fix!(backup): denying backup upload for non-encrypted firewalls

Author: Tbaile

packages/ns-api/files/ns.backup

@@ -170,6 +170,8 @@ elif cmd == 'call':
             print(json.dumps(utils.generic_error(f'remote list failed')))
 
     elif action == 'registered-backup':
+        if os.path.exists(PASSPHRASE_PATH):
+            print(utils.validation_error('passphrase', 'missing'))
         try:
             # create backup
             file_name = create_backup()

packages/ns-plug/files/send-backup

@@ -21,11 +21,12 @@ function send {
         # send encrypted backup
         gpg --batch -c --yes --passphrase-file $PASSPHRASE $BACKUP
         remote-backup upload "$BACKUP.gpg"
+        mv $MD5 $MD5_LAST
     else
-        remote-backup upload "$BACKUP"
+        # password not set, abort upload
+        exit 4
     fi
     rm -f "$BACKUP" "$BACKUP.gpg"
-    mv $MD5 $MD5_LAST
     exit $?
 }