diff --git a/ChangeLog b/ChangeLog
index 7643a92..2bcf3f9 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,8 +1,9 @@
-UNRELEASED Version 0.7.1
+2018-02-17 Version 0.7.1
     - Update ed25519 tests, including using sample keys from RFC 8032 Section
       7.1 and the sample message from RFC 6376
     - Return an empty list (as expected) when no AR headers are found or no AR
       arc stamps are found and the chain terminated (LP: #1748146)
+    - Use correct h= tag in dknewnkey.py generated DKIM records for RSA
 
 2018-02-07 Version 0.7.0
     - Initial ed25519 implementation based on draft-ietf-dcrup-dkim-crypto
diff --git a/dknewkey.py b/dknewkey.py
index 8eef204..bb9425d 100644
--- a/dknewkey.py
+++ b/dknewkey.py
@@ -76,7 +76,7 @@ def ExtractRSADnsPublicKey(private_key_file, dns_file):
     os.unlink(working_file)
   dns_fp = open(dns_file, "w+")
   print >> sys.stderr, 'writing ' + dns_file
-  print >> dns_fp, "k=rsa; h=sha-256; p={0}".format(output)
+  print >> dns_fp, "k=rsa; h=sha256; p={0}".format(output)
   dns_fp.close()
 
 def ExtractEd25519PublicKey(private_key_file, dns_file, priv_key):