diff --git a/registry/registry.go b/registry/registry.go
index 2a914963bd..52b8759d9c 100644
--- a/registry/registry.go
+++ b/registry/registry.go
@@ -55,7 +55,7 @@ func hasFile(files []os.FileInfo, name string) bool {
 // provided TLS configuration.
 func ReadCertsDirectory(tlsConfig *tls.Config, directory string) error {
 	fs, err := ioutil.ReadDir(directory)
-	if err != nil && !os.IsNotExist(err) {
+	if err != nil && !os.IsNotExist(err) && !os.IsPermission(err) {
 		return err
 	}