<!--
{
  "availability" : [
    "iOS: 2.0.0 -",
    "iPadOS: 2.0.0 -",
    "macCatalyst: 13.0.0 -",
    "macOS: 10.0.0 -",
    "tvOS: 9.0.0 -",
    "visionOS: 1.0.0 -",
    "watchOS: 2.0.0 -"
  ],
  "documentType" : "symbol",
  "framework" : "Security",
  "identifier" : "/documentation/Security/SecPolicyCreateQWACTLSBinding(_:)",
  "metadataVersion" : "0.1.0",
  "role" : "Function",
  "symbol" : {
    "kind" : "Function",
    "modules" : [
      "Security"
    ],
    "preciseIdentifier" : "c:@F@SecPolicyCreateQWACTLSBinding"
  },
  "title" : "SecPolicyCreateQWACTLSBinding(_:)"
}
-->

# SecPolicyCreateQWACTLSBinding(_:)

```
func SecPolicyCreateQWACTLSBinding(_ hostname: CFString) -> SecPolicy?
```

## Parameters

`hostname`

The policy will require the specified hostname to match the SAN
list in the leaf certificate.

## Return Value

A policy object. The caller is responsible for calling CFRelease on
this when it is no longer needed.

## Discussion

\abstract Returns a policy object for verifying an EU 2-QWAC certificate (a QWAC
issued for TLS certificate binding).
\discussion Builds on the Basic X.509 policy: it checks validity, that the leaf
is issued for TLS certificate binding (the id-kp-tls-binding EKU and the
qualified certificate statements of ETSI TS 119 411-5), and that the chain
terminates at a QWAC-constrained EU Trusted List anchor. It validates the
certificate profile only; the binding to the TLS certificate is performed by
SecTrustCreateAndVerifyQWACTLSBinding (see <Security/SecQWACTLSBinding.h>).

---

Copyright &copy; 2026 Apple Inc. All rights reserved. | [Terms of Use](https://www.apple.com/legal/internet-services/terms/site.html) | [Privacy Policy](https://www.apple.com/privacy/privacy-policy)