diff --git a/src/ssl.c b/src/ssl.c
index 4b2135940..5afd24e85 100644
--- a/src/ssl.c
+++ b/src/ssl.c
@@ -11476,6 +11476,12 @@ int wolfSSL_set_compression(WOLFSSL* ssl)
         return opt;
     }
 
+    long wolfSSL_CTX_clear_options(WOLFSSL_CTX* ctx, long opt)
+    {
+        WOLFSSL_ENTER("SSL_CTX_clear_options");
+        ctx->mask &= ~opt;
+        return opt;
+    }
 
     int wolfSSL_set_rfd(WOLFSSL* ssl, int rfd)
     {
diff --git a/wolfssl/openssl/ssl.h b/wolfssl/openssl/ssl.h
index f144653a9..df445f8b2 100644
--- a/wolfssl/openssl/ssl.h
+++ b/wolfssl/openssl/ssl.h
@@ -412,8 +412,10 @@ typedef WOLFSSL_X509_STORE_CTX X509_STORE_CTX;
 
 #define RAND_status wolfSSL_RAND_status
 #define RAND_bytes wolfSSL_RAND_bytes
-#define SSLv23_server_method wolfSSLv23_server_method
-#define SSL_CTX_set_options wolfSSL_CTX_set_options
+#define SSLv23_server_method  wolfSSLv23_server_method
+#define SSL_CTX_set_options   wolfSSL_CTX_set_options
+#define SSL_CTX_clear_options wolfSSL_CTX_clear_options
+
 #define SSL_CTX_check_private_key wolfSSL_CTX_check_private_key
 
 #define ERR_free_strings wolfSSL_ERR_free_strings
diff --git a/wolfssl/ssl.h b/wolfssl/ssl.h
index 75a01754c..c9ccbb273 100644
--- a/wolfssl/ssl.h
+++ b/wolfssl/ssl.h
@@ -1238,6 +1238,7 @@ WOLFSSL_API int  wolfSSL_RAND_status(void);
 WOLFSSL_API int  wolfSSL_RAND_bytes(unsigned char* buf, int num);
 WOLFSSL_API WOLFSSL_METHOD *wolfSSLv23_server_method(void);
 WOLFSSL_API long wolfSSL_CTX_set_options(WOLFSSL_CTX*, long);
+WOLFSSL_API long wolfSSL_CTX_clear_options(WOLFSSL_CTX*, long);
 #ifndef NO_CERTS
   WOLFSSL_API int  wolfSSL_CTX_check_private_key(WOLFSSL_CTX*);
 #endif /* !NO_CERTS */