add check for active tls