diff --git a/contrib/Makefile.am b/contrib/Makefile.am
index 07a3bf8b..07829e25 100644
--- a/contrib/Makefile.am
+++ b/contrib/Makefile.am
@@ -23,7 +23,7 @@
 
 configfiles = nghttpx-init nghttpx.service nghttpx-upstart.conf
 
-EXTRA_DIST = $(configfiles:%=%.in) nghttpx-logrotate
+EXTRA_DIST = $(configfiles:%=%.in) nghttpx-logrotate tlsticketupdate.go
 
 edit = sed -e 's|@bindir[@]|$(bindir)|g'
 
diff --git a/doc/nghttpx.h2r b/doc/nghttpx.h2r
index d9dece82..20dfab28 100644
--- a/doc/nghttpx.h2r
+++ b/doc/nghttpx.h2r
@@ -125,9 +125,10 @@ keep at most 12 keys.
 If :option:`--tls-ticket-key-memcached` is given, encryption keys are
 retrieved from memcached.  nghttpx just reads keys from memcached; one
 has to deploy key generator program to update keys frequently (e.g.,
-every 1 hour).  The memcached entry key is ``nghttpx:tls-ticket-key``.
-The data format stored in memcached is the binary format described
-below::
+every 1 hour).  The example key generator tlsticketupdate.go is
+available under contrib directory in nghttp2 archive.  The memcached
+entry key is ``nghttpx:tls-ticket-key``.  The data format stored in
+memcached is the binary format described below::
 
     +--------------+-------+----------------+
     | VERSION (4)  |LEN (2)|KEY(48 or 80) ...