doc: add some info about TSIG generation

doc/configuration.rst

@@ -84,7 +84,12 @@ Access control list (ACL)
 
 An ACL list specifies which remotes are allowed to send the server a specific
 request. A remote can be a single IP address or a network subnet. Also a TSIG
-key can be assigned::
+key can be assigned (see :doc:`keymgr <man_keymgr>` how to generate a TSIG key)::
+
+    key:
+      - id: key1
+        algorithm: hmac-md5
+        secret: Wg==
 
     acl:
       - id: address_rule

doc/man/kdig.1in

@@ -229,6 +229,8 @@ Set the EDNS buffer size in bytes (default is 512 bytes).
 .sp
 Options \fB\-k\fP and \fB\-y\fP can not be used simultaneously.
 .sp
+Dnssec\-keygen keyfile format is not supported. Use \fIkeymgr(8)\fP instead.
+.sp
 Missing features with regard to ISC dig:
 .INDENT 0.0
 .INDENT 3.5
@@ -303,7 +305,7 @@ $ kdig +tcp example.com \-t A @192.0.2.1 \-x 2001:DB8::1 @192.0.2.2
 \fB/etc/resolv.conf\fP
 .SH SEE ALSO
 .sp
-\fIkhost(1)\fP, \fIknsupdate(1)\fP\&.
+\fIkhost(1)\fP, \fIknsupdate(1)\fP, \fIkeymgr(8)\fP\&.
 .SH AUTHOR
 CZ.NIC Labs <http://www.knot-dns.cz>
 .SH COPYRIGHT

doc/man/knsupdate.1in

@@ -156,6 +156,8 @@ Quit the program.
 .sp
 Options \fB\-k\fP and \fB\-y\fP can not be used simultaneously.
 .sp
+Dnssec\-keygen keyfile format is not supported. Use \fIkeymgr(8)\fP instead.
+.sp
 Missing features with regard to ISC nsupdate:
 .INDENT 0.0
 .INDENT 3.5
@@ -205,7 +207,7 @@ $ knsupdate
 .UNINDENT
 .SH SEE ALSO
 .sp
-\fIkdig(1)\fP, \fIkhost(1)\fP\&.
+\fIkdig(1)\fP, \fIkhost(1)\fP, \fIkeymgr(8)\fP\&.
 .SH AUTHOR
 CZ.NIC Labs <http://www.knot-dns.cz>
 .SH COPYRIGHT

doc/man_kdig.rst

@@ -207,6 +207,8 @@ Notes
 
 Options **-k** and **-y** can not be used simultaneously.
 
+Dnssec-keygen keyfile format is not supported. Use :manpage:`keymgr(8)` instead.
+
 Missing features with regard to ISC dig:
 
   Options **-f** and **-m** and query options:
@@ -258,4 +260,4 @@ Files
 See Also
 --------
 
-:manpage:`khost(1)`, :manpage:`knsupdate(1)`.
+:manpage:`khost(1)`, :manpage:`knsupdate(1)`, :manpage:`keymgr(8)`.

doc/man_knsupdate.rst

@@ -134,6 +134,8 @@ Notes
 
 Options **-k** and **-y** can not be used simultaneously.
 
+Dnssec-keygen keyfile format is not supported. Use :manpage:`keymgr(8)` instead.
+
 Missing features with regard to ISC nsupdate:
 
   Authentication using GSS-TSIG or SIG(0).
@@ -171,4 +173,4 @@ Examples
 See Also
 --------
 
-:manpage:`kdig(1)`, :manpage:`khost(1)`.
+:manpage:`kdig(1)`, :manpage:`khost(1)`, :manpage:`keymgr(8)`.