diff --git a/python-trustme.spec b/python-trustme.spec
index 5a895b3..357d5ad 100644
--- a/python-trustme.spec
+++ b/python-trustme.spec
@@ -18,6 +18,13 @@ which nobody trusts.  But you can trust it.  Trust me.}
 
 %bcond_without  tests
 
+%if %{defined el8}
+# The upstream test suite uses cryptography's rfc4514_string method, which
+# wasn't added until version 2.5.  RHEL 8 currently only provides version 2.3.
+# https://cryptography.io/en/latest/changelog/?highlight=rfc4514_string#v2-5
+%global skip_list test_ca_custom_names or test_issue_cert_custom_names
+%endif
+
 
 Name:           python-%{pkgname}
 Version:        0.6.0
@@ -60,7 +67,7 @@ rm -rf %{eggname}.egg-info
 
 %if %{with tests}
 %check
-%pytest --verbose
+%pytest --verbose -k "not (%{?skip_list})"
 %endif