diff --git a/lib/otp/Makefile.am b/lib/otp/Makefile.am
index 80f99bf01..12077a189 100644
--- a/lib/otp/Makefile.am
+++ b/lib/otp/Makefile.am
@@ -40,6 +40,10 @@ if do_roken_rename
 ROKEN_SRCS = snprintf.c strcasecmp.c strncasecmp.c strlwr.c strlcpy.c strlcat.c
 endif
 
+if versionscript
+libotp_la_LDFLAGS += $(LDFLAGS_VERSION_SCRIPT)$(srcdir)/version-script.map
+endif
+
 $(libotp_la_OBJECTS): $(ndbm_wrap)
 
 ndbm_wrap.c:
diff --git a/lib/otp/version-script.map b/lib/otp/version-script.map
new file mode 100644
index 000000000..c6acbfdae
--- /dev/null
+++ b/lib/otp/version-script.map
@@ -0,0 +1,24 @@
+HEIMDAL_OTP_1.0 {
+	global:
+		otp_challenge;
+		otp_checksum;
+		otp_db_close;
+		otp_db_open;
+		otp_delete;
+		otp_error;
+		otp_get;
+		otp_parse;
+		otp_parse_altdict;
+		otp_parse_hex;
+		otp_parse_stddict;
+		otp_print_hex;
+		otp_print_hex_extended;
+		otp_print_stddict;
+		otp_print_stddict_extended;
+		otp_put;
+		otp_simple_get;
+		otp_verify_user;
+		otp_verify_user_1;
+	local:
+		*;
+};