OprSysOp
Good Afternoon,
I'm just running through my servers with OpenVAS and for my OpenVPN server, I received several notifications regarding SSL/TLS cookies. Specifically, I would like to set the session cookie attributes to 'secure' and 'httpOnly'. I am hoping that someone would be able to point me in the right direction. I have been looking through all of the configurations as well as googling like mad and have been completely unable to find anything.
I'm running Zentyal Development Edition 5.1 with OpenVPN 2.3.10.
Can someone help?
Thanks!
