Update commons-httpclient to latest version

[cgivre]

What kind an issue is this?

• Bug report. If you’ve found a bug, please provide a code snippet or test to reproduce it below.
  The easier it is to track down the bug, the faster it is solved.
• Feature Request. Start by telling us what problem you’re trying to solve.
  Often a solution already exists! Don’t send pull requests to implement new features without
  first getting our support. Sometimes we leave features out on purpose to keep the project small.

Feature description

I am working on a PR for Apache Drill to allow Drill to query ES (apache/drill#1961). In so doing, I found that ES-Hadoop has a dependency on commons-httpclient 3.0.1 which is causing issues with the Drill integration. I am wondering if this could be updated to use the current version of 4.5.12. 1

I noticed that there two related issues 3 4 however, these seem to be quite complex. I'm wondering if it would be possible to simply update the library without all the refactoring?

Additionally, there is CVE-2012-6153 out for this version of httpclient.2

[jbaiera]

This definitely relates to #1184, though I understand that issue only mentions the LLRC as the path forward for HTTP/S communication. This should be considered a reasonable fallback if the changes to LLRC needed are not all accepted. There has been some discussion about how the Hadoop client may be a special case, and thus should do things the way it expects instead of pushing those concerns into the LLRC, which is a more general client.