[JENKINS-36923] Give ownership of bcpkix dependency to bouncycastle-api plugin

core/src/main/java/hudson/ClassicPluginStrategy.java

@@ -417,7 +417,8 @@ public class ClassicPluginStrategy implements PluginStrategy {
             new DetachedPlugin("windows-slaves", "1.547.*", "1.0"),
             new DetachedPlugin("antisamy-markup-formatter", "1.553.*", "1.0"),
             new DetachedPlugin("matrix-project", "1.561.*", "1.0"),
-            new DetachedPlugin("junit", "1.577.*", "1.0")
+            new DetachedPlugin("junit", "1.577.*", "1.0"),
+            new DetachedPlugin("bouncycastle-api", "2.16.*", "2.16.0-SNAPSHOT") // TODO remove -SNAPSHOT
     ));
 
     /** Implicit dependencies that are known to be unnecessary and which must be cut out to prevent a dependency cycle among bundled plugins. */

war/pom.xml

@@ -101,12 +101,6 @@ THE SOFTWARE.
       <artifactId>instance-identity</artifactId>
       <version>2.0</version>
     </dependency>
-    <dependency>
-      <!-- TODO remove once bouncycastle-api plugin bundles bouncycastle -->
-      <groupId>org.bouncycastle</groupId>
-      <artifactId>bcpkix-jdk15on</artifactId>
-      <version>1.54</version>
-    </dependency>
     <dependency>
       <groupId>org.jenkins-ci.modules</groupId>
       <artifactId>ssh-cli-auth</artifactId>
@@ -411,6 +405,12 @@ THE SOFTWARE.
                   <version>1.2-beta-4</version>
                   <type>hpi</type>
                 </artifactItem>
+                <artifactItem>
+                  <groupId>org.jenkins-ci.plugins</groupId>
+                  <artifactId>bouncycastle-api</artifactId>
+                  <version>2.16.0-SNAPSHOT</version>  <!-- TODO remove SNAPSHOT -->
+                  <type>hpi</type>
+                </artifactItem>
               </artifactItems>
               <outputDirectory>${project.build.directory}/${project.build.finalName}/WEB-INF/detached-plugins</outputDirectory>
               <stripVersion>true</stripVersion>