diff --git a/bin/dnssec/dnssec-makekeyset.c b/bin/dnssec/dnssec-makekeyset.c
index dca9de0fd8..8480f3a810 100644
--- a/bin/dnssec/dnssec-makekeyset.c
+++ b/bin/dnssec/dnssec-makekeyset.c
@@ -215,7 +215,7 @@ main(int argc, char *argv[]) {
 
 	for (i = 0; i < argc; i++) {
 		isc_uint16_t id;
-		int alg;
+		unsigned int alg;
 		dns_fixedname_t fname;
 		dns_name_t *name;
 		char namestr[1025];
@@ -224,7 +224,8 @@ main(int argc, char *argv[]) {
 		isc_buffer_add(&b, strlen(argv[i]));
 		dns_fixedname_init(&fname);
 		name = dns_fixedname_name(&fname);
-		result = dst_key_parsefilename(&b, mctx, name, &id, &alg, NULL);
+		result = dst_key_parsefilename(&b, mctx, name, &id, &alg,
+					       NULL);
 		if (result != ISC_R_SUCCESS)
 			fatal("%s is not a valid key filename", argv[i]);
 		strncpy(namestr, nametostr(name), sizeof(namestr) - 1);
diff --git a/bin/dnssec/dnssec-signkey.c b/bin/dnssec/dnssec-signkey.c
index c3cf0e14ff..651928c948 100644
--- a/bin/dnssec/dnssec-signkey.c
+++ b/bin/dnssec/dnssec-signkey.c
@@ -275,7 +275,7 @@ main(int argc, char *argv[]) {
 
 	for (i = 0; i < argc; i++) {
 		isc_uint16_t id;
-		int alg;
+		unsigned int alg;
 		dns_fixedname_t fname;
 		dns_name_t *name;
 
@@ -283,7 +283,8 @@ main(int argc, char *argv[]) {
 		isc_buffer_add(&b, strlen(argv[i]));
 		dns_fixedname_init(&fname);
 		name = dns_fixedname_name(&fname);
-		result = dst_key_parsefilename(&b, mctx, name, &id, &alg, NULL);
+		result = dst_key_parsefilename(&b, mctx, name, &id, &alg,
+					       NULL);
 		if (result != ISC_R_SUCCESS)
 			usage();