The first hunk of commons-httpclient-3.1-SSLProtocolSocketFactory.java.patch does not apply. As that concerns CVS info in a comment, removing the hunk fixes the issue.
13 Jun 2015; Ulrich Müller <ulm@gentoo.org> files/commons-httpclient-3.1-SSLProtocolSocketFactory.java.patch: [QA] Remove first hunk from patch, otherwise it will fail due to CVS keyword expansion. Problem already fixed so please sync your sources and try again. Thanks for the heads up.