Use Salesforce CLI from Behind a Company Firewall or Web Proxy
You get this type of error when you run a command after installing Salesforce CLI behind a firewall or web proxy. This error is from a Linux computer, but Windows and macOS users sometimes see a similar error.
@salesforce/cli: Updating CLI... !
▸ 'ECONNRESET': tunneling socket could not be established, cause=connect EHOSTUNREACH 0.0.23.221:8080 - Local (10.126.148.39:53107)
To address this issue, run these commands from your terminal or Windows command prompt, replacing username:pwd with your web proxy username and password. If your proxy doesn’t require these values, omit them. Also replace proxy.company.com:8080 with the URL and port of your company proxy.
npm config set https-proxy https://username:pwd@proxy.company.com:8080
npm config set proxy https://username:pwd@proxy.company.com:8080
Then set the HTTP_PROXY or HTTPS_PROXY environment variable to the full URL of the proxy. For example, on UNIX:
export HTTP_PROXY=https://username:pwd@proxy.company.com:8080
export HTTPS_PROXY=https://username:pwd@proxy.company.com:8080
set HTTP_PROXY=https://username:pwd@proxy.company.com:8080
set HTTPS_PROXY=https://username:pwd@proxy.company.com:8080
If You Still See an Error
Your Proxy Requires an Extra Certificate Authority
If you set the proxy environment variable, and you still see error messages, it’s possible that your proxy requires an extra certificate authority (CA). Ask your IT department where to find or download the certificates.
Set this environment variable to point to the CA file: NODE_EXTRA_CA_CERTS.
Your Corporate Network Is Blocking Salesforce Hosts
It’s possible that your corporate network is blocking the Salesforce hosts for updating or installing Salesforce CLI. Contact your IT department add these URLs to your allowlist:
- https://developer.salesforce.com/media/salesforce-cli
- https://registry.npmjs.org