M2Crypto is required to create the signature string and verify if it is
valid or not.

The signature private file is not required to verify the signature it is
only used to create the signature string.

The signature verification requires only the public file...

We should not send the signature in the property dict. Otherwise,
the validation of json schema will fail.

Also fix formatting a bit.

It should return the file descriptor instead of file content as string.

This implementation does not consume RAM Memory, so it is safer to
download big files.

When you call file_descriptor.close, it will remove the file from tmp
folder automatically.

There is no need to read and store downloaded file. Returning the location is
good enough.

Rest of file requires hexdigested file.

There is no need to read whole file into memory on library level. So calculate
sum in chunks and give request method file descriptor.

Indeed, some day documentation shall be written, as soon as API will be defined.

HTTPConnection accept port as none, there is no need to play with it.