We have WSSE configured for our web service to sign the entire body of the responses. If the request is successful, the response comes back signed with our private key as expected. However, if any exception is thrown and a SOAP fault is returned, then the SOAP body is not signed. Is this expected behavior? How do we get JBoss to also sign the SOAP faults?

Thanks,
Yi