diff --git a/bin/dnssec/dnssec-signzone.c b/bin/dnssec/dnssec-signzone.c
index 9c090b033c..d8290bec65 100644
--- a/bin/dnssec/dnssec-signzone.c
+++ b/bin/dnssec/dnssec-signzone.c
@@ -661,7 +661,7 @@ loadzonekeys(dns_db_t *db, dns_dbversion_t *version) {
 	dns_dbnode_t *node;
 	isc_result_t result;
 	dst_key_t *keys[20];
-	int nkeys, i;
+	unsigned int nkeys, i;
 
 	origin = dns_db_origin(db);
 
diff --git a/bin/tests/signer.c b/bin/tests/signer.c
index 9c090b033c..d8290bec65 100644
--- a/bin/tests/signer.c
+++ b/bin/tests/signer.c
@@ -661,7 +661,7 @@ loadzonekeys(dns_db_t *db, dns_dbversion_t *version) {
 	dns_dbnode_t *node;
 	isc_result_t result;
 	dst_key_t *keys[20];
-	int nkeys, i;
+	unsigned int nkeys, i;
 
 	origin = dns_db_origin(db);