In version 1.3.5 of scribe-java, the method getRequestTokenEndpoint()
of TwitterApi
uses the non-SSL version of the URL.
In version 1.3.6 this has been fixed. Unfortunetaly, this version has not yet made its way to the downloads section (http://mvnrepository.com/artifact/org.scribe/scribe). So one has to build the current version by himself unless it is available there.