refine dnssec-keyfromlabel description

diff --git a/CHANGES b/CHANGES
index 35410b64d1c8ddb7993a196bdd1f3fe6baea0760..33934ce48957863db3c1f857b931e640c47bccc8 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -483,9 +483,9 @@
 2348.  [func]          Use the EVP interface to OpenSSL. Add PKCS#11 support.
                        Documentation is in the new README.pkcs11 file.
                        New tool, dnssec-keyfromlabel, which takes the
-                       label of a key pair in the HSM and constructs a DNS
-                       key pair for use by named and dnssec-signzone which
-                       uses it.  [RT #16844]
+                       label of a key pair in a HSM and constructs a DNS
+                       key pair for use by named and dnssec-signzone.
+                       [RT #16844]
 
 2347.  [bug]           Delete now traverses the RB tree in the canonical
                        order. [RT #17451]