PJeOffice Pro

This is a community package of PJeOffice Pro, maintained independently and unaffiliated with the CNJ or TRF3. It repackages the official Linux build unmodified and follows upstream releases automatically.

PJeOffice Pro is the official signer for PJe, the electronic judicial process system used by Brazilian courts. It runs in the background and lets the PJe web pages in your browser sign documents with your ICP-Brasil digital certificate, either an A1 certificate file or an A3 token or smart card. It can also sign PDF files on disk.

Permissions: this package grants network access (the PJe pages reach PJeOffice through a local server on 127.0.0.1, and it checks revocation lists and updates), your Documents and Downloads folders, where A1 certificate files and documents to sign usually are, and the host's p11-kit socket for A3 tokens (below). Settings and logs stay inside the sandbox. To open certificates or documents from anywhere in your home folder: flatpak override --user --filesystem=home br.jus.cnj.PJeOfficePro.

A3 tokens and smart cards need a one-time setup on the host, because the token's driver cannot run inside the sandbox. Install the driver from your certificate vendor and make sure pcscd is running, as for any Linux installation, and register the driver with p11-kit if the vendor does not (a file in ~/.config/pkcs11/modules/ with the line module: /path/to/the/driver.so). Then run a p11-kit server that listens on $XDG_RUNTIME_DIR/p11-kit/pkcs11: where your distribution ships the systemd user socket, that is systemctl --user enable --now p11-kit-server.socket. PJeOffice then lists the token's certificates and asks for the PIN as usual. A1 certificate files need none of this.

On Linux, PJeOffice Pro always runs as a small window rather than a tray icon, as a native installation does; its menu opens when you click it.