While addressing the 'sslget' issues documented in:

• Bugzilla Bug #859043 - ipa-server-install results in error -598
• Bugzilla Bug #953464 - ipa-server-install crashes due to sslget error

it was suggested that 'sslget' could be improved to handle issues associated with connection errors in a more robust manner.

For example:

Right now the code rifles through the NSPR returned list of candidate IP addresses for a given connection. It tries the first available one being IPv4 or IPv6 addresses. If the first available candidate address fails, the program gives up.

Alee would like the tool to be improved such that it will intelligently progress through the list of candidate addresses one at a time in the following fashion:

1. Filter out link local addresses which we have trouble connecting to. (The code does this already)

2. Come up with a criteria by which to attempt subsequent addresses in the candidate list, knowing when to give up entirely. The idea is to be able to select a live address amongst the list without spending too much time churning through a list of addresses sure to fail. This will involve the intelligent evaluation of the return codes presented by failed connection attempts.