Exclude the BouncyCastle jar from the STS war
diff --git a/services/sts/pom.xml b/services/sts/pom.xml
index 21501bd..aeff89a 100644
--- a/services/sts/pom.xml
+++ b/services/sts/pom.xml
@@ -57,6 +57,12 @@
             <groupId>org.apache.cxf.services.sts</groupId>
             <artifactId>cxf-services-sts-core</artifactId>
             <version>${cxf.version}</version>
+            <exclusions>
+                <exclusion>
+                    <groupId>org.bouncycastle</groupId>
+                    <artifactId>bcprov-jdk15on</artifactId>
+                </exclusion>
+            </exclusions>
         </dependency>
         <dependency>
             <groupId>org.slf4j</groupId>