Vulnerability assessment - SSL/TLS Cipher Suite Detect MD5

kuttyjack

Hi,

I have openvpn server running in AWS, Created the openvpn server from AWS Market place with 10 licenses.

I am running Vulnerability assessment test against the Openvpn instances, in VA report i am getting below results,

SSL/TLS Cipher Suite Detect MD5 and OpenVPN - session cookie is not HTTP-Only

I would like to fix this, any help would be appreciated.

version:
openvpn-as - 2.0.2-Ubuntu13
openssl - 1.0.1e-3ubuntu1

Regards,
Sathish S.