Make Docker swarm use custom certificate rather than ca cert

Could you elaborate on how the attack vector would look like and how a self created CA would mitigate that potential problem? You should definitly challenge your Security Team in this regards!!

Anyway, did you see the details on the swarm pki?