The PKIConnection class uses python-requests for HTTPS. The library
picks up several settings from environment variables, e.g. HTTP proxy
server, certificate bundle with trust anchors and authentication. A
proxy can interfere with the Dogtag installer and cause some operations
to fail.
With session.trust_env = False python-requests no longer inspects the
environment and Dogtag has full controll over its connection settings.
https://requests.readthedocs.org/en/latest/api/?highlight=trust_env#reque...
https://fedorahosted.org/pki/ticket/1733
https://fedorahosted.org/freeipa/ticket/5555