ipsec pki --issue suports --flag authServer option

src/libstrongswan/credentials/certificates/x509.h

@@ -39,8 +39,10 @@ enum x509_flag_t {
 	X509_AA = 			(1<<1),
 	/** cert has OCSP signer constraint */
 	X509_OCSP_SIGNER = 	(1<<2),
+	/** cert has serverAuth constraint */
+	X509_SERVER_AUTH = 	(1<<3),
 	/** cert is self-signed */
-	X509_SELF_SIGNED =  (1<<3),
+	X509_SELF_SIGNED =  (1<<4),
 };
 
 /**