Let's say I need to write a simple application for signing/checking some data. The hard part is, that it must be FIPS 140-2 compliant. I was thinking to do it using OpenSSL FIPS Object Module 2.0 but then I noticed the "I.G. 9.10 issue".
However, This document states that "The I.G. 9.5 issue has effectively precluded consideration of new validations for much of 2013, but with the July 25 2013 update of the Implementation Guidance (I.G.) document such validations appear to be feasible again.", so it's still unclear for me, if I can use OpenSSL FIPS Object Module 2.0 (#1747).
The question is: can I built an application based on OpenSSL FIPS Object Module 2.0 (#1747) and get it approved by CMVP? If no, what are possible alternatives to it?