
+  '';
+
+  meta = with lib; {
+    description = "Digitally sign PDF files from your commandline";
+    homepage = "https://github.com/open-pdf-sign/open-pdf-sign";
+    sourceProvenance = with sourceTypes; [ binaryBytecode ];
+    license = licenses.asl20;
+    maintainers = with maintainers; [ drupol ];
+    platforms = platforms.unix;
+  };
+}
diff --git a/pkgs/top-level/all-packages.nix b/pkgs/top-level/all-packages.nix
index da56bca83203..99ddb96b3f8e 100644
--- a/pkgs/top-level/all-packages.nix
+++ b/pkgs/top-level/all-packages.nix
@@ -10272,6 +10272,8 @@ with pkgs;
 
   opae = callPackage ../development/libraries/opae { };
 
+  open-pdf-sign = callPackage ../tools/misc/open-pdf-sign { };
+
   opentelemetry-collector = callPackage ../tools/misc/opentelemetry-collector { };
   opentelemetry-collector-contrib = callPackage ../tools/misc/opentelemetry-collector/contrib.nix { };