BlackHole 2ch 0.7.1 package and embedded driver fail macOS signature verification
Please Confirm
- I have read the FAQ and Wiki where most common issues can be resolved.
- I have searched Discussions to see if the same question has already been asked.
- This is a bug and not a question about audio routing or configuration, which should be posted in Discussions or asked in our Discord server.
macOS Version
macOS 26 Tahoe
BlackHole Build(s) Affected
- 2 channel
- 16 channel
- 64 channel
- other/custom build
Describe the bug
Hi,
I’m testing BlackHole 2ch as part of a macOS audio-routing technical spike and stopped before installation because both the installer package and the embedded driver fail standard macOS signature verification.
Environment
- BlackHole: 2ch version 0.7.1
- Mac: Apple Silicon MacBook Air
- macOS: 26.5.2, build 25F84
- Package source: https://existential.audio/downloads/BlackHole2ch-0.7.1.pkg
- SHA-256:
57b540f27a3e29c37e310e01bee0fdfab76733087e47f997ef9dccf851400dcf
The checksum matches the currently published package metadata.
Package verification
$ pkgutil --check-signature /private/tmp/BlackHole2ch-0.7.1.pkg
Package "BlackHole2ch-0.7.1.pkg":
Status: invalid signature
Reproduction Steps
Download BlackHole 2ch 0.7.1 from: https://existential.audio/downloads/BlackHole2ch-0.7.1.pkg
Verify the downloaded file SHA-256: 57b540f27a3e29c37e310e01bee0fdfab76733087e47f997ef9dccf851400dcf
Run: pkgutil --check-signature /private/tmp/BlackHole2ch-0.7.1.pkg
Observe: Status: invalid signature
Expand the package: pkgutil --expand-full /private/tmp/BlackHole2ch-0.7.1.pkg /private/tmp/blackhole-071-inspect.11q2PN/expanded
Verify the embedded driver: codesign --verify --deep --strict --verbose=4 /private/tmp/blackhole-071-inspect.11q2PN/expanded/BlackHole.pkg/Payload/BlackHole2ch.driver
Observe: invalid signature (code or signature have been modified) In architecture: arm64
Expected Behavior
The official BlackHole 2ch installer package and its embedded driver should pass standard macOS signature verification without requiring Gatekeeper bypass, reduced system security, or local re-signing.
Screenshots
No response
Source: ExistentialAudio/BlackHole