diff --git a/pom.xml b/pom.xml
index cdd34994bd8..a3631fb89a5 100644
--- a/pom.xml
+++ b/pom.xml
@@ -91,34 +91,10 @@
         <version.spring_kafka>2.9.11</version.spring_kafka>
         <version.kafka>3.1.0</version.kafka>
 
-        <!-- BouncyCastle seems to change the naming convention of
-             their ArtifactId fairly often.  Here is a summary of
-             information gathered so far.
+        <bouncycastle.bcprov>bcprov-jdk18on</bouncycastle.bcprov>
+        <bouncycastle.bcpkix>bcpkix-jdk18on</bouncycastle.bcpkix>
+        <bouncycastle.version>1.77</bouncycastle.version>
 
-             Note that each ArtifactId has two flavours: 'bcprov-nnn'
-             and 'bcprov-ext-nnn'.  The '-ext-' flavour includes "the
-             IDEA implementation as well as NTRU" which is missing
-             from the non '-ext-' version.  These features were
-             removed since v1.40 "at the request of a number of
-             users".
-
-               Version  ArtifactId      Notes:
-               1.47     bcprov-jdk15on  JDK v1.5 and later
-
-               1.46     bcprov-jdk15+   JDK v1.5 (and later?), the '+'
-                                        seems to confuse maven.
-
-               1.46     bcprov-jdk15    JDK v1.5
-
-               1.46     bcprov-jdk16    JDK v1.6
-
-               1.45     bcprov-jdk16    JDK v1.6; used by JGlobus-2.x
-
-               1.43     bcprov-jdk16    JDK v1.6; used by JGlobus-1.8.x
-         -->
-        <bouncycastle.bcprov>bcprov-jdk15on</bouncycastle.bcprov>
-        <bouncycastle.bcpkix>bcpkix-jdk15on</bouncycastle.bcpkix>
-        <bouncycastle.version>1.67</bouncycastle.version>
         <datanucleus-core.version>6.0.6</datanucleus-core.version>
         <datanucleus.plugin.version>6.0.0-release</datanucleus.plugin.version>
         <asm.version>9.5</asm.version>
@@ -262,12 +238,26 @@
             <dependency>
                 <groupId>eu.eu-emi.security</groupId>
                 <artifactId>canl</artifactId>
-                <version>2.6.0</version>
+                <version>2.8.3</version>
             </dependency>
             <dependency>
                 <groupId>org.italiangrid</groupId>
                 <artifactId>voms-api-java</artifactId>
                 <version>3.3.0</version>
+                <exclusions>
+                    <exclusion>
+                        <groupId>org.bouncycastle</groupId>
+                        <artifactId>bcprov-jdk15on</artifactId>
+                    </exclusion>
+                    <exclusion>
+                        <groupId>org.bouncycastle</groupId>
+                        <artifactId>bcpkix-jdk15on</artifactId>
+                    </exclusion>
+                    <exclusion>
+                        <groupId>eu.eu-emi.security</groupId>
+                        <artifactId>canl</artifactId>
+                    </exclusion>
+                </exclusions>
             </dependency>
             <dependency>
                 <groupId>org.glite.authz</groupId>
@@ -713,6 +703,12 @@
                 <groupId>org.dcache</groupId>
                 <artifactId>xrootd4j-gsi</artifactId>
                 <version>${version.xrootd4j}</version>
+                <exclusions>
+                    <exclusion>
+                        <groupId>org.bouncycastle</groupId>
+                        <artifactId>bcprov-jdk15on</artifactId>
+                    </exclusion>
+                </exclusions>
             </dependency>
             <dependency>
                 <groupId>org.dcache</groupId>
@@ -733,6 +729,12 @@
                 <groupId>org.dcache</groupId>
                 <artifactId>xrootd4j-authz-plugin-alice</artifactId>
                 <version>1.2.0</version>
+                <exclusions>
+                    <exclusion>
+                        <groupId>org.bouncycastle</groupId>
+                        <artifactId>bcprov-jdk15on</artifactId>
+                    </exclusion>
+                </exclusions>
             </dependency>
 
             <dependency>