func hasValue(d map[string][]byte, keys ...string) bool {
	for _, k := range keys {
		v := d[k]
		if len(v) == 0 {
			return false
		}
	}
	return true
}

// ExtractCertInfo extracts server key, certificate, and OCSP staple
func ExtractCertInfo(scrt *v1.Secret) (certInfo *credentials.CertInfo, err error) {
	ret := &credentials.CertInfo{}
	if hasValue(scrt.Data, GenericScrtCert, GenericScrtKey) {

			}
		}
		return true
	})
}

func isValidSecret(secret *resource.Instance) bool {
	s, ok := secret.Message.(*corev1.Secret)
	if !ok {
		return false
	}
	certs, err := kube.ExtractCertInfo(s)
	if err != nil {
		return false
	}
	if err = xds.ValidateCertificate(certs.Cert); err != nil {
		return false
	}
	return true
}