TLS should be active. Are you using meta.json? I had lots of trouble with that and ended up leaving it in the last state that worked with Fedi:

  "meta": {
    "federation_name": "Cyphertribe Genesis",
    "meta_override_url": "\"https://fm.genesis.ctrb.io/meta.json\""
  },