XML digital signatures

Sign, verify, and diagnose XMLDSIG workflows.

Use XML ValidatorBuddy Desktop or ValBuddy to work with XML signatures and understand failed verification with document, reference, digest, key, and certificate context.

XML ValidatorBuddy showing a failed XML signature reference digest and diagnostic messages
A digest mismatch is connected to the affected reference and target location.

Specialist workflow

Go beyond a pass-or-fail message.

Signature verification can fail at several layers. Grouped diagnostics help you determine whether the problem is in a reference, digest, transform, key, certificate, or signature value.

Document and reference integrity

Inspect each reference URI, transform chain, digest algorithm, and calculated digest result.

Key and certificate context

Review the available KeyInfo material and the certificate or key used by the workflow.

Desktop and CLI execution

Use interactive diagnostics in XML ValidatorBuddy and repeatable signing or verification through ValBuddy.

Actionable failure detail

Find the failing layer before changing the document.

  • Reference URI and target information
  • Digest and signature algorithms
  • Transform and canonicalization context
  • KeyInfo and certificate findings
  • Source location for the affected signature
Web API boundary: the API verifies only the documented whole-document enveloped safe profile. It does not sign XML or establish certificate trust, signer identity, or general XMLDSIG support.
Detailed XML signature verification diagnostics with a reference digest mismatch
Verification findings make the failing reference and digest visible.

Make XML signature failures explainable.

Use XML ValidatorBuddy Desktop and ValBuddy on Windows.

Download free trial

More details for this workflow

  • Complete solution for XML Digital Signatures and XMLDSIG workflows.
  • Support for SHA-2 hash algorithms.
  • Sign fragments of XML data using references and IDs.
  • Verify XML signatures with a single click.
  • Get structured diagnostics for failed signing and verification workflows.
  • Export expert verification diagnostics as JSON, XML, or HTML reports.
  • Command-line tool for XML signatures.
  • Create and verify signatures from the built-in Explorer. No need to open the XML document.

Download and use XML ValidatorBuddy+ as your XML signature tool:

Get complete and affordable support for XML digital signatures and increase the security of your XML documents with the easy-to-use functionality provided by XML ValidatorBuddy+ Edition. Use the same Windows desktop tool to create signatures, verify signed XML documents, inspect failed XMLDSIG operations, and prepare diagnostic details for support or audit workflows.

XML Validator Buddy supports SHA-1, SHA-2 (SHA-256, SHA-384 and SHA-512) hash algorithms, together with RSA and HMAC keys. It is possible to create XML signatures using Windows® certificates, an arbitrary password or loaded from a standard PFX file.

Save time and run sign or verify batch tasks for digital signatures on any number of XML documents using the command line tool which is included in all installations of XML Validator Buddy. Learn more

XML ValidatorBuddy now provides clearer diagnostics when XML Digital Signature signing or verification fails. Instead of a generic failure result, the diagnostic details can show where the workflow broke down: certificate trust, private key availability, KeyInfo handling, reference targets, configured transforms, canonicalization choices, digest checks, serialization, or output creation.

Successful signing stays clean and concise. Failed or cancelled signing operations preserve the deeper technical details needed to resolve certificate, key, XMLDSIG configuration, and XML structure problems faster. For verification, diagnostics can be configured for normal, failure-only, or verbose output.