diff --git a/.github/lua-openssl.supp b/.github/lua-openssl.supp
index 7bf299c1..cfee9ae3 100644
--- a/.github/lua-openssl.supp
+++ b/.github/lua-openssl.supp
@@ -260,3 +260,37 @@
    obj:/usr/lib/x86_64-linux-gnu/libcrypto.so.1.1
    fun:BN_bin2bn
 }
+
+{
+   BIO_new_bio_pair
+   Memcheck:Leak
+   match-leak-kinds: indirect
+   fun:malloc
+   fun:CRYPTO_zalloc
+   obj:/usr/lib/x86_64-linux-gnu/libcrypto.so.1.1
+   fun:BIO_new
+   fun:BIO_new_bio_pair
+   obj:*
+}
+
+{
+   BIO_new_bio_pair
+   Memcheck:Leak
+   match-leak-kinds: indirect
+   fun:malloc
+   obj:/usr/lib/x86_64-linux-gnu/libcrypto.so.1.1
+   fun:BIO_ctrl
+   fun:BIO_new_bio_pair
+   obj:*
+}
+
+{
+   BIO_new_bio_pair
+   Memcheck:Leak
+   match-leak-kinds: definite
+   fun:malloc
+   fun:CRYPTO_zalloc
+   fun:BIO_new
+   fun:BIO_new_bio_pair
+   obj:*
+}
diff --git a/test/8.ssl.lua b/test/8.ssl.lua
index f1277d69..94d35506 100644
--- a/test/8.ssl.lua
+++ b/test/8.ssl.lua
@@ -601,12 +601,13 @@ function TestSSL:testSNI()
     srv:want()
   until (rs and cs) or (rs == nil or cs == nil)
 
-  local sbio = bio.filter('ssl', ssl)
-  sbio:close()
+  -- FIXME: bio ssl filter
+  local sbio = bio.filter('ssl', cli, 0)
 
   cli:clear()
   cli:shutdown()
 
+  sbio:close()
   bs:close()
   bc:close()