XML Security Library


Online XML Digital Signature Verifer

The online XML Digital Signature Verifier is a simple cgi script that demonstrates how to use XML Security Library in real applications.

Copy/Paste the Signed XML Document in the input field below:

Please note that all white spaces and carriage returns are significant.

Allowed root certificates and signature keys

In order to successfully verify your message using XML Digital Signature Online Verifier you should sign it using any of following keys:
  • any x509 certificate (or certificates chain) based on root certificates from standard root CA authorities (Verisign, etc.), Merlin's root CA used to sign interoperability tests from merlin-xmldsig-twenty-three.tar.gz or "fake" root certificate (the corresponding private key is encrypted using passphrase "secret");
  • HMAC key "secret" (in hex, 73 65 63 72 65 74);
  • any key public DSA/RSA key provided in the KeyInfo element of the signature.

A small list of signed XML documents from XML DSig Interop tests suites

ATTENTION: some of these signatures use external resource located on other Web servers and may fail if these resource are not available by some reasons.