From b5994c09e839413716ad0b2ded1128a0f6280ba8 Mon Sep 17 00:00:00 2001
From: Jun Ouyang <ouyangjun1999@gmail.com>
Date: Tue, 10 Mar 2026 21:26:40 +0800
Subject: [PATCH 1/3] test: skip t/170-proxy-ssl-cert.t test for BoringSSL

---
 t/170-proxy-ssl-cert.t | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/t/170-proxy-ssl-cert.t b/t/170-proxy-ssl-cert.t
index f459ccb326..798cfaf64f 100644
--- a/t/170-proxy-ssl-cert.t
+++ b/t/170-proxy-ssl-cert.t
@@ -8,7 +8,9 @@ repeat_each(3);
 my $NginxBinary = $ENV{'TEST_NGINX_BINARY'} || 'nginx';
 my $openssl_version = eval { `$NginxBinary -V 2>&1` };
 
-if ($openssl_version =~ m/built with OpenSSL (0|1\.0\.(?:0|1[^\d]|2[a-d]).*)/) {
+if ($openssl_version =~ m/BoringSSL/) {
+    plan(skip_all => "does not support BoringSSL");
+} elsif ($openssl_version =~ m/built with OpenSSL (0|1\.0\.(?:0|1[^\d]|2[a-d]).*)/) {
     plan(skip_all => "too old OpenSSL, need >= 1.0.2e, was $1");
 } else {
     plan tests => repeat_each() * (blocks() * 5 + 17);

From 938c3d97aa7709fbbc814691217808322adcbaa5 Mon Sep 17 00:00:00 2001
From: Jun Ouyang <ouyangjun1999@gmail.com>
Date: Tue, 10 Mar 2026 21:26:50 +0800
Subject: [PATCH 2/3] test: fix t/138-balancer.t case not handle boringssl
 error log bug

---
 t/138-balancer.t | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/t/138-balancer.t b/t/138-balancer.t
index 547b351c7c..74c44c0a81 100644
--- a/t/138-balancer.t
+++ b/t/138-balancer.t
@@ -735,4 +735,4 @@ qr/502 Bad Gateway/
 --- no_error_log
 [error]
 --- error_log eval
-qr/SSL_do_handshake.*routines::tlsv1 alert no application protocol:SSL alert number 120\) while SSL handshaking to upstream/
+qr/SSL_do_handshake.*(?:no application protocol|NO_APPLICATION_PROTOCOL).*SSL alert number 120\) while SSL handshaking to upstream/

From ec558ed14e1a1fe762d39261a6a63b523be41cf4 Mon Sep 17 00:00:00 2001
From: Jun Ouyang <ouyangjun1999@gmail.com>
Date: Tue, 10 Mar 2026 21:27:43 +0800
Subject: [PATCH 3/3] test: fix t/170-ssl-session-reuse.t getsslsession not
 return correctly at boringssl bug

---
 t/170-ssl-session-reuse.t | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/t/170-ssl-session-reuse.t b/t/170-ssl-session-reuse.t
index 534aa29d51..b17cf746a5 100644
--- a/t/170-ssl-session-reuse.t
+++ b/t/170-ssl-session-reuse.t
@@ -140,6 +140,8 @@ close: 1 nil
         }
     }
 --- config
+    # fixme: getsslsession doesn't work with BoringSSL TLSv1.3 case, temporarily disable TLSv1.3 for this test.
+    lua_ssl_protocols TLSv1.2;
     resolver $TEST_NGINX_RESOLVER ipv6=off;
     location /t {
         content_by_lua_block {