Exclude the BouncyCastle jar from the STS war
diff --git a/services/sts/pom.xml b/services/sts/pom.xml
index 21501bd..aeff89a 100644
--- a/services/sts/pom.xml
+++ b/services/sts/pom.xml
@@ -57,6 +57,12 @@
<groupId>org.apache.cxf.services.sts</groupId>
<artifactId>cxf-services-sts-core</artifactId>
<version>${cxf.version}</version>
+ <exclusions>
+ <exclusion>
+ <groupId>org.bouncycastle</groupId>
+ <artifactId>bcprov-jdk15on</artifactId>
+ </exclusion>
+ </exclusions>
</dependency>
<dependency>
<groupId>org.slf4j</groupId>