diff --git a/python-cheroot.changes b/python-cheroot.changes
index 68fb06e..08a7d7e 100644
--- a/python-cheroot.changes
+++ b/python-cheroot.changes
@@ -1,3 +1,8 @@
+-------------------------------------------------------------------
+Wed Jan 10 17:40:08 UTC 2024 - Daniel Garcia <daniel.garcia@suse.com>
+
+- Disable failing tests with openssl 3.2
+
 -------------------------------------------------------------------
 Wed Jan  3 07:56:40 UTC 2024 - Antonio Larrosa <alarrosa@suse.com>
 
diff --git a/python-cheroot.spec b/python-cheroot.spec
index 810a2eb..ae67bae 100644
--- a/python-cheroot.spec
+++ b/python-cheroot.spec
@@ -113,6 +113,8 @@ donttest="(test_tls_client_auth and False-localhost-builtin)"
 # looks like there's a bug with pytest.mark.forked
 # https://github.com/cherrypy/cheroot/issues/511
 donttest+=" or test_high_number_of_file_descriptor"
+# Openssl 3.2 test failures gh#cherrypy/cheroot#645
+donttest+=" or test_https_over_http_error"
 %pytest --pyargs cheroot $pytest_opts -k "not ($donttest)"
 popd