anchor.diff:                  _ ->
                       Pair
               end
  +    end.
  +
  +cluster_cert_and_pkey_pem() ->
  +    case cluster_ca() of
  +        {_, _} = Pair ->
  +            Pair;
  +        {_, Cert, Key} ->
  +            {Cert, Key}
       end.
   
   generate_and_set_cert_and_pkey() ->
  
positive.code:             erlang:exit({bad_cert_or_pkey, BadResults})
      end,
      {Cert, PKey}.
  
negative.code: 
  -include("ns_common.hrl").
  
  -include_lib("public_key/include/public_key.hrl").
  
  -export([cluster_cert_and_pkey_pem/0,
           do_generate_cert_and_pkey/2,
           validate_cert/1,
           generate_and_set_cert_and_pkey/0,
           cluster_ca/0,
           set_cluster_ca/1]).
  
  cluster_ca() ->
      case ns_config:search(cert_and_pkey) of
          {value, Tuple} ->
              Tuple;
          false ->
              Pair = generate_cert_and_pkey(),
              RV = ns_config:run_txn(
  