diff --git a/t/138-balancer.t b/t/138-balancer.t
index 547b351c7c..74c44c0a81 100644
--- a/t/138-balancer.t
+++ b/t/138-balancer.t
@@ -735,4 +735,4 @@ qr/502 Bad Gateway/
 --- no_error_log
 [error]
 --- error_log eval
-qr/SSL_do_handshake.*routines::tlsv1 alert no application protocol:SSL alert number 120\) while SSL handshaking to upstream/
+qr/SSL_do_handshake.*(?:no application protocol|NO_APPLICATION_PROTOCOL).*SSL alert number 120\) while SSL handshaking to upstream/
diff --git a/t/170-proxy-ssl-cert.t b/t/170-proxy-ssl-cert.t
index f459ccb326..798cfaf64f 100644
--- a/t/170-proxy-ssl-cert.t
+++ b/t/170-proxy-ssl-cert.t
@@ -8,7 +8,9 @@ repeat_each(3);
 my $NginxBinary = $ENV{'TEST_NGINX_BINARY'} || 'nginx';
 my $openssl_version = eval { `$NginxBinary -V 2>&1` };
 
-if ($openssl_version =~ m/built with OpenSSL (0|1\.0\.(?:0|1[^\d]|2[a-d]).*)/) {
+if ($openssl_version =~ m/BoringSSL/) {
+    plan(skip_all => "does not support BoringSSL");
+} elsif ($openssl_version =~ m/built with OpenSSL (0|1\.0\.(?:0|1[^\d]|2[a-d]).*)/) {
     plan(skip_all => "too old OpenSSL, need >= 1.0.2e, was $1");
 } else {
     plan tests => repeat_each() * (blocks() * 5 + 17);
diff --git a/t/170-ssl-session-reuse.t b/t/170-ssl-session-reuse.t
index 534aa29d51..b17cf746a5 100644
--- a/t/170-ssl-session-reuse.t
+++ b/t/170-ssl-session-reuse.t
@@ -140,6 +140,8 @@ close: 1 nil
         }
     }
 --- config
+    # fixme: getsslsession doesn't work with BoringSSL TLSv1.3 case, temporarily disable TLSv1.3 for this test.
+    lua_ssl_protocols TLSv1.2;
     resolver $TEST_NGINX_RESOLVER ipv6=off;
     location /t {
         content_by_lua_block {