From 8d460bed78e2684fbb0cb150bbf800dcc4d29c54 Mon Sep 17 00:00:00 2001
From: Mark Andrews <marka@isc.org>
Date: Wed, 26 Nov 2008 03:06:11 +0000
Subject: [PATCH] add dnssec-keyfromlabel description

---
 CHANGES | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/CHANGES b/CHANGES
index 42435755dd..35410b64d1 100644
--- a/CHANGES
+++ b/CHANGES
@@ -482,7 +482,10 @@
 
 2348.	[func]		Use the EVP interface to OpenSSL. Add PKCS#11 support.
 			Documentation is in the new README.pkcs11 file.
-			[RT #16844]
+			New tool, dnssec-keyfromlabel, which takes the
+			label of a key pair in the HSM and constructs a DNS
+			key pair for use by named and dnssec-signzone which
+			uses it.  [RT #16844]
 
 2347.	[bug]		Delete now traverses the RB tree in the canonical
 			order. [RT #17451]