add clientAuth extendedKeyUsage to server certs

autoca/ca.py

@@ -85,7 +85,7 @@ class CA(object):
                                  '%sdigitalSignature, keyEncipherment' % (
                     server and '' or 'nonRepudiation, ')),
             crypto.X509Extension('extendedKeyUsage', False,
-                                 server and 'serverAuth' or 'clientAuth'),
+                                 server and 'clientAuth, serverAuth' or 'clientAuth'),
             crypto.X509Extension('nsCertType', False,
                                  server and 'client, server' or 'client'),
             ]