--- a/quic_ciphers.t
+++ b/quic_ciphers.t
@@ -89,9 +89,14 @@ is(get("\x13\x02\x13\x01"), 'TLS_AES_256
 # prefer TLS_AES_128_CCM_SHA256 with fallback to GCM,
 # the cipher is enabled by default in some distributions
 
+TODO: {
+todo_skip 'not yet', 1 unless $t->has_version('1.25.2');
+
 like(get("\x13\x04\x13\x01"), qr/TLS_AES_128_[GC]CM_SHA256/,
 	'TLS_AES_128_CCM_SHA256');
 
+}
+
 ###############################################################################
 
 sub get {

--- a/quic_retry.t
+++ b/quic_retry.t
@@ -108,6 +108,9 @@ is($frame->{error}, 11, 'retry token inv
 
 # connection with retry token, corrupted
 
+TODO: {
+local $TODO = 'not yet' unless $t->has_version('1.25.2');
+
 substr($retry_token, 32) ^= "\xff";
 $s = Test::Nginx::HTTP3->new(8980, token => $retry_token, probe => 1);
 $frames = $s->read(all => [{ type => 'CONNECTION_CLOSE' }]);
@@ -115,4 +118,6 @@ substr($retry_token, 32) ^= "\xff";
 ($frame) = grep { $_->{type} eq "CONNECTION_CLOSE" } @$frames;
 is($frame->{error}, 11, 'retry token decrypt error');
 
+}
+
 ###############################################################################