diff --git a/python-dnspython.changes b/python-dnspython.changes
index a917f70..bbf8a16 100644
--- a/python-dnspython.changes
+++ b/python-dnspython.changes
@@ -1,3 +1,11 @@
+-------------------------------------------------------------------
+Tue Oct  8 20:19:23 UTC 2024 - Martin Hauke <mardnh@gmx.de>
+
+- Skip some tests
+  * that require a working resolver and external DNS resolution
+  * that require an openssl3 version with support for
+    ECDSA with deterministic signature (RFC 6979)"
+
 -------------------------------------------------------------------
 Sun Oct  6 07:03:50 UTC 2024 - Martin Hauke <mardnh@gmx.de>
 
diff --git a/python-dnspython.spec b/python-dnspython.spec
index 5b2b14c..d37f272 100644
--- a/python-dnspython.spec
+++ b/python-dnspython.spec
@@ -115,6 +115,17 @@ chmod -x dns/win32util.py
 
 %if %{with test}
 %check
+# remove tests that require a working resolver and external DNS resolution
+rm tests/test_async.py
+rm tests/test_doh.py
+rm tests/test_resolver.py
+rm tests/test_resolver_override.py
+# remove dnssec related tests since those require an openssl version with
+# support for supports "ECDSA with deterministic signature (RFC 6979)"
+# https://github.com/pyca/cryptography/pull/10369
+# TODO: reenable once TW ships openssl >= 3.2.0
+rm tests/test_dnssec.py
+rm tests/test_dnssecalgs.py
 %pytest
 %endif