View Issue Details

IDProjectCategoryView StatusLast Update
0009571Talerexchange AML officer webuipublic2026-01-25 14:08
ReporterChristian Grothoff Assigned Tosebasjm Resolution deadline
ImplementerReviewer 
Release signed byDeployed by 
VerifierCommunicator 
Data protection authority notification requiredNo  
CSIRT notification requiredNo  
Estimated effort (hours)Actual effort (hours)0 
Fast-trackNo
Work packagenone
PrioritynormalSeveritytweakReproducibilityN/A
Status closedResolutionfixed 
Platformi7OSDebian GNU/LinuxOS Versionsqueeze
Product Versiongit (master) 
Target Version1.0Fixed in Version1.0 
Summary0009571: minimum password length
DescriptionFor DORA regulation, the AML-SPA must enforce a minimum password length of 12 characters with a mix of 4 types of characters (capital, non-capital, numbers and special characters). We think that's currently not enforced, but should be.
Tagscompliance

Required notifications

Address or linkRemarkAdded byNotifiedActions

Activities

sebasjm

2025-04-28 00:14

developer   ~0024690

current requierments

length: pwd.length >= 8
at least one lowercase: regex /[a-z]/
at least one uppercase: regex /[A-Z]/
at least one decimal: regex /\d/
at least one special: regex /^a-zA-Z\d/

sebasjm

2025-04-28 00:15

developer   ~0024691

min length increased to 12

26dbbcf41..1c92825ed

Issue History

Date ModifiedUsernameFieldChange
2025-02-21 20:53Christian GrothoffNew Issue
2025-02-21 20:53Christian GrothoffStatusnew => assigned
2025-02-21 20:53Christian GrothoffAssigned To => sebasjm
2025-02-21 21:27Christian GrothoffTag Attached: BASO
2025-04-17 13:04sebasjmProduct Version => git (master)
2025-04-17 13:04sebasjmTarget Version => 1.0 stretch goals
2025-04-17 19:05Christian GrothoffTag Attached: compliance
2025-04-28 00:14sebasjmNote Added: 0024690
2025-04-28 00:15sebasjmStatusassigned => informing
2025-04-28 00:15sebasjmResolutionopen => fixed
2025-04-28 00:15sebasjmNote Added: 0024691
2025-04-28 05:29Christian GrothoffFixed in Version => 1.0
2025-04-28 05:29Christian GrothoffTarget Version1.0 stretch goals => 1.0
2025-05-10 02:11Christian GrothoffStatusinforming => closed
2026-01-25 14:08Christian GrothoffTag Detached: BASO
2026-08-23 14:17Florian DoldCategoryexchange AML backoffice (SPA) => exchange AML officer webui