diff --git a/openssl-pkcs11.spec b/openssl-pkcs11.spec
index 4e6a6ac6c2668835d6eae1121ac5c062982ff15b..12c09eefa82133455c993ed262a9db99439f078d 100644
--- a/openssl-pkcs11.spec
+++ b/openssl-pkcs11.spec
@@ -1,6 +1,6 @@
 Name:           openssl-pkcs11
 Version:        0.4.11
-Release:        1
+Release:        2
 Summary:        A PKCS#11 engine for use with OpenSSL
 License:        LGPLv2+ and BSD
 URL:            https://github.com/OpenSC/libp11
@@ -37,7 +37,7 @@ Development headers and libraries for %{name}
 autoreconf -fvi
 export CFLAGS="%{optflags}"
 %configure --with-enginesdir=%{_libdir}/engines-1.1
-make %{?_smp_mflags} V=1
+make %{?_smp_mflags} CFLAGS="$RPM_OPT_FLAGS -s" V=1
 
 %install
 rm -rf %{buildroot}
@@ -73,6 +73,9 @@ make check
 %exclude %{_defaultdocdir}/libp11/*
 
 %changelog
+* Sat Mar 20 2021 shenyangyang <shenyangyang4@huawei.com> - 0.4.11-2
+- Add strip secure compile option
+
 * Sat Jan 23 2021 zoulin <zoulin13@huawei.com> - 0.4.11-1
 - update version to 0.4.11