<!--
{
  "documentType" : "article",
  "framework" : "Security",
  "identifier" : "/documentation/Security/revocation-policy-constants",
  "metadataVersion" : "0.1.0",
  "role" : "collectionGroup",
  "title" : "Revocation Policy Constants"
}
-->

# Revocation Policy Constants

Use these flags to create a revocation policy object.

## Discussion

Use these flags with a call to the [`SecPolicyCreateRevocation(_:)`](/documentation/Security/SecPolicyCreateRevocation(_:)) function to characterize the constructed policy.

## Topics

### Constants

[`kSecRevocationCRLMethod`](/documentation/Security/kSecRevocationCRLMethod)

Perform revocation checking using the CRL (Certification Revocation List) method.

[`kSecRevocationNetworkAccessDisabled`](/documentation/Security/kSecRevocationNetworkAccessDisabled)

Consult only locally cached replies; do not use network access.

[`kSecRevocationOCSPMethod`](/documentation/Security/kSecRevocationOCSPMethod)

Perform revocation     checking using OCSP (Online Certificate Status Protocol).

[`kSecRevocationPreferCRL`](/documentation/Security/kSecRevocationPreferCRL)

Prefer CRL revocation checking over OCSP; by default, OCSP is preferred.

[`kSecRevocationRequirePositiveResponse`](/documentation/Security/kSecRevocationRequirePositiveResponse)

Require a positive response to pass the policy.

[`kSecRevocationUseAnyAvailableMethod`](/documentation/Security/kSecRevocationUseAnyAvailableMethod)

Perform either OCSP or CRL checking.


---

Copyright &copy; 2026 Apple Inc. All rights reserved. | [Terms of Use](https://www.apple.com/legal/internet-services/terms/site.html) | [Privacy Policy](https://www.apple.com/privacy/privacy-policy)