diff --git a/openssl.spec b/openssl.spec
index e3a19263f05d17fcb97ba59a4aa61fa0b74bb8d0..c6f32ffd300ca4ff07f51081695cb139abd36cef 100644
--- a/openssl.spec
+++ b/openssl.spec
@@ -2,7 +2,7 @@
 Name:        openssl
 Epoch:       1
 Version:     3.0.9
-Release:     2
+Release:     3
 Summary:     Cryptography and SSL/TLS Toolkit
 License:     OpenSSL and SSLeay
 URL:         https://www.openssl.org/
@@ -94,7 +94,11 @@ sslflags="--libdir=%{_libdir}"
 sslflags=enable-ec_nistp_64_gcc_128
 %endif
 
-RPM_OPT_FLAGS="$RPM_OPT_FLAGS -Wa,--noexecstack -Wa,--generate-missing-build-notes=yes -DPURIFY $RPM_LD_FLAGS"
+%if "%toolchain" == "clang"
+	RPM_OPT_FLAGS="$RPM_OPT_FLAGS -Wa,--noexecstack -DPURIFY $RPM_LD_FLAGS"
+%else
+	RPM_OPT_FLAGS="$RPM_OPT_FLAGS -Wa,--noexecstack -Wa,--generate-missing-build-notes=yes -DPURIFY $RPM_LD_FLAGS"
+%endif
 ./Configure \
 	--prefix=%{_prefix} --openssldir=%{_sysconfdir}/pki/tls ${sslflags} \
 	zlib enable-camellia enable-seed enable-rfc3779 \
@@ -230,6 +234,9 @@ make test || :
 %ldconfig_scriptlets libs
 
 %changelog
+* Wed Aug 30 2023 yoo <sunyuechi@iscas.ac.cn> - 1:3.0.9-3
+- fix clang build error
+
 * Tue Aug 08 2023 zhujianwei <zhujianwei7@huawei.com> - 1:3.0.9-2
 - fix CVE-2023-2975 CVE-2023-3446 CVE-2023-3816