xmldsig verifier is an open source tool for verifying XML signed using X509
certificates according to the xmldsig standard (https://www.w3.org/TR/xmldsig-core/).

This tool relaxes some constraints as per below:

• The subject names of the certificate and the signed document need not match.
  If this happens the document will be considered valid, but a warning will
  be displayed.
• If the the signature verification for the document as a whole fails, the
  tool will attempt to verify possible XML snippets. This is useful if you
  have embedded a signed XML document in another XML document such as a
  SOAP request. If such a valid snippet is found, the document will be considered
  valid, but a warning will be displayed.
• While the xmldsig standard requires the signature element to be "Signature",
  this tool will accept any name ending with "Signature", e.g. "MySignature".

Karl Morian, kalle@paddbacken.se