In grails 2.x version, the bouncy castle provided by the grails itself is present in the runtime environment. Since the bc library in part of grail lib, is it possible to overwrite with latest bc library. Even though I defined the dependency as below, still it is using the old version present in grails lib directory.

dependencies {
    runtime '.bouncycastle:bcprov-jdk18on:1.80'
    runtime '.bouncycastle:bcpkix-jdk18on:1.80'
}

In grails 2.x version, the bouncy castle provided by the grails itself is present in the runtime environment. Since the bc library in part of grail lib, is it possible to overwrite with latest bc library. Even though I defined the dependency as below, still it is using the old version present in grails lib directory.

dependencies {
    runtime '.bouncycastle:bcprov-jdk18on:1.80'
    runtime '.bouncycastle:bcpkix-jdk18on:1.80'
}

• grails
• bouncycastle
• dependency-management

2 Answers 2

Try to take a look at:
https://grails.github.io/grails2-doc/2.3.2/guide/conf.html#configurationsAndDependencies

Especially the sub section "Disabling transitive dependency resolution".

I have been using newer version of Grails that uses Gradle, so I can't exactly remember the Gant way...

Have you checked the results of "grails dependency-report command" ?

You have to know which lib is adding this transitive library and then excluding it with the exclude closure.

For example, for a Grails 2.5.5 project, I want to use the itext 2.1.7 and the plugin rendering is using an older version. So, I did this:

dependencies {
       runtime 'com.lowagie:itext:2.1.7'
}

plugins {
        compile (":rendering:1.0.0") {
            excludes 'itext'
        }
}